OLDBUY — PRIVACY STATEMENT

Last updated on 4 October 2026

Varun Enterprises ("OLDBUY", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Statement informs you about how we collect, handle, store, and protect your personal data when you visit our website www.oldbuy.in or use the OLDBUY mobile application and related services (collectively, the "Services" or "Platform").

This Privacy Statement also explains your privacy rights and how Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023, protects you. Please read this Privacy Statement carefully before accessing or using our Services.

If you object to or are unhappy with any provision of this Privacy Statement, your option is to discontinue using OLDBUY and uninstall the application from your device.

Table of Contents (विषय सूची):

  1. Who are we? (हम कौन हैं?)
  2. What data do we collect about you? (हम आपका कौन सा डेटा कलेक्ट करते हैं?)
  3. Why do we process your personal information? (हम आपके डेटा का इस्तेमाल क्यों करते हैं?)
  4. How will we inform you about changes in our Privacy Statement? (पॉलिसी में बदलाव की जानकारी कैसे मिलेगी?)
  5. Communication (बातचीत और मैसेजिंग)
  6. Who do we share your data with? (हम आपका डेटा किसके साथ शेयर करते हैं?)
  7. Where do we store your data and for how long? (डेटा कहाँ और कितने समय तक स्टोर रहता है?)
  8. Your rights & Data deletion requests (आपके अधिकार और डेटा डिलीट करने का तरीका)
  9. Technical and organizational security measures (डेटा सुरक्षा के इंतज़ाम)
  10. Links to third-party websites (थर्ड-पार्टी वेबसाइट लिंक्स)

1. WHO ARE WE?

Varun Enterprises is a business entity operating in India (hereinafter referred to as "we", "us", "our", or "Varun Enterprises"), and is the sole owner, operator, and licensee of the online classifieds platform and mobile application OLDBUY (accessible via www.oldbuy.in).

OLDBUY provides a community-driven online marketplace connecting buyers and sellers across India to advertise, discover, buy, and sell pre-owned products and services

2. WHAT DATA DO WE COLLECT ABOUT YOU?

2.1 Data Provided Through Direct Interactions

Registration and Account Profile Information:

When you register to use OLDBUY, we collect personal information depending on your chosen sign-in method:

Additional Personal Data You Opt to Provide:

Depending on how you use the Platform, you may choose to provide additional information:

Payment Data:

Purchases of optional paid features on Android are processed automatically and securely via Google Play Billing. Varun Enterprises does NOT request, collect, or store your credit/debit card details, CVVs, bank passwords, or UPI PINs.

Validation of Your OLDBUY Account

We validate OLDBUY user accounts through SMS OTP verification to ensure that each account belongs to a real, unique, and authentic user. Mobile validation is initiated during sign-in or before publishing your first ad listing on the Platform. An SMS containing a One-Time Password (OTP) is sent to the valid mobile number provided by you. This verification process is entirely free of charge.

If you choose not to verify your mobile number, your account will operate with limited functionality:

To prevent spam and fraudulent account creation, OTP verification rate limits are enforced securely via Firebase Authentication. Once verified, your mobile number remains linked to your OLDBUY account. If you wish to update your registered mobile number, please contact our Support team at oldbuy317@gmail.com.

When you use OLDBUY’s in-app chat feature to communicate with other buyers or sellers, we collect and securely store the information, text messages, timestamps, and media (such as photos or voice notes) that you choose to send through this feature.

This chat data is stored securely on our servers to enable messaging history, deliver push notifications, and protect our community by detecting, moderating, and preventing fraud, spam, or abusive behavior on the Platform.

We may occasionally invite you to participate in voluntary user surveys or feedback prompts to measure your satisfaction and improve the quality, performance, and design of OLDBUY’s Services. For survey analytics, we utilize anonymous session identifiers.

If you voluntarily choose to participate in a survey, you may opt to provide your contact details (such as your email address or mobile number) so our team at Varun Enterprises can follow up on your feedback. Any personal data voluntarily submitted within survey responses is processed strictly to enhance Platform features and customer support.

