AcquiWorth Privacy Policy
Last updated: 2026-11-04 (draft)
This policy covers the AcquiWorth app (Android, app ID com.acquiworth.app) and the website https://acquiworth.com. AcquiWorth is based in India ("we", "us"). In terms of India's Digital Personal Data Protection Act, 2023 (DPDP Act), we decide why and how your personal data is used.
AcquiWorth is a marketplace for buying and selling running businesses in India. You must be 18 or older to use it.
1. What we collect
| Data | When | Why |
|---|---|---|
| Email address and password | You create an account. Passwords are held by Firebase Authentication, not in our database. On the website you can also sign in with Google. | To create and secure your account |
| Full name and phone number | You enter them when you sign up | To identify you to the team that reviews listings, and to run your account |
| City and state | You may add them to your profile; sellers give the business city and state | To show listings by place |
| Business and listing details | A seller enters them (title, category, price, financial claims, reason for sale and similar) | To review and publish the listing |
| Buyer briefs and letter-of-intent (LOI) drafts | A buyer saves them | To save your work and share it as you choose |
| Reports about listings | You report a listing (a reason and an optional note) | To review and remove listings that break our rules |
| Your consent choices | At sign-up and when you change them | To keep a record of what you agreed to |
| Activity (such as which listings you viewed) | Only if you agreed to activity tracking | To understand how the product is used |
| Change history | Automatically | A record of who changed what and when, including the source (web, iOS or Android) and request details, for safety and accountability |
We do not store card or bank numbers, Aadhaar or PAN. AcquiWorth has no payments, no ads and no escrow. We do not use an analytics SDK in the app. File uploads (photos, video, documents) are switched off in this release.
If you browse as a guest, listings are public and we do not need an account.
2. Why we use it
To run your account, review and publish listings, let buyers and sellers use the product, deal with reports and misuse, keep an audit record, and meet legal duties. We do not sell your data and do not use it for advertising.
3. Who receives it and where it is kept
- Google Firebase Authentication: sign-in (including Google sign-in on the website).
- Firebase App Hosting (Google), Singapore: runs the website and the service the app talks to.
- Supabase (PostgreSQL), Mumbai, India: our main database.
- Google Cloud Storage, Mumbai, India: private daily database backups.
Published listings are visible to everyone. Your name, email and phone are not part of the public listing view. Our reviewers and administrators can see account details to do their work. We may disclose data if the law requires it. Because Firebase App Hosting runs in Singapore, some of your data is processed outside India.
4. How long we keep it
We have not set a fixed time limit for active accounts. Your data is kept until you delete your account (section 8), and some records may be kept if the law requires.
After deletion:
- Your name, email, phone and city are removed from your customer record and from your customer and LOI history, and your listings are withdrawn. A record that actions happened is kept, without your details.
- Free text a seller typed about a business (such as a listing title or reason for sale) stays in the listing's history. Please do not put personal details of other people in that text.
- Backups are kept 30 days. A deleted backup can be recovered for up to 7 more days. So your details can remain in backups for up to about 37 days after deletion. If we ever restore an older backup, we erase deleted accounts again.
- Reports you made about listings are part of the record of those listings.
- Activity records are stored only if you agreed to tracking.
5. Consent and withdrawing it
At sign-up you agree to the Terms and this policy, and you choose whether to allow activity tracking (off is fine; the app works). Each decision is recorded and never overwritten. You can change the tracking choice in your account, and withdrawing stops new activity records. Withdrawing consent to the policy means you can no longer use your account; you can delete it.
6. Your rights
Under the DPDP Act, and subject to its limits, you can ask to access information about your personal data, to correct or complete it, to have it erased, to withdraw consent, to have your grievance addressed, and to nominate someone to exercise rights if you die or cannot act. Email us at the address in section 9 from your account email. We aim to respond within 30 days. If you are not satisfied, you may approach the Data Protection Board of India once it is operating and you have used our grievance process first.
7. Children
AcquiWorth is for adults 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has an account, email us and we will remove it.
8. Deleting your account
- In the app: open Account, then Delete Account, and confirm.
- On the website: sign in and use Delete account on the Account page.
- Without signing in: go to https://acquiworth.com/delete-account and follow the steps, or email dilipreddy9880@gmail.com from your account email.
Deletion removes your details as described in section 4. If you want a listing's free text removed, tell us the listing reference.
9. Grievance contact
Grievance contact: AcquiWorth, India. Email: dilipreddy9880@gmail.com. Website: https://acquiworth.com.
10. Security
Traffic uses HTTPS. Passwords are held by Firebase Authentication. The database refuses invalid data, keeps an append-only history, and the service uses a restricted login that cannot rewrite history or delete rows. Backups sit in a private bucket. No system is perfectly secure. If a breach affects your data we will tell you and the authorities as the law requires.
11. Changes
We may update this policy. We will change the date above and, for important changes, tell you in the app or by email. Continued use after a change means you accept it where the law allows.