This policy explains what personal data Listro collects, why, who we share it with, and the rights you have over it. It is written to align with the Digital Personal Data Protection Act, 2023.
Effective 19 July 2026 · These documents are published in English only. Translations may be provided for convenience, but the English text governs.
1. Who is responsible
Listro Tech is the Data Fiduciary for the personal data described here. You can reach us about any privacy matter at legal@listro.in.
2. What we collect
Account data: your phone number, name, profile photo, and city. Verification data: