GREENPISTA – PRIVACY POLICY

Effective from: October 2023

Updated: June 2025 & December 2025

Version: 3.1

This Privacy Policy describes how Green Pista Labs LLP (“Company”, “we”, “us”, “our”) collects, stores, shares and protects your personal data when you use the GreenPista mobile application, website or related services (“Platform”).

This Policy aligns with:

Digital Personal Data Protection Act, 2023 (DPDP Act)

Information Technology Act, 2000

IT (Intermediary Guidelines & Digital Media Ethics Code) Rules, 2021

Applicable industry privacy and security practices

By accessing or using the Platform or creating an account or interacting with us in any capacity, you agree to the practices described in this Policy.

1. Scope & Applicability

1.1 This Policy applies to personal data collected through the Platform, mobile apps, emails and digital interactions.

1.2 It does not apply to external third-party websites, payment gateways, logistics partners or services accessed through the Platform.

1.3 It applies to all buyers, sellers, discoverers, partners and visitors using the Platform.

2. Data We Collect

2.1 Data You Provide

Name, email, mobile number, gender

Date of birth, anniversary or special dates

Address, pincode, location details

Identity verification documents voluntarily provided

Payment details, billing information, UPI or bank details

Scanned note images, photos, videos and uploaded content

Reviews, posts, comments, messages

Survey responses, feedback, conversation logs

2.2 Data Collected Automatically

Device information, IP address, browser type

App usage logs, time spent and interaction data

Search history and scan activity

Crash logs and diagnostics

Location data, if permitted

Cookies, mobile identifiers and tracking technologies

2.3 Data From Third Parties

Social login information

Payment partners

Analytics partners

Credit information companies if you opt for credit-based services

3. Lawful Use of Personal Data

We use your data for legitimate and consent-based purposes including:

3.1 Providing and managing Platform services

3.2 Order placement, processing, delivery and communication

3.3 Seller verification, KYC and fraud prevention

3.4 Improving user experience and platform performance

3.5 Personalizing recommendations and content

3.6 Payments, refunds, settlements and accounting

3.7 Compliance with Indian laws and regulatory requirements

3.8 Handling queries, support requests and disputes

3.9 Analytics, research and product development

3.10 Sending important updates, alerts or notifications

3.11 Automated fraud checks and risk scoring that do not harm the user

3.12 Any purpose explicitly consented by you

4. Sharing of Personal Data

We do not sell your personal data. We share only when necessary.

4.1 Service Providers

Payment processing

Cloud hosting

Logistics and delivery

KYC and identity verification

Fraud detection

Customer support

Marketing and analytics

All partners follow strict confidentiality and data protection obligations.

4.2 Credit Information Companies

Only if you voluntarily opt for payment options requiring credit checks.

4.3 Legal and Regulatory Authorities

Comply with law

Respond to lawful requests

Prevent fraud, security threats or illegal activity

Protect rights, safety or property

4.4 Business Transfers

During mergers, acquisitions or restructuring.

4.5 With Your Consent

When you explicitly approve sharing.

5. Cookies & Tracking Technologies

We use cookies and similar tools to improve functionality, remember preferences, measure usage and deliver relevant ads.

You may adjust cookie settings using your browser or device controls.

6. Data Security

We implement reasonable security measures including:

Encryption

Access controls

Secure servers

Periodic audits

Data minimization

No system is fully risk-free, but we take all reasonable steps to protect your data.

7. Data Breach Protocol

If a data breach occurs, we will:

Act immediately to contain and fix the issue

Notify affected users if legally required

Inform the Data Protection Board where applicable

Strengthen safeguards to prevent recurrence

8. Data Retention

We retain your data only as long as needed for:

Service delivery

Transaction completion

Legal, tax and regulatory compliance

Dispute resolution and record keeping

Data may be retained longer where Indian law requires.

9. Your Rights Under DPDP Act, 2023

Access your personal data

Correct incorrect or incomplete data

Request deletion subject to legal exceptions

Withdraw consent at any time

Seek information on data processing

Nominate another individual for rights management

File a grievance for resolution

You may exercise these rights by contacting the Grievance Officer.

10. Children’s Data

The Platform is not intended for individuals below 18 years.

If such data is found without guardian consent, it will be deleted.

11. International Data Transfer

Your data may be stored or processed in countries outside India with proper safeguards in place.

12. Grievance Redressal

Grievance Officer: Shashi K

Green Pista Labs LLP

Parexl Square, 5th Floor, C-171/2, Sector 15, Noida, Uttar Pradesh – 201301

Email: [email protected]

Acknowledgement within 48 hours

Resolution within 15 business days or as required by law

13. Policy Updates

This Privacy Policy may be modified periodically.

Updated versions will be published with the latest effective date and version number.

Continued use of the Platform indicates acceptance of updated terms.

— END OF PRIVACY POLICY —