2.2 Data We Collect Automatically When You Use Our Services

When you interact with OLDBUY, we automatically collect technical and device-specific information to ensure app performance, security, and session management:

Device Information:

Location Information

Client and Server Log Data

Clickstream and Activity Data

Cookies and Local Storage Technologies

Credit Information Disclosure

OLDBUY is a peer-to-peer classifieds marketplace and does NOT offer loans, credit financing, or EMI services. Varun Enterprises does NOT collect, request, or obtain credit score reports or credit bureau information from any third-party sources.

Customer Support Communications

When you contact OLDBUY customer support via email (oldbuy317@gmail.com / support@oldbuy.in) or in-app chat, support ticket records and message communications are stored and processed by Varun Enterprises for troubleshooting, quality assurance, and dispute resolution purposes.

3. WHY DO WE PROCESS YOUR PERSONAL INFORMATION?

We process your personal data only when permitted by applicable Indian law. Most commonly, Varun Enterprises uses your personal data for the following specific purposes and legal bases:

A. To Provide and Fulfill Our Core Services (Contractual Performance)

B. To Protect Platform Safety and Enhance Experience (Legitimate Interests)

C. Customer Support and Legal Compliance (Legal Obligations)

3.1 For Providing Access and Delivering Services Through Our Platform

  1. Mobile Phone Sign-In: When you log in using your mobile phone number, we use your mobile number and SMS OTP authentication to identify you as a unique user and grant secure access to the OLDBUY Platform.
  2. Google Sign-In: When you log in using your Google account, we use your first name, last name, email address, and profile picture URL provided by Google to establish your account and identify you as a user on the OLDBUY Platform.

3. Trusted Service Providers and Optional Partner Communications

We may share necessary information with trusted, legally compliant service providers (such as Google Firebase for database hosting, cloud storage, and push notifications) who are bound by strict data protection agreements.

If we collaborate with verified service partners to offer value-added features related to your listed items, your contact and listing details will be processed responsibly and solely for delivering relevant services.

No Selling of Data & Opt-Out Right: Varun Enterprises does NOT sell your personal information to third-party advertising brokers. You retain full control to opt out of any optional partner communications at any time by contacting our support team at oldbuy317@gmail.com.

4. Payments and In-App Purchase Processing

Purchases of optional paid app features on Android (such as Ad Boosts or Featured Badges) are processed automatically and securely through Google Play Billing.

Google processes the payment directly within the Google Play checkout system. Varun Enterprises receives only purchase confirmation details, product identifiers, and transaction verification tokens to activate your plan and handle related support.

Zero Card/Bank Storage: Varun Enterprises does NOT request, collect, process, or store your credit/debit card numbers, CVVs, card expiry dates, bank passwords, or UPI PINs. All payment methods offered within Google's checkout are managed and protected directly by Google's Privacy Policy.

We process the above information for adequate performance of our contract with you.

3.4 How We Use Clickstream and Activity Data

We process clickstream, search, and navigation activity data to:

3.5 How We Use Location Data and Google Maps Integration

If you choose to grant location permissions on OLDBUY, we process your location data for the following specific purposes:

3.6 Cross-Device Account Mapping and Session Management

We use your registered account identifiers (mobile phone number and email address) to map and synchronize your active sessions across devices (such as mobile phones, tablets, or web browsers):

3.7 Search Indexing and Recommendation Algorithms

We process the photographs, product descriptions, categories, and prices you provide in your ad listings to train and refine our search indexing and recommendation algorithms:

3.8 Automated Personalization and Recommendation Feeds

To display product listings and advertisements that match your preferences, OLDBUY utilizes automated recommendation algorithms processing your browsing history, search queries, saved/liked items (Liked Tab), and location data (where permitted).

Purpose & Experience: This automated processing powers personalized recommendation feeds such as "Picks for You" and "Recommended Near You", enhancing your app experience by presenting relevant local deals. Varun Enterprises performs this processing based on our legitimate interest in providing a responsive and tailored marketplace.

