GoTender

Privacy Policy

Last updated: 29 August 2026

GoTender is operated by Catscape Technologies. This policy covers the GoTender website and the GoTender Android app, which shows the same website inside it.

1. What we collect

  • Account data: name, email, phone number, password (stored hashed), country.
  • Location data: your device location (only with your permission) or coordinates you enter, used to show nearby sellers and for delivery. Location is stored on your device and with saved addresses.
  • Order data: items ordered, delivery address, order history and reviews.
  • Messages you write: enquiries and quote requests to a shop, notes on an order, and complaints.
  • Files you upload: photographs, and — if you order from a pharmacy — a prescription you choose to attach. A prescription is readable only by the pharmacy dispensing it and by GoTender staff handling a complaint.
  • Seller business data: shop details, coordinates, and statutory identifiers (GSTIN, PAN, FSSAI, tax IDs) which sellers choose to declare.
  • Technical data, collected automatically: your IP address, the pages you open and your browser’s user-agent string. We look the IP address up to find the approximate city, the internet provider, and whether the connection is a VPN or a data centre — this is how we count visitors and block abuse. It is an approximate area, not your exact position, and it happens on every visit without a permission prompt, so we tell you plainly rather than burying it.
  • Records kept as evidence: when a seller accepts an agreement, we store the time, the IP address and the browser it was accepted from, so the acceptance can be proved later.
  • App usage: if you install the Android app, it tells us when it is opened and which version it is running, so we know how many people are using it and who is still on an old build. It sends a random identifier that names the installation, not you — it is created on your phone, is linked to no account unless you sign in, and is replaced if you clear the app’s data or reinstall. Downloads of the app file from this website are also counted, with the address they came from.
  • Push notifications: if you allow them, your device is given a token by Google so we can send alerts to it. The token identifies the installation, not you.

We never see your card or UPI details. Online payments are taken on Razorpay’s own checkout. Those numbers are typed into Razorpay, not into GoTender, and they do not reach our servers at any point.

2. How we use it

  • To operate the marketplace: matching you with nearby sellers, processing orders, and sharing your delivery details with the seller you order from.
  • To send you the alerts and receipts an order produces.
  • To meet legal obligations, including displaying seller statutory information as required by the Consumer Protection (E-Commerce) Rules, 2020.
  • To prevent fraud and enforce our terms.

3. Sharing with the shop you order from

Your name, phone number, delivery address and anything you wrote on the order go to the specific seller fulfilling it, so that they can prepare and deliver it. Sellers are not given your details for any other purpose and are barred from using them for their own marketing without your consent.

4. What we do not do

We do not sell personal data, and we do not use third-party advertising or tracking. Data may be disclosed where required by law or a lawful government request.

5. Companies that process data for us

Running the service means some data passes through other companies. Each is given only what that job needs, and none of them is permitted to use it for anything else.

  • Razorpay (India) — takes online payments. Receives your name, email, phone and the amount; also receives your card or UPI details directly from you, which we never see.
  • Twilio — sends WhatsApp and SMS alerts. Receives the phone number and the text of the message.
  • Brevo — sends email alerts, receipts and invoices. Receives the email address and the text of the message.
  • Google (Firebase Cloud Messaging) — delivers push notifications. Receives the device token.
  • Google Maps — draws maps and turns coordinates into an address. Receives coordinates when a map or an address lookup is used.
  • OpenStreetMap (Nominatim) — the alternative used for address lookup when GoTender is set to open maps. Receives coordinates.
  • ip-api.com — turns an IP address into an approximate city and network. Receives the IP address of every visit.
  • Hostinger — hosts the site and the database, so all of the above is stored on their infrastructure.

6. Your rights

Under India's Digital Personal Data Protection Act, 2023 (and, where applicable, GDPR or similar laws) you may access, correct or request deletion of your personal data, withdraw consent, and lodge complaints with the relevant authority. Write to our grievance officer (see the Grievance page) to exercise these rights.

To close your account and have your personal data removed, use Delete your account. You do not need to be signed in, and that page explains what is removed and what tax law obliges us to keep.

7. Security & retention

Traffic to and from GoTender is encrypted (HTTPS). Passwords are stored hashed; sessions use signed, HTTP-only cookies. We retain order records as required by tax and consumer law, and delete or anonymise data that is no longer needed.

8. Children

GoTender is intended for adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

9. Cookies

We use a single essential session cookie for login. We do not use third-party advertising cookies.

10. Contact

Questions about this policy, or about your data, go to grievance@gotender.catscapetech.org — Krishnan Raghavan, Catscape Technologies.