TriftaBack to home

Privacy Policy

Last updated 29 October 2026

This Privacy Policy explains how Trifta (operated by Taslina Nazar, sole proprietor, India) collects, uses, stores, shares, and protects your personal information when you use the Trifta mobile app, website, or related services (the "Platform"). We comply with the Digital Personal Data Protection Act, 2023 (India) and other applicable Indian laws.

1. Information We Collect

Information you give us directly

  • Account details: name, email, phone number, password, date of birth, profile photo, bio, location.
  • Seller details: PAN, bank account number, IFSC code, and other KYC information required by our payment processor (Razorpay) to enable seller payouts.
  • Listing content: photos, descriptions, pricing, and metadata of items you list for sale.
  • Shipping address: name, address, pincode, and phone number for order delivery.
  • Messages: content of messages exchanged with other users through the in-app chat.
  • Support correspondence: emails and other communications you send us.

Information we collect automatically

  • Device and usage data: device model, operating system, app version, IP address, log-in timestamps, screens visited, features used.
  • Session data: for analytics and session replay to understand how our app is used (via PostHog, with sensitive input fields masked).
  • Crash reports: stack traces and app state at the time of a crash (via Sentry).

Information from third parties

  • Google Sign-In: if you choose to sign in with Google, we receive your name, email, and profile photo from Google.
  • Payment processor: Razorpay shares transaction confirmations, payment method summaries, and KYC status back to us.

2. How We Use Your Information

  • To create and manage your account.
  • To facilitate transactions between buyers and sellers, including payment and payout processing.
  • To verify sellers' identity and bank accounts (via Razorpay).
  • To send transactional notifications (order updates, payment confirmations, dispute messages).
  • To provide customer support and resolve disputes.
  • To detect, investigate, and prevent fraud or abuse.
  • To improve the Platform, debug issues, and develop new features.
  • To send marketing emails or notifications, which you can opt out of at any time.
  • To comply with legal obligations and respond to lawful requests from government authorities.

3. Legal Basis

Under the DPDP Act, 2023, we process your personal data on the basis of your consent (provided when you create an account) and for legitimate uses necessary to perform the services you have requested.

4. How We Share Your Information

We share your personal information only in the ways described below:

  • With other users: your username, profile photo, bio, location, listings, reviews, and shipping details (shared only with the specific seller of an item you purchase) are visible as part of normal Platform use.
  • With service providers:
    • Supabase (database and authentication, hosted in Asia Pacific region)
    • Razorpay (payment processing and seller KYC)
    • PostHog (product analytics, with sensitive inputs masked)
    • Sentry (error monitoring)
    • Expo (mobile build and push notification delivery)
    • Google Cloud (image storage, authentication via Google Sign-In)
    • Courier partners the seller chooses (name, address, phone number for delivery)
  • With law enforcement: when required by valid legal process or to protect our users and the Platform from harm.
  • In case of a business transfer: if Trifta is acquired, merged, or sells its assets, your data may transfer to the new entity.

We do not sell your personal information to any third party.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with services. If you request account deletion, we remove your personal data within thirty (30) days, except where retention is required by law (for example, tax records for seller transactions, which we must keep for up to eight years under Indian tax law) or for the resolution of ongoing disputes.

6. Your Rights

Under the DPDP Act, 2023, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data (through the Edit Profile screen or by emailing us).
  • Request erasure of your personal data (by using the in-app Delete Account feature or emailing us).
  • Withdraw consent to processing (which may limit your ability to use the Platform).
  • Nominate another person to exercise your rights in case of death or incapacity.
  • File a grievance with our Grievance Officer, whose contact details are in Section 10 below.

To exercise any of these rights, email privacy@trifta.in. We will respond within thirty (30) days.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS 1.2+), encrypted storage of credentials (iOS Keychain / Android Keystore via Expo SecureStore), server-side encryption at rest, and row-level security policies to prevent one user from reading another's data. No system is 100% secure; in the unlikely event of a data breach, we will notify affected users and the Data Protection Board of India as required by law.

8. Children's Privacy

The Platform is not directed to children under 18. We do not knowingly collect personal data from children. If we learn we have inadvertently collected data from a child, we will delete it promptly.

9. International Data Transfers

Our primary data processors are located in India and the Asia Pacific region. Some service providers (such as Sentry and Google) may process certain technical data outside India under contractual safeguards consistent with the DPDP Act, 2023.

10. Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, 2021, you may contact our Grievance Officer for any questions or complaints regarding this policy:

Grievance Officer: Taslina Nazar
Email: privacy@trifta.in
Response time: within fifteen (15) business days

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced in the app and by email where possible. The "Last updated" date at the top of this page reflects when the policy was most recently revised.

12. Contact

General questions: support@trifta.in
Privacy and data requests: privacy@trifta.in