Privacy Policy

Copago Market Private Limited ("Copago", "we", "us", or "our") operates the CoTrade platform available at cotrade.copagomarket.com and the marketing website at copagomarket.com (collectively, the "Platform").

CoTrade is a global food trade intelligence platform that helps Indian food exporters identify international buyers, run campaigns, and manage leads.

For privacy-related queries, contact us at: privacy@copagomarket.com

2.1 Information you provide to us:

• Account information: Name, email address, password (hashed), company name, country, phone number
• Billing details: Legal name, GSTIN, billing address, email for invoices — stored for GST compliance and Zoho Books invoice generation
• Campaign content: WhatsApp messages, email templates, and campaign details you create on the platform
• Payment information: Payments are processed by PayU (a PCI-DSS compliant payment gateway). We do not store your card details. We receive only a transaction reference number and amount.
• Lead data: Buyer names, contact details, notes, and follow-up records you manually enter

2.2 Information collected automatically:

• Usage data: Pages visited, features used, profile views, campaign sends, session durations
• Device & browser data: IP address, browser type, operating system — for security and analytics
• Authentication tokens: JWT tokens stored in your browser for session management

2.3 Information from third parties:

• Google OAuth: If you sign in with Google, we receive your name, email, and profile picture from Google
• Trade data: We operate a curated database of global trade records (buyer/supplier information derived from public customs filings). This data is used to power the directory and is not collected from you.

• To provide, maintain, and improve the CoTrade platform
• To process payments and generate GST-compliant invoices via Zoho Books
• To send WhatsApp and email campaigns on your behalf using your configured credentials
• To calculate and deduct profile view credits from your wallet
• To send transactional emails (invoice delivery, payment confirmation, account alerts)
• To enforce session limits and prevent abuse of the free tier
• To respond to support queries and account-related communications
• To comply with applicable laws, including GST regulations under Indian tax law

We do not use your data for advertising. We do not sell your data to any third party. We do not share your data with buyers or suppliers in our database.

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA), we process your data on the following bases:

• Contract: Processing necessary to provide the services you've subscribed to
• Legitimate interest: Platform security, fraud prevention, product improvement
• Legal obligation: GST compliance, record-keeping as required by Indian tax law
• Consent: For marketing communications, where required

We share your data only with the following service providers, who process it on our behalf:

We may also disclose data if required by law, court order, or to protect the rights and safety of Copago, its users, or the public.

• Account data: Retained for the duration of your account plus 3 years after closure, for legal and audit purposes
• Transaction & billing records: Retained for 8 years as required by Indian GST law
• Campaign content: Retained until you delete it or close your account
• Session logs: Retained for 90 days for security monitoring
• Wallet transactions: Permanent record retained for financial audit compliance

As a data principal, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Withdrawal of consent: Withdraw consent for marketing communications at any time
• Grievance redressal: File a complaint with us if you believe your data has been mishandled

To exercise any of these rights, email us at privacy@copagomarket.com. We will respond within 30 days.

We use minimal, essential cookies only:

• Authentication tokens: Stored in localStorage to keep you logged in
• Session state: Local browser storage for UI preferences

We do not use advertising cookies, cross-site tracking, or third-party analytics that share data with advertisers. We do not use Google Analytics or Facebook Pixel on the platform.

We implement the following security measures:

• All data transmitted via HTTPS (TLS 1.2+)
• Passwords hashed using bcryptjs (salt rounds: 10)
• Database hosted on AWS RDS with encryption at rest
• API authentication via signed JWT tokens
• Admin access restricted by role-based access control
• WhatsApp and Gmail credentials stored encrypted; never logged in plaintext

No system is 100% secure. If you suspect a security breach, notify us immediately at privacy@copagomarket.com.

CoTrade is a B2B platform intended solely for business use by individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us for immediate deletion.

We may update this Privacy Policy periodically. When we do, we will update the "Last Updated" date at the top. For significant changes, we will notify users via email or an in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy-related queries, data requests, or complaints: