Privacy Policy
Pepagora ("we," "us," or "the Company") is committed to protecting your privacy and ensuring the security of any personal information you provide while using our online Software-as-a-Service (SaaS) platform. This Privacy Policy outlines the types of information we collect, how we use it, the measures we take to safeguard your data, and your rights regarding your personal information.
This Privacy Policy applies to all users of the Pepagora platform, including suppliers, buyers, and visitors. Terms that are defined in our Terms of Service shall have the same meaning within this Privacy Policy.
By accessing or using our platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
Information We Collect
We may collect personal information such as your name, email address, phone number, billing information, and other details necessary for account creation, service engagement, and communication.
Account Information: Full name, email address, phone number, business name, registration details, tax identification numbers, billing and shipping addresses, profile photographs, business logos, professional credentials, and certifications.
Identity Verification: Government-issued identification documents, business licenses and permits, bank account information for payment processing, and digital signatures and biometric data where legally permissible.
Transaction Information: Purchase and sales history, payment method details stored securely by our payment processors, shipping and delivery information, communication records related to transactions, and dispute and resolution history.
We reserve the right to collect any additional information reasonably necessary to verify user identity, ensure compliance with applicable laws and regulations, prevent fraud, maintain platform security, or support platform integrity and safety. Refusal to provide requested information may result in account restrictions, service limitations, suspension, or denial of certain platform features at our sole discretion.
Biometric and Sensitive Data Consent
For users who provide biometric information for identity verification purposes, you consent to our collection, processing, and retention of such biometric data for the duration necessary to fulfil verification and security purposes. While you may request deletion of your biometric data, such deletion may result in account closure and inability to access platform services that require biometric verification.
We obtain and record explicit, informed, and revocable consent before collecting or processing any sensitive personal data, including biometric identifiers, payment information, health data, and other information classified as sensitive under applicable privacy laws.
You may withdraw consent for sensitive data processing at any time through your account settings, by contacting support@pepagora.com, or through other methods specified at the time of consent. Consent withdrawal will be processed within 30 days, though refusal or withdrawal may limit access to platform features or require account closure where such data is essential for service delivery.
We maintain detailed records of all consent interactions, including the date, time, method of consent, information provided to users, and any subsequent modifications or withdrawals for audit and compliance purposes.
Usage Data and Analytics
During your interaction with our platform, we automatically collect usage data including your IP address, browser type, operating system, pages visited, time spent on the platform, click patterns, search behavior, feature utilization, session data, and other analytical information to improve functionality, enhance user experience, ensure platform security, and support our legitimate business operations.
We may create anonymized, aggregated, or de-identified datasets from usage data that cannot reasonably be used to identify individual users. Such anonymized data becomes our proprietary business asset and may be used, shared, or commercialized for industry research, benchmarking, product development, or other legitimate business purposes without restriction.
Automatically Collected Information includes IP address, device identifiers, browser fingerprints, browser type, operating system, navigation patterns, search queries, referral sources, access times, and geographic location data with your consent.
Performance Data includes platform response times, error logs, feature usage analytics, click-through rates, A/B testing results, user preferences, and customer support interaction records.
Cookies and Tracking Technologies
Our platform uses cookies and similar tracking technologies including web beacons, pixels, local storage, and session identifiers to enhance your experience, analyse platform usage, provide personalized content, deliver targeted advertising, ensure platform security, and monitor web traffic patterns.
You can manage your cookie preferences through our cookie consent banner, your account settings, and your browser configuration options. Essential cookies necessary for platform functionality cannot be disabled while using our services.
We use Essential Cookies for session management, authentication, security, and user preferences; Analytics Cookies for analytics platforms, heat mapping, performance monitoring, and optimization; and Marketing Cookies for personalized advertising, retargeting, social media integration, and campaign tracking.
Some cookies are placed by third-party service providers including analytics platforms, advertising networks, and social media plugins, which are governed by their respective privacy policies and cookie practices.
