EasiMachines (trade name of Nikil R), 1st Floor, Property No. 100/P-21, Khata No. 100/P21, BBMP Khata Sl. No. 69, Kogilu, Yelahanka Hobli, Bangalore – 560064, Karnataka, India, is the controller (data fiduciary) for personal data processed through the Platform. Contact: legal@easimachines.com.

2.1 Data you give us

• Account: name, email address, password (stored only as a secure hash), account type, company name, country and preferences.
• Phone and verification: your phone number, whether it was confirmed by a one-time code, and whether your email is verified. When you create an account we ask you to confirm your phone by a code sent by SMS where we send codes to your country; elsewhere we confirm your email address, and your number is stored as provided and shown as not confirmed.
• Seller details: business name, address, tax or registration numbers you choose to add, profile text and logo.
• Business profiles: the business details you add, such as its name, business type and activities, industries, locations, services, brands, description, logo, website, and the contact details you choose to show.
• Claims: when you claim a business profile, your statement that you may act for the business, how you confirmed it (for example the email address or phone number we sent a code to, or information you give our staff), and the outcome.
• Listings: equipment details, photos, videos, price, location (city and, if you place it, a map pin) and documents.
• Communications: enquiries (including enquiries sent without an account, for which we confirm your email address with a one-time code), Wanted Requests, messages between users, support requests, and reports.
• EasiMachines Assist on WhatsApp: your WhatsApp number and profile name, the number you contacted, messages, photos, voice notes and documents you send, and delivery and routing information.
• Reviews you post.
• Sale agreements you save or sign: the parties' names and contact details, the equipment and terms, messages, and each revision. For each signature we record the typed name, the date and time, the revision signed and your agreement to sign electronically. When a buyer signs online, we also record the IP address and browser (user agent) used to sign. If you only download a blank template, or fill in our public agreement form without saving it, we use what you enter only to create the PDF and do not save it.
• Payments: billing name, address and payment status. Card details are handled by our payment processor; we never receive full card numbers.

2.2 Data collected automatically

• Device and log data: IP address, browser and device type, pages visited, searches, and error and security logs.
• Approximate location: your country (and sometimes city) estimated from your IP address, used to show relevant local results and currency. We do not collect precise GPS location.
• Cookies and local storage: see the Cookie Policy. We do not use advertising or cross-site tracking cookies.
• Contact reveals: when a user views another user's phone or WhatsApp details, we record who, which listing and when, to prevent harvesting and abuse.

2.3 Data from others

• Sign-in providers (for example Google), if you choose them: name, email and profile picture.
• Our payment processor: payment and subscription status.
• Other users: for example, a buyer's enquiry about your listing or a review of you as a seller.
• Businesses that have not joined the Platform: business information the business has itself made public (for example on its website, business listing or official social media pages), and business contact details, such as a business email address or phone number, from those public sources and from business-data providers we license. This can include the names and work contact details of people who work for the business.

• To provide the Platform: accounts, listings, search, enquiries, Wanted Requests, contracts and support (performance of our contract with you).
• To keep a reliable record of who signed a sale agreement, when, and which revision, so the parties can rely on it as evidence (performance of our contract with you; legitimate interests).
• To verify contact details, keep the Platform safe, prevent fraud, scraping and abuse, and enforce our terms (legitimate interests; legal obligation).
• To show relevant results, including local results, currency and language (legitimate interests).
• To send service messages by email, in the Platform and by WhatsApp where you contacted us there or opted in (contract; your request).
• To send optional updates and marketing, with your consent where the law requires it. You can opt out at any time.
• To handle EasiMachines Assist conversations, including preparing a private listing draft that you can review and claim (your request; steps before a contract).
• To publish profiles of businesses that have not joined the Platform, labelled "Not claimed", so that buyers can find them, and to invite those businesses, for example by email, to claim or create their own profile, using the business contact details described in section 2.3 (legitimate interests; consent where the law requires it). Every invitation lets the business stop further invitations.
• To check claims to business profiles, including by sending a one-time code to, or contacting, the business's published contact details, and to stop profiles being taken over by people who may not act for the business (legitimate interests; steps before a contract).
• To improve the Platform and our tools, using aggregated or de-identified data where possible (legitimate interests).
• To process payments, keep accounting records and meet tax, legal and regulatory duties, including sanctions screening (contract; legal obligation).

Where we rely on legitimate interests you may object; where we rely on consent you may withdraw it at any time without affecting earlier processing.

• Some features use AI, for example to suggest listing details from your text and photos, estimate market value, or draft contract text. Your input is sent to our AI provider to produce the result, under terms that do not allow that provider to train its models on it.
• EasiMachines Assist may reply through an automated assistant before a person takes over. You can ask to speak to a person at any time.
• We do not make decisions with legal or similarly significant effects about you solely by automated means. Decisions to remove content or restrict accounts are taken or reviewed by people.

