Privacy Policy
Last updated 18 October 2026
This policy explains what personal data Sourcing Bay collects, why, who can see it and the choices you have.
1. Who is responsible for your data
Brainwalk Solutions, Khandwa Road Indore, runs Sourcing Bay and is responsible for the personal data described here. Contact us about privacy at brainwalk007@gmail.com. This address also acts as our grievance contact for users in India.
2. What we collect
Account details: your name, work email, password (stored only in encrypted, hashed form), account type and email-notification settings.
Company information: for Suppliers, the factory profile, capacities, certificates, photos, product listings, past clients and contact details; for Brands, the company profile.
Verification documents: business registration documents and numbers (such as GSTIN, IEC and company registration number), certificates and audit records that Suppliers submit. These are stored privately.
Activity on the platform: requests for quotation, quotes, messages and attachments, shortlists and notes, reviews, reports, and records such as which profiles were viewed and which Brands revealed a Supplier's contact details.
Billing: your plan, subscription status and payment history. Card and UPI details are collected and stored by Razorpay or Stripe, not by us.
Technical data: basic logs our hosting providers keep, such as IP address, browser type and time of request, used for security and fixing problems.
3. How we use it
To create and run your account; show Supplier profiles to visitors once verified; review documents and award badges; deliver requests, quotes and messages; send the email notifications you choose; take payments and manage plans; show Suppliers analytics about their own profile; keep the platform safe (preventing spam, fraud and abuse); and meet legal obligations such as tax records.
We rely on: performing our contract with you; our legitimate interest in running a safe, trustworthy marketplace; your consent where we ask for it (for example optional emails); and legal obligations.
We do not sell your personal data and we do not use it for third-party advertising.
4. What other users can see
Verified Supplier profiles are public: company name, location, capacities, certificates, photos, products, past clients, badges, ratings and response statistics.
Supplier contact details are shown only to logged-in Brands, and we record each time they are revealed. Suppliers can see which Brands viewed their contact details.
Brands' details are shared with a Supplier when the Brand sends that Supplier a request or a message.
Reviews are public and show the Brand's company name.
Verification documents are never shown publicly.
5. Service providers we use
We share data only with providers that help us run Sourcing Bay, under contracts that require them to protect it: Supabase (database, file storage and login), Vercel (website hosting), Razorpay (rupee payments: UPI, cards, net banking, wallets), Stripe (US-dollar card payments) and Resend (sending email).
We may also disclose data if required by law, to protect users or the public, or as part of a sale or reorganisation of our business (in which case this policy continues to apply).
6. International transfers
Our providers may store and process data in countries other than yours, including the United States, the European Union, Japan and India. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by these providers.
7. Cookies and similar storage
We use only what the site needs to work: a login cookie that keeps you signed in, and browser storage that remembers the factories you have added to Compare. We do not use advertising or tracking cookies.
Razorpay and Stripe may set their own cookies on their payment pages to prevent fraud.
8. How long we keep data
We keep your data while your account is open. When you close it, we delete or anonymise your personal data within 90 days, except: billing and tax records (kept as long as the law requires, often up to 8 years); verification decision records needed to prevent fraud; and reviews and messages already received by other users, which may remain with your name removed.
9. Your rights
Depending on where you live (for example under India's Digital Personal Data Protection Act, the EU and UK GDPR, or Japan's Act on the Protection of Personal Information), you can ask to: access your data; correct it; delete it; get a copy in a portable format; object to or restrict some uses; and withdraw consent at any time.
You can edit most of your information yourself in your account and turn email notifications off on the Notifications page. For anything else, email brainwalk007@gmail.com. We reply within 30 days. You can also complain to your local data protection authority.
10. Security
We use encrypted connections, hashed passwords, strict database access rules so users can see only what they are allowed to, private storage for verification documents, and limited staff access. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
11. Children
Sourcing Bay is a business service for people aged 18 and over. We do not knowingly collect data from children.
12. Changes to this policy
We will post any changes here and update the date at the top. If a change is significant we will also email you.
Questions? Email brainwalk007@gmail.com. Brainwalk Solutions, Khandwa Road Indore.