Cattly ("Cattly", "we", "us", or "our") operates a marketplace mobile app and website that connect buyers and sellers of livestock across India. We act as a Data Fiduciary in respect of the personal data of our users ("you", the "Data Principal"). We are committed to collecting only what we need, being transparent about how we use it, and giving you real control.
1. Who we are & how to reach us
For any questions about this policy or your data, contact our privacy team at privacy@cattly.in. Details of our Grievance Officer, as required by the DPDP Act and the Information Technology Act, are in Section 10.
2. Personal data we collect
We collect the following categories of data, and only for the purposes set out beside them.
| Category | Examples | Why we collect it |
|---|---|---|
| Account & identity | Phone number, display name, profile photo, language preference | To create your account, verify it via OTP, and show a name to people you talk to |
| Verification data | Aadhaar document images you choose to upload for the "verified seller" badge | To manually confirm seller identity. We never store your raw Aadhaar number and verification is optional |
| Listing content | Animal photos, descriptions, breed, price, milk yield | To publish your listing so buyers can find it |
| Location | Approximate or precise device location, selected place, pincode | To show listings near you and sort by distance — only with your permission |
| Communications | Voice messages, chat metadata, reports you file | To enable buyer–seller conversations and keep the marketplace safe |
| Device & technical | Device identifiers, push notification token, app version, crash logs | To deliver notifications, fix bugs, and protect against abuse |
We do not knowingly collect special categories of sensitive data beyond the Aadhaar images you voluntarily submit for verification, which are access-controlled and retained only for audit.
3. How & why we use your data
- To create, secure and manage your account and keep you signed in.
- To show relevant livestock listings based on your chosen location and filters.
- To enable voice conversations between buyers and sellers without exposing phone numbers.
- To operate the optional seller-verification programme and display trust badges.
- To send transactional notifications (new messages, verification status, important updates).
- To detect, prevent and act on spam, fraud, abuse and policy violations.
- To analyse aggregate, de-identified usage so we can improve the product.
- To comply with applicable law and respond to lawful requests.
We do not use your personal data for third-party advertising, and we do not sell it.
4. Legal basis & your consent
Under the DPDP Act we process your personal data on the basis of the consent you give when you sign up and when you grant specific permissions (such as location, camera, microphone or notifications), and for certain legitimate uses permitted by law, such as preventing fraud and complying with legal obligations.
Your consent is informed and specific, and you can withdraw it at any time (see Section 9). Withdrawing consent does not affect processing already carried out, and some features may stop working without the related permission.
6. Processors we rely on
We use a small number of reputable providers as Data Processors:
- Supabase (hosted on AWS) — authentication, database and encrypted file storage.
- Expo / Google & Apple push services — to deliver push notifications.
- Cloud hosting & CDN — to serve the app and website reliably.
Each processor is bound to use your data only to provide their service to us, under appropriate safeguards.
7. How long we keep data
We keep personal data only as long as needed for the purposes above or as required by law. As a guide: account data is kept while your account is active; voice messages and chats are retained for the life of the conversation unless you delete them; verification images are retained for audit and then securely deleted. When you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, except where retention is legally required.
8. How we protect your data
- Encryption of data in transit (TLS) and of voice files at rest.
- Row-level access controls so users can only reach their own data.
- Private, access-scoped storage for sensitive verification documents.
- Anonymous-session architecture so identities are not needlessly exposed.
No system is perfectly secure, but we work continuously to protect your information and will notify you and the Data Protection Board of India of a breach where the law requires it.
9. Your rights under the DPDP Act
As a Data Principal you have the right to:
- Access a summary of the personal data we process about you.
- Correct, complete or update inaccurate or incomplete data.
- Erase your personal data where it is no longer needed.
- Withdraw consent at any time, as easily as you gave it.
- Nominate another individual to exercise your rights in case of death or incapacity.
- Grievance redressal — a readily available means to raise complaints (Section 10).
To exercise any right, email privacy@cattly.in from your registered contact, or use the in-app account controls. We respond within the timelines set by law.
10. Grievance redressal
If you have a concern about how your data is handled, you can contact our Grievance Officer, appointed under the DPDP Act and the Information Technology Act, 2000:
Email: grievance@cattly.in
We acknowledge complaints within 48 hours and aim to resolve them within the period prescribed by law. If you are not satisfied, you may escalate to the Data Protection Board of India.
11. Location data
Location is used only to show animals near you and to sort listings by distance. You can grant approximate or precise location, change it to a manually selected place, or deny it entirely from your device settings — the app still works without it, just without distance-based features.
12. Voice messages
Conversations on Cattly are voice-first and happen inside the app. Recordings are transmitted securely and stored to allow playback by the participants. They may be reviewed where a user reports abuse, to keep the community safe. You can delete a conversation from your side at any time.
13. Children
Cattly is intended for users aged 18 and above and is not directed at children. We do not knowingly collect the personal data of children. If you believe a child has provided us data, contact us and we will delete it.
15. Data transfers
Your data is primarily processed on infrastructure serving India. Where a processor operates outside India, we only use providers that offer appropriate safeguards, and only as permitted by applicable law.
16. Changes to this policy
We may update this policy as the product and the law evolve. We will revise the "last updated" date and, for material changes, notify you in the app or by other reasonable means before they take effect.
17. Contact us
Privacy questions: privacy@cattly.in. General support: support@cattly.in. Grievances: grievance@cattly.in.