3.9 In-App Chat Moderation, Fraud Detection, and Automated Status Updates

We process and analyze in-app chat communications conducted through OLDBUY for platform safety, fraud prevention, and service optimization:

3.10 Optional Seller Verification and Identity Validation

If you voluntarily opt for Seller Verification on OLDBUY, we process your verification details and, subject to camera permissions, may request a real-time photo or verification document to validate your profile identity:

We process the above information for adequate performance of our contract with you and on the basis of our legitimate interest to improve your experience of our Services.

3.12 Platform Administration, Maintenance, and Security

We use your registered mobile number, device log data, and unique device identifiers to administer, maintain, and protect the OLDBUY Platform. This includes:

3.13 In-App Chat Data and Community Moderation

When you use OLDBUY’s in-app chat feature, text messages, shared media (such as photos or voice notes), and timestamps are stored securely on our Firebase database to enable buyer-seller communication, maintain chat history, and deliver push notifications.

Varun Enterprises reserves the right to review reported chat logs upon receiving user complaints or fraud reports solely to investigate policy violations, block spam, and protect our community safety.

3.14 Fraud Prevention, Account Restrictions, and Appeals

To maintain Platform security and protect users from fraudulent activity, Varun Enterprises enforces account safety checks and policy enforcement protocols:

3.15 Device Technical Information and Session Security

To prevent fraud, unauthorized account sharing, and multi-device abuse, Varun Enterprises processes technical device information when you access OLDBUY:

3.16 Service Feedback, Promotional Updates, and Communication Preferences

We process your contact details and interaction preferences for the following communication purposes:

You may receive service or promotional communications from OLDBUY through the following channels:

Service Communications & DND Notice:

As a registered user on OLDBUY, essential transactional, account security, and service notifications (such as SMS OTPs, password reset alerts, and plan activations) are sent to maintain your account functionality and will be delivered notwithstanding your registration on National Do Not Call (NDNC / DND) registries.

How to Opt-Out of Marketing Communications:

You can ask us to stop sending promotional marketing communications at any time by:

  1. Updating your notification preferences inside the OLDBUY app (Account > Settings);
  2. Clicking the unsubscribe link included in promotional emails; or
  3. Sending an opt-out request directly to our team at oldbuy317@gmail.com.

4. HOW WILL WE INFORM YOU ABOUT CHANGES IN OUR PRIVACY STATEMENT?

We may amend and update this Privacy Statement from time to time to reflect changes in our Services or applicable Indian laws.

When material changes are made, Varun Enterprises will notify you as appropriate under the circumstances and as required by law, such as by displaying a prominent banner notice on the OLDBUY Platform, sending an in-app message, or issuing an email notification.

The "Last Updated" date at the top of this Privacy Statement will reflect when the latest revision took effect. If you do not agree with the updated Privacy Statement, you may close your account at any time by navigating to Account > Settings > Delete Account or by emailing oldbuy317@gmail.com. Uninstalling the application does not delete your account.

5. TRANSACTIONAL COMMUNICATIONS

We communicate with you via email (oldbuy317@gmail.com), SMS OTP, or in-app push notifications in connection with your OLDBUY account and active listings to:

Non-Opt-Out Statement: Because these transactional and service communications are necessary to operate your account and deliver core Platform features, you cannot opt out of essential service messages while maintaining an active OLDBUY account.

6. WHO DO WE SHARE YOUR DATA WITH?

Varun Enterprises does NOT sell your personal information to third-party ad brokers or data aggregators. We share your personal data only as necessary to operate OLDBUY and as permitted by Indian law, specifically with:

Corporate Affiliates and Operating Entities

We may process or share data within business entities, subsidiaries, or operational affiliates managed by Varun Enterprises solely to support essential business operations, such as customer support ticket resolution, platform fraud detection, and technical app enhancements. All such internal processing remains strictly bound by this Privacy Statement and confidentiality standards.

