Privacy Policy

1. Introduction

Spice Cloud Technologies Inc. (“BigSpice”, “we”, “us”, or “our”) operates the BigSpice B2B marketplace at www.bigspice.in. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you use our platform. Please read it carefully.

2. Information We Collect

We collect the following categories of information:

• Account information — When you register, you provide your full name, business email address, phone number, password, business/store name, business type, product/service categories, address, website, and optional details such as your tax number and store logo.
• Listing & requirement content — Product or service listings, buying requirements, images, tags, and descriptions you create on the platform.
• Communications — Messages exchanged between buyers and sellers through our messaging system.
• Usage data — Pages visited, search queries, store views, wishlist actions, and other interactions with the platform.
• Device & technical data — IP address, browser type, device type, and operating system, collected automatically via server logs.

3. How We Use Your Information

We use the information collected to:

• Create and manage your account and provide the Service.
• Match buyer requirements to relevant sellers based on product/service tags and send email notifications.
• Enable direct messaging between buyers and sellers.
• Send transactional emails such as password reset links and account notifications.
• Display your store profile and listings to other platform users.
• Improve platform features, performance, and user experience.
• Detect, investigate, and prevent fraudulent or harmful activity.
• Comply with applicable legal obligations.

4. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

• With other users — Your store profile, listings, and business information are publicly visible on the platform. Buyer requirements are shared with matched sellers.
• Service providers — We use Amazon Web Services (AWS) for cloud hosting, file storage (S3), and email delivery (SES). These providers process data on our behalf under appropriate data processing agreements.
• Legal requirements — We may disclose information if required by law, regulation, or court order, or to protect the rights, property, or safety of BigSpice, our users, or the public.

5. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are stored using one-way cryptographic hashing (bcrypt) and are never stored in plain text.
• All data is stored in secured database infrastructure.
• Platform access is protected by JWT-based authentication with limited token lifetimes.
• Password reset tokens expire within 1 hour and can only be used once.

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Cookies & Local Storage

BigSpice uses browser local storage to keep you signed in between sessions by storing your session token on your device. We do not use third-party advertising or tracking cookies.

7. Retention

We retain your account and listing data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or to resolve disputes. Password reset tokens are automatically expired after 1 hour and marked as used once consumed.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Data portability (receive your data in a structured, machine-readable format).

To exercise any of these rights, please contact us at support@bigspice.in.

9. Children's Privacy

BigSpice is a B2B platform intended for business users aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18.

10. International Transfers

BigSpice is headquartered in Canada. Your data may be processed and stored on servers located in India (AWS Mumbai/Hyderabad region). By using the Service, you consent to the transfer of your information to these locations.

11. Third-Party Links

The platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: support@bigspice.in
Company: Spice Cloud Technologies Inc., Canada