Who this policy covers
This policy covers the GSV Mart catalogue website and its admin area. GSV Mart operates this website online. Marketplace websites linked from our catalogue have their own privacy policies.
Privacy questions and requests can be sent to martgsv@gmail.com.
Information used by this website
| Information | Purpose | How it is handled |
|---|---|---|
| Admin email and password | Verify authorized administrators. | We store the email, account ID and a salted password hash. A password is transmitted over HTTPS during login and is not stored in readable form. |
| Admin session information | Keep admins signed in and protect changes. | A login cookie, a hashed session identifier, a security token and an expiry time are used. Sessions expire after eight hours; signing out invalidates the session. |
| Hashed IP address and login attempt count | Limit repeated sign-in attempts. | The hosted app hashes the IP supplied by Cloudflare and stores an attempt count with a 15-minute reset time. A hash is not a guarantee of anonymity. |
| Product descriptions and photos submitted by admins | Publish and maintain the catalogue. | Product content and photos are public. Admins should upload product images they have permission to use and avoid including personal or sensitive information. |
| Connection and request information | Deliver, secure and troubleshoot the website. | Cloudflare necessarily handles IP addresses and request details. It may process technical logs under its own service policies. |
| Information you email us | Respond to questions or privacy requests. | We receive your email address, message and any details you choose to include. Do not send passwords or payment credentials. |
Browsing the catalogue does not require a customer account. We do not collect payment details, delivery addresses or order information through this website. Catalogue search and category filters run in your browser; the app does not transmit search terms to a search service or store them as browsing profiles.
Service providers and external links
Cloudflare hosts the website and stores product, admin and session records in D1, and uploaded photos in R2. We use these services to operate the website. Processing may occur in different countries; we do not promise that all data remains in India. See Cloudflare’s privacy policy.
Our fonts load from Google Fonts. Your browser makes requests to Google’s font servers, which receive connection details such as your IP address and request headers. See Google Fonts information. If a product uses an externally hosted photo, its host also receives a request when that photo loads.
Messages sent to our published Gmail address are handled by Google’s email service. See Google’s privacy policy for its handling of email data.
Clicking an Amazon, Flipkart or another marketplace link takes you to that provider, which receives your connection details. Our product buttons use noreferrer to ask the browser not to send this website’s address as a referrer. Any accounts, purchases and consent choices there are governed by that provider’s policies. We do not receive your marketplace password or payment details through these links.
Use and sharing
We use the information described above to provide the catalogue, control admin access, respond to messages and protect the service. The website currently has no advertising trackers, newsletter subscription or analytics scripts. We do not sell the information collected by this website or use it to build advertising profiles.
Authorized admins and service providers may handle information for these purposes. We may also disclose information where required by applicable law or reasonably necessary to investigate misuse, protect rights or respond to a security incident.
How long information is kept
Admin records are kept while access is needed and until the operator removes them. Active sessions expire after eight hours, but expired database records may remain until housekeeping at a later successful login. Login limits reset after 15 minutes; stored attempt records may remain until subsequent cleanup. These expired records do not grant access.
Product content is retained until changed or removed. Removing a product or photo from the catalogue does not automatically erase its previously uploaded image file; the operator must remove unused files from storage separately. Messages and backups should be kept only while needed to respond, maintain the service or meet applicable obligations. Provider logging retention follows the relevant service configuration and policies; we do not promise a fixed deletion period for those records.
Your choices and requests
You may ask us about your personal information, request correction or deletion, raise a complaint, or exercise other rights available under applicable law by emailing martgsv@gmail.com. Explain your request and the email or account involved. We may ask for limited information to verify ownership before acting; do not send passwords or identity documents unless we explain why they are needed.
Admins can sign out to end their session and clear the site’s cookies through browser settings. You can decline to send us a message or use the catalogue without signing in. Blocking third-party font requests may change how the site looks. Rights and necessary exceptions depend on applicable law.
Children and changes
We do not offer accounts or forms for children and do not intentionally collect personal information from children. Admin access is intended for authorized business representatives. If you believe a child has supplied personal information, contact us so we can investigate.
We will update this page when the website’s data practices change. The date at the top identifies this version. Introducing marketing, analytics or additional forms will require an updated notice and appropriate choices.