Privacy Policy

1. About This Policy

This Privacy Policy describes how TrustIPX ("we", "us", "our"), operated by Adviter Solutions, collects, uses, and protects your personal data when you use the TrustIPX platform ("Platform") at trustipx.com.

This Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India. By using the Platform, you consent to the collection and use of your data as described here. If you do not agree, please do not use the Platform.

2. Information We Collect

Account information: When you register, we collect your full name, email address, password (stored as a hash, never in plain text), and selected role.

Profile information: After registration, you may provide your state or region, website URL, organisation name, entity type, registration number, and GST number. This information is voluntary unless required for a specific feature.

Patent listing data: IP Owners may upload patent details including title, patent number, description, technology domain, asking price, and ownership documents. Documents are stored securely and are not accessible to buyers.

Interest and transaction data: When you express interest in a patent, we record your message, the patent, and the timestamp.

Technical data: We collect standard server logs including IP addresses, browser type, and pages visited, for security and analytics purposes.

3. How We Use Your Information

We use your personal data to:

• Create and manage your account and authenticate your sessions
• Display your profile and listings to appropriate users on the Platform
• Send transactional emails: account confirmation, interest notifications, patent approval or rejection notices
• Facilitate introductions between IP Owners and Buyers
• Allow administrators to review and moderate patent listings
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations under Indian law

We do not sell your personal data to third parties. We do not use your data for automated profiling or decisions that have legal or similarly significant effects on you.

4. Legal Basis for Processing

Under the DPDP Act 2023, we process your personal data on the following bases:

• Consent: You provide consent when you register for an account and accept these terms.
• Contractual necessity: Processing required to provide the Platform services you have requested.
• Legitimate interest: Security monitoring, fraud prevention, and improving the Platform.
• Legal obligation: Compliance with applicable Indian laws and court orders.

5. Data Storage and Security

Your data is stored on Supabase, a cloud database platform. Supabase stores data on servers located in the Mumbai, India (ap-south-1) region, ensuring your data remains within India in compliance with applicable data localisation requirements.

We use industry-standard security measures including:

• HTTPS encryption for all data in transit
• Row-Level Security (RLS) policies ensuring users can only access their own data
• Passwords stored as bcrypt hashes — never in plain text
• Email confirmation required before full access is granted
• Ownership documents stored in a private, access-controlled storage bucket

While we take reasonable precautions, no internet transmission is completely secure. Please use a strong, unique password and notify us immediately if you suspect unauthorised access to your account.

6. Third-Party Services

We share data with the following third-party service providers solely to operate the Platform:

• Supabase — database, authentication, and file storage (Mumbai region). Supabase Privacy Policy
• Resend — transactional email delivery (confirmation emails, notifications). Email addresses are shared with Resend only to deliver emails you have requested or that are necessary for the Platform to function. Resend Privacy Policy
• Hostinger — web hosting for the TrustIPX website. Hostinger Privacy Policy
• Google Fonts — font delivery. Google may collect technical data per their privacy policy. Google Privacy Policy

All third-party providers are contractually required to handle your data in accordance with applicable law and only for the purposes for which it was shared.

7. Your Rights Under the DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access: Request a summary of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations. You may delete your account at any time by contacting us.
• Right to grievance redressal: File a complaint with our Grievance Officer (see Section 11).
• Right to nominate: Nominate another individual to exercise your rights in case of death or incapacity.
• Right to withdraw consent: Withdraw your consent to processing at any time. Withdrawal will result in loss of access to the Platform.

To exercise any of these rights, contact our Grievance Officer at the details in Section 11. We will respond within 30 days.

8. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide Platform services. Specifically:

• Account and profile data: Retained until you request deletion or your account is terminated.
• Patent listings: Retained for 3 years after a listing is archived or the account is closed, for legal and dispute resolution purposes.
• Interest records: Retained for 2 years after submission.
• Ownership documents: Retained for 3 years from the date of submission.
• Server logs: Retained for 90 days.

After the applicable retention period, data is securely deleted or anonymised.

9. Cookies and Local Storage

We use browser local storage (not cookies) to store:

• Your session token (managed by Supabase Auth)
• Pending profile data during email confirmation (cleared after your first login)
• Your last visited page, to redirect you back after login
• Profile completion banner dismissal preference

We do not use advertising cookies or third-party tracking cookies. You can clear local storage at any time through your browser settings, which will log you out of the Platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. For significant changes, we will notify registered users by email.

Your continued use of the Platform after any change constitutes acceptance of the updated Policy.

11. Grievance Officer and Contact

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the details of the Grievance Officer are:

Name: Sagar (Adviter Solutions)
Email: legal@trustipx.com
Address: Mumbai, Maharashtra, India

Any complaint regarding the processing of your personal data should be submitted to the Grievance Officer. We will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once operational under the DPDP Act 2023.