Third-Party Cloud and Technology Service Providers

Analytics and App Performance Providers

To continuously improve OLDBUY's performance, we process non-identifiable, aggregated usage data with trusted analytics service providers (such as Firebase Analytics and Firebase Crashlytics).

This data is processed strictly in an anonymized format to monitor search trends, diagnose technical app crashes, and analyze internal platform performance. Your personal identification details (such as your name, mobile number, or email address) are never disclosed for analytics purposes.

Disclosures to Law Enforcement Authorities & Business Transfers

Disclosures to Law Enforcement Authorities and Regulators:

We may disclose your personal data to police, judicial courts, statutory regulators, or government bodies when strictly required by applicable Indian laws, court orders, subpoenas, or official statutory investigations under the Information Technology Act, 2000.

Business Transfers and Corporate Restructuring:

In the event that Varun Enterprises undergoes a business merger, acquisition, corporate restructuring, or sale of platform assets, user personal data may be transferred to the acquiring or successor entity. Any successor entity shall remain bound to process your personal data in accordance with this Privacy Statement.

Publicly Visible Information and Contact Sharing

7. WHERE DO WE STORE YOUR DATA AND FOR HOW LONG?

Data Storage & Cloud Security:

The data we collect about you is stored and processed on secure, encrypted cloud servers managed via Google Firebase to provide fast app performance, low latency, and high processing security.

Data Retention Policy:

Varun Enterprises retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, anti-fraud, or statutory reporting requirements under Indian law.

Account Deletion & Data Purge Timeline:

For email deletion requests, the 30-day deletion period starts when OLDBUY receives your original request at oldbuy317@gmail.com. Account ownership must be verified before deletion; if identification or verification cannot be completed, we will explain the issue and any resulting delay.

To cancel an email request, send a follow-up email within 48 hours of sending the original request, with the subject Cancel OLDBUY Account Deletion. The 30-day deletion period is not a 30-day recovery window. Late cancellation is not guaranteed, and permanently deleted data cannot be recovered through this process.

Your request covers your account and associated personal data under OLDBUY's control, including profile and contact information, listings and media, saved addresses, preferences, chats and attachments, and account-linked identifiers, subject to specific lawful retention exceptions. We will explain any retained categories, reasons, and periods when handling the request. Copies independently saved by other users are outside our control.

See our Account Deletion page for email instructions. For requests made in the app, follow the confirmation and cancellation instructions shown there. Uninstalling the app alone does not request deletion.

8. YOUR RIGHTS AND DATA DELETION REQUESTS

You have full control over your personal data on OLDBUY. Under Indian data protection laws (including the IT Act, 2000 and DPDP Act, 2023), you possess the right to access, review, correct, or request permanent deletion of your personal data.

How to Submit a Data Deletion Request:

You can request account and data deletion through any of the following methods:

  1. In-App Deletion: Open the OLDBUY app and navigate to Account > Settings > Delete Account.
  2. Web-Based Request Portal: Visit our dedicated web deletion page at https://oldbuy.in/legal/account_deletion.html (accessible even if you have uninstalled the app from your phone).
  3. Email Request: Send an email directly to our team at oldbuy317@gmail.com.

Legal Exceptions:

There may be limited circumstances where certain records cannot be deleted immediately—for example, where Varun Enterprises is legally required to retain statutory tax records, billing receipts, or fraud logs under Indian law or active court/police investigations.

9. TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES

All personal information received by OLDBUY is stored on secure, protected cloud infrastructure. Varun Enterprises implements technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure:

10. LINKS TO THIRD-PARTY WEBSITES

The OLDBUY Platform or user-uploaded listings may occasionally contain links to external third-party websites or services.

If you click on an external link and leave our Platform, please note that third-party websites operate under their own independent privacy policies and terms of use. Varun Enterprises does not own, manage, or control external websites and assumes no responsibility for their privacy practices, content, or security. We encourage you to review the privacy policy of every external website you visit.