5.1 Other users

• Your public seller profile and listings, including the contact details you choose to show, are visible to other users. Phone and WhatsApp details are shown only to signed-in users who meet our verification requirements.
• When you send an enquiry, the seller receives your name, email address and message and, if you are signed in with a verified phone, your phone number.
• Wanted Requests are shown to relevant sellers. Your direct contact details may be released to a seller who responds and meets our verification requirements.
• If you favourite a listing, the seller may see your company name (business accounts) or your name only if you switch on "Show my interest to sellers", plus an approximate region. Your email and phone are not shared this way.
• Reviews show your name to other users.
• Published business profiles are public, together with their status: "Not claimed", "Claim in process" or "Claimed by business". A "Not claimed" profile does not show the business's email address or phone number.
• When you or anyone else shares a link to a listing or business profile on a messaging app or social network, that service shows a preview with public content such as photos, title, price, main specifications and the public seller or business name. The service handles the preview under its own policy.
• When you request an inspection, we share the details needed with the independent inspector.

5.2 Service providers

We use providers that process data on our instructions under written agreements: hosting and databases, file and image delivery, email delivery, SMS and WhatsApp messaging (including Meta's WhatsApp Business Platform and our messaging provider MSG91), payment processing, AI processing, error monitoring and security. We will name the providers in use on request to legal@easimachines.com.

5.3 Legal and safety

We may disclose data when required by law, court order or a competent authority, or where needed to prevent fraud, protect users or defend legal claims.

5.4 Business changes

If our business is reorganised, merged or sold, data may transfer to the new owner, who must respect this policy. We will tell you before your data becomes subject to a different policy.

We do not sell personal data, and we do not share it with advertisers.

We are based in India, and our providers process data in other countries, including in Europe and the United States. Where the law requires, we protect transfers with recognised safeguards such as the European Commission's Standard Contractual Clauses and the UK equivalent, or rely on adequacy decisions, and we comply with the cross-border rules of India's DPDP Act. You can request a copy of the relevant safeguards from legal@easimachines.com.

We keep personal data only as long as it is needed for the purposes in this policy, and then delete or anonymise it. We decide how long using these criteria:

• Account and profile data: while your account is open, and afterwards only as long as needed to prevent fraud and repeat abuse, resolve disputes and meet legal obligations.
• Listings, enquiries, messages and Wanted Requests: while they are needed to provide the service to you and the other party, and afterwards as needed for disputes, safety and legal obligations.
• Saved sale agreements, revisions and signature records: at least for the life of the agreement, and afterwards for as long as they may be needed as evidence of the agreement, including for the time allowed to bring legal claims. The IP address and browser recorded when a buyer signs are kept only while that signature stands; if the agreement is changed and the signature is cancelled, they are deleted.
• Payment and invoice records: for the period required by tax and accounting law.
• Security and access logs: as long as needed to protect the Platform and investigate incidents.
• EasiMachines Assist drafts and media that are never claimed: deleted 45 days after the draft is created.
• Claim records: while the business profile exists, and afterwards as needed to resolve disputes, prevent fraud and meet legal obligations.
• Business contact details on a "Not claimed" profile and its invitations: while the profile is published, and afterwards only as needed to respect opt-outs, resolve disputes and meet legal obligations. You can ask us at any time to stop inviting you or to remove the profile (section 8).
• Contact details of a business that has no profile on EasiMachines and that we invite to create one: if it does not join, they stop being used 12 months after its last invitation.
• Invitation opt-outs: kept permanently in a coded form, not as the address or number itself, so that we can keep respecting them.

You can ask us to delete your data earlier (section 8). We may keep data longer where the law requires it or for an ongoing dispute or investigation.

Depending on where you live, you can ask to access, correct, update, delete or receive a copy of your data, restrict or object to processing, withdraw consent, and nominate someone to exercise your rights if you die or become incapacitated (India). You will not be treated less favourably for exercising your rights.

• EU and UK: you can complain to your local data-protection authority.
• India: you can complain to our Grievance Officer and then to the Data Protection Board of India.
• California and other US states: we do not sell or share personal data for cross-context behavioural advertising.
• Other countries (including Brazil, South Africa, Singapore, Australia, Japan, South Korea, the UAE, Saudi Arabia, Kenya and Nigeria): you have the rights your local law gives you, and can complain to your local regulator.
• Businesses and the people who work for them: you can ask us to correct or remove a "Not claimed" profile, or to stop using your contact details, by emailing support@easimachines.com. You can stop invitations at any time with the opt-out link in any invitation; an opt-out is permanent. An opt-out stops invitations only: to have a profile removed, ask us as above.

Email legal@easimachines.com with the subject "Privacy request". We may need to verify your identity. We reply within one month, or sooner where the law requires.

We use encryption in transit, access controls, monitoring and other safeguards appropriate to the risk. No system is perfectly secure. If a breach is likely to put you at risk, we will tell you and the relevant authorities as the law requires.

The Platform is for people aged 18 or over. We do not knowingly collect data from children. Contact legal@easimachines.com if you think we have, and we will delete it.

We will tell you about material changes by email or in the Platform at least 30 days before they take effect. The version and dates at the top show the current version.

• Privacy requests and questions: legal@easimachines.com
• Grievance Officer (India): Nikil R, grievance@easimachines.com
• Post: EasiMachines, 1st Floor, Property No. 100/P-21, Khata No. 100/P21, BBMP Khata Sl. No. 69, Kogilu, Yelahanka Hobli, Bangalore – 560064, Karnataka, India