We may use cross-device tracking technologies, browser fingerprinting, and similar identification methods to provide consistent user experience across devices and platforms, subject to applicable privacy laws and your consent preferences where required.
How We Use Your Information
We use your personal data for service delivery, including subscription management, troubleshooting issues, and responding to inquiries.
We use information for account management, transaction facilitation, customer support, platform security, fraud detection, service improvement, feature development, bug fixes, performance optimization, usage analytics, market research, performance monitoring, and competitive analysis.
We may use your contact information to send transactional communications, marketing communications, educational content, community updates, and important notifications regarding your account or our services.
We may process your information to comply with applicable laws, regulatory reporting obligations, legal processes, audits, compliance reviews, and anti-money laundering and know your customer procedures.
Data Sharing and Disclosure
Pepagora may share personal data, product details, user website details, and other business information with trusted third-party service providers who assist us in delivering our services, such as payment processors, cloud computing providers, analytics tools, CRM systems, identity verification services, logistics partners, and customer support platforms.
By creating an account, users consent to cross-border data transfers to countries where Pepagora, its affiliates, and service providers operate, subject to appropriate safeguards including Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms as required by applicable privacy laws.
We may disclose your data when required by law, legal processes, government agencies, law enforcement, fraud prevention needs, or security threat mitigation, and in the event of a merger, acquisition, or asset sale subject to the same privacy commitments.
With your explicit consent, we may share your information with other platform users for transaction purposes, through API integrations with third-party applications, in public reviews or case studies, or through social media integration features.
Your Rights
You have the right to access, review, and correct any personal information we hold about you, subject to identity verification requirements and applicable legal limitations. We will respond to verified requests within the timeframes required by applicable law, typically within 30 days.
You may request a copy of your personal data, receive information about how your data is processed, obtain details about data sharing and retention periods, request portability of data you provided to us, correct inaccurate information, and update your account details and marketing preferences.
You may request deletion of your personal data, subject to legal retention requirements and legitimate business needs. Permanent deletion may take up to 90 days to complete.
You may object to processing based on legitimate interests, opt out of direct marketing communications, withdraw previously given consent, and manage cookie and tracking controls through available tools and browser settings.
Data Security and International Transfers
We employ robust security measures, including encryption, firewalls, secure servers, access controls, multi-factor authentication, role-based permissions, regular penetration testing, intrusion detection systems, privacy by design, and regular security audits to protect your data against unauthorized access, alteration, or destruction.
Data breach procedures include immediate containment and investigation protocols, notification to affected users within 72 hours where required, regulatory reporting, and remediation measures.
When transferring personal data internationally, we use Standard Contractual Clauses, adequacy decisions, Binding Corporate Rules, or other certified transfer mechanisms. Our primary data processing location is Singapore.
You have the right to information about transfer mechanisms, the right to object to transfers to specific countries, and the right to additional safeguards for sensitive data where applicable.
Retention, Children, and Contact Information
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal and regulatory requirements. Active account data is retained for the duration of the account plus 2 years, closed accounts for 7 years, identity verification documents for 7 years, purchase and sales records for 7 years, payment information for 5 years, communication records for 3 years, server logs for 1 year, analytics data for 2 years, and cookie data for 1 year from last activity.
Our platform is not intended for use by individuals under the age of 18 or the age of majority in their jurisdiction, whichever is higher. If we become aware that a user is under the required age, we will promptly delete their account and associated personal data in accordance with applicable law.
To exercise your privacy rights, contact privacy@pepagora.com. We provide acknowledgment within 5 business days, completion within 30 days and may extend to 60 days for complex requests with notice.
Pepagora reserves the right to update or amend this Privacy Policy at any time. Continued use of the platform after the effective date of changes constitutes acceptance of the revised Privacy Policy.
For questions or concerns regarding this Privacy Policy or the use of your data, please contact support@pepagora.com and +91-9500304116. This Privacy Policy is governed by the laws of India, and disputes shall be resolved by arbitration in Chennai, in English, under the Arbitration and Conciliation Act, 1996.