This policy explains how GetL1 ("GetL1", "we") handles personal data when you visit getl1.com or use the GetL1 service. We follow the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023.
What we collect
- Account details: name, work email, mobile number, company name, address, GSTIN, PAN and Udyam number.
- Business content: RFQs, quotations, bids, awards, purchase orders and documents you upload, such as GST or Udyam certificates.
- Payment records: plan, amounts, invoice details and Razorpay payment references. Card, UPI and bank details are handled by Razorpay, not stored by us.
- Technical data: IP address, browser type, login times and security events, used to keep accounts safe.
- Website enquiries: details you enter in the contact or early-access form.
Why we use it
- To provide the service: run RFQs and auctions, send invitations, reminders, results and purchase orders.
- To bill paid plans and issue invoices.
- To verify suppliers and prevent fraud and misuse.
- To answer enquiries and support requests, and to tell you about important changes.
- To meet legal obligations, such as tax records.
We do not sell personal data, and we do not show advertising inside the service.
Who we share it with
- Other users, as the service requires: a Buyer's RFQ goes to the Suppliers it invites; a Supplier's quotation and bids go to that Buyer. Suppliers never see other Suppliers' names or prices.
- Service providers who process data for us under contract: hosting, email delivery, Razorpay for payments, and Anthropic for the optional AI reading feature (only the text or file you choose to have read).
- Authorities when required by law.
How long we keep it
Account and business records are kept while your company uses GetL1 and afterwards as long as tax and company laws require (generally 6 to 8 years for invoices and accounts). Files uploaded only for AI reading are deleted after 30 days. Security logs are kept for 90 days.
How we protect it
Encrypted connections (HTTPS), each company's data kept separate, private file storage, strict access roles, an append-only audit trail, login lockout after repeated failures, and two-step login for our staff. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach as the law requires.
Your rights
You can ask to access, correct or delete your personal data, withdraw consent for optional uses, or nominate someone to act for you, by writing to [email protected]. Some records must be kept by law even after an account is closed.
Cookies
We use only the cookies needed to keep you logged in and to protect forms. We do not use advertising cookies.
Grievance Officer
Chetan Sharma, GetL1, Panchkula, Haryana. Email: [email protected]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.