Privacy Policy

Version 1.0 — Effective 2026-08-07

This Privacy Policy explains how CADTIX ("Jeweltix", "we", "our") collects, uses, discloses, and protects personal data in connection with the Jeweltix platform. It is issued under and complies with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules thereunder.

1. Data we collect

Account data — name, email address, password hash, chosen role (Buyer / Seller / CAM Vendor).
Verification / KYC data — for Sellers and CAM Vendors: PAN, bank account or UPI details, business details, and (for vendors) verified mobile number, shop name, city, machinery inventory.
Transaction data — order records, payment identifiers issued by Razorpay, invoices, refund and dispute history. We do NOT store card numbers, CVVs, or bank credentials.
Content data — CAD files uploaded by Sellers, previews, gallery images, listing metadata.
Communication data — in-app chat messages exchanged between Buyers and CAM Vendors on print jobs.
Device / usage data — IP address, browser user-agent, timestamps of key actions (login, T&C acceptance, purchase, download).

2. Purposes

Providing and operating the marketplace, print-job matching, escrow settlement, and dispute resolution.
Verifying identity and bank credentials required for payouts.
Enabling communication between Buyers, Sellers, and CAM Vendors.
Regulatory compliance, fraud prevention, audit trails, and enforcement of these Terms.
Product improvement and platform security.

3. Sharing with third parties

Payment gateway (Razorpay) — transaction data required to process payments, split settlements, and refunds.
CAM Vendors — when a Buyer issues a print job, the Buyer's name, mobile, email, and delivery address are shared with the chosen Vendor to enable fulfilment (see Buyer Clause 8).
OTP provider (MSG91) — vendor mobile numbers, for verification only.
Statutory authorities — where required by law, court order, or lawful direction.
We do NOT sell personal data.

4. Retention

Account data is retained for the duration of the account and for at least seven (7) years thereafter, to satisfy tax, audit, and dispute-resolution obligations.
Immutable T&C acceptance records are retained indefinitely as legal proof of consent.
CAD files transmitted to CAM Vendors must be deleted by the Vendor after job retention window (see CAM Vendor Clause 3).

5. Your rights (DPDP Act)

You have the right to access, correct, and (where legally permissible) request erasure of your personal data, and to nominate a person to exercise these rights on your behalf. Requests may be sent to our Grievance Officer (details below).

6. Security

We use industry-standard security controls: TLS in transit, bcrypt password hashing, JWT session tokens, signed short-TTL download URLs, XOR-stream encryption on preview mesh data, and steganographic watermarking of downloaded files to trace leaks.

7. Cookies & local storage

The platform uses localStorage to store your authentication token and shopping cart. We do not use third-party advertising cookies.

8. Children

The platform is not intended for individuals under 18. We do not knowingly collect data from minors.

9. Cross-border transfers

Personal data is stored on servers located in and lawfully accessible from India. Any transfer outside India will be conducted in accordance with applicable Indian law.

10. Grievance Officer

See "Grievance Officer" details in the Common Clauses appended below.