Privacy that protects the business relationship.

Why this policy exists

Xrupya connects business opportunities with the participants who can help move those opportunities forward. Because that process can involve buyer requirements, supplier quotations, contributor information, company profiles and transaction records, information must be handled according to the role and stage of the business workflow.

This policy describes the main categories of information Xrupya may handle and the purposes for which that information may be used.

Different roles, different information

Xrupya may support several participant roles. The information visible to one participant may therefore be different from the information available to another.

Information we may collect

Information depends on the role you choose and the Xrupya services you use.

• Account details: name, email address, phone number, password credentials, role and account status.
• Company profile: legal name, public name, industry, business type, address, location, company contact details, website, GST/PAN information and other business details submitted for profile completion or verification.
• Opportunity information: lead title, product or service, requirement, location, indicative value, description, lead status and related commercial information.
• Quotation information: supplier offer or quotation, price, quantity, delivery terms, warranty, payment terms, notes and offer status.
• Transaction information: award, order, confirmation, transaction references, settlement information, commission records, status and related audit events.
• Feedback: TradeSure or business feedback, ratings, comments and verification status.
• Technical and security information: session, browser, device, IP, access, error, security and audit information where collected by the platform.

Your business information is part of a controlled workflow

Xrupya may require Buyer and Supplier participants to complete company details before accessing protected business workflows. Company information may be reviewed or verified by the Xrupya administration process.

Public opportunity information can be presented without exposing all private company or relationship information. The exact information displayed depends on the participant role and the stage of the opportunity.

Protection of buyer and contributor relationships

A central part of the Xrupya concept is controlled identity exposure. A supplier may need to understand the business opportunity before deciding whether to quote, while the buyer's private identity or the contributor's protected source information may not need to be exposed at that stage.

Accordingly, Xrupya may separate public commercial opportunity information from private identity and contribution information. Access can change when the protected workflow reaches an approved stage.

How information can move through Xrupya

Information may therefore be used differently at each stage. Not every participant receives the same information.

How Xrupya uses information

• Register and authenticate participants.
• Complete and verify Buyer and Supplier company profiles.
• Create, review and administer protected business opportunities.
• Present eligible opportunity information to appropriate suppliers.
• Receive and manage supplier quotations and offers.
• Support buyer comparison, revision, rejection and acceptance workflows.
• Create and maintain TradeSure transaction records after an approved business award.
• Maintain commission, contribution, settlement and audit records where applicable.
• Manage feedback, reviews and transaction experience records.
• Provide customer support, security, administration and platform maintenance.
• Detect misuse, protect accounts and investigate security or workflow issues.
• Meet applicable legal, contractual and operational requirements.

When information may be shared

Xrupya may disclose information when it is reasonably necessary to operate an approved workflow or protect the platform and its participants.

• With participants: appropriate business information may be shared when required for an opportunity, quotation, supplier selection, order or approved transaction.
• With administrators: information may be available to authorised personnel responsible for verification, transaction administration, security, audit and support.
• With service providers: technical providers may process information needed for hosting, infrastructure, communication, security or other platform operations.
• For legal or safety reasons: information may be disclosed where required by applicable law or where reasonably necessary to protect rights, users, property or platform security.

Xrupya does not treat protected contributor identity or private buyer relationship information as ordinary public opportunity information merely because an opportunity is published.

Transactions, settlement and feedback

When a buyer accepts a supplier offer and the applicable process creates a TradeSure transaction, Xrupya may retain information necessary to operate and audit that transaction.

• Buyer and supplier transaction references may be connected to the approved business award.
• Order, confirmation, settlement and commission information may be recorded.
• Participant contact information may become available at the appropriate approved stage of the transaction.
• Contributor or commission information may remain restricted from participants who do not need access to it.
• Buyer and supplier feedback may be retained as part of the transaction experience and verification process.

Security and controlled access

Xrupya uses reasonable technical and organisational measures intended to protect account, company, business and transaction information from unauthorised access, misuse, alteration or disclosure.

Access controls and role-based workflows are used to limit information according to participant responsibilities. No internet-based system can guarantee absolute security.

Participants are responsible for keeping login credentials confidential and should report suspected unauthorised account activity promptly.

How long information may be retained

Xrupya may retain account, company, opportunity, quotation, transaction, commission, feedback, security and audit information for as long as reasonably necessary for the purposes described in this policy.

Some records may need to remain available after an opportunity or transaction is completed for business records, dispute resolution, audit, security or legal requirements.

Access, correction and privacy requests

Depending on applicable law, you may have rights concerning your personal information, including requesting access, correction or deletion where applicable.

Requests may require identity or account verification and may be subject to legitimate business, contractual, security, audit or legal retention requirements.

If you believe information connected with your account or company profile is inaccurate, contact Xrupya using the details below.

Contact Xrupya

For privacy questions, correction requests, data-access requests or concerns about information handled through Xrupya, contact the company using the details below.