Privacy Policy

Last updated: 12 May 2026

This Privacy Policy describes how Codify Apps Private Limited ("NeedHave", "we", "us") collects, uses, and protects your personal information when you use the NeedHave mobile application and website (needhave.in). By using NeedHave you agree to this policy.

1. Information We Collect

We collect only what is necessary to provide the service:

• Phone number — used to verify your identity via WhatsApp OTP and as your login credential.
• Name — your personal name as entered during account setup.
• Business / store details — store name, address, PIN code, city, state, contact phone number.
• Trade listings and requests — products you post as available (IHave) or wanted (INeed).
• Quotes and messages — pricing and notes exchanged between buyers and suppliers.
• Device push token — a device identifier supplied by Apple (APNs) used only to deliver push notifications to your device. We do not use it for tracking.
• Log data — actions taken in the app (e.g., posting a listing), stored to support dispute resolution and abuse prevention.

We do not collect payment card details, government ID, or location data beyond what you voluntarily enter as your store's city/PIN code.

2. How We Use Your Information

• Authenticate you via WhatsApp OTP.
• Match your trade requests against other businesses on the platform.
• Deliver push notifications about quotes, matches, and account activity.
• Allow other businesses to contact you through the platform (your phone number is visible only to stores you choose to trade with).
• Maintain platform security and prevent misuse.
• Respond to support requests or legal obligations.

3. Information Sharing

We do not sell your personal data. We share it only with:

• Meta Platforms Inc. (WhatsApp Business API) — to send OTP verification messages to your WhatsApp number. Governed by Meta's privacy policy.
• Apple Inc. — to deliver push notifications via the Apple Push Notification service (APNs). Apple receives your device token and notification payload.
• Other NeedHave businesses — your store name and contact phone are visible to businesses you engage in a quote or trade with. We do not display your personal phone number publicly.
• Legal authorities — if required by applicable Indian law, court order, or government request.

4. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data (name, phone number, push tokens, sessions) is permanently deleted within 30 days. Anonymised trade records (quote amounts, listing activity) may be retained for up to 12 months for abuse prevention and platform integrity.

5. Your Rights

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:

• Access your personal data held by us.
• Correct inaccurate personal data via your Profile settings.
• Delete your account and all associated personal data — available in Profile → Delete Account within the app.
• Withdraw consent for push notifications via your device's notification settings at any time.

6. Account Deletion

You can permanently delete your account directly from the app: go to Profile → Delete Account. Deletion removes your login credentials, push tokens, and all personal identifiers. Active listings and requests associated with your store are deactivated. This action is irreversible.

7. Data Security

We use HTTPS for all data in transit, session tokens stored in a secure database, and OTP-based authentication with no passwords. Access to production data is restricted to authorised personnel only.

8. Children's Privacy

NeedHave is a business-to-business platform intended for use by adults (18+) operating registered or informal businesses. We do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via the app or WhatsApp. Continued use after the update constitutes acceptance.

10. Grievance Officer

As required under the IT Act, 2000 and DPDP Act, 2023, you may contact our Grievance Officer for any privacy-related concerns:

• Name: Bankim
• Email: [email protected]
• Address: Codify Apps Private Limited, India
• Response time: Within 30 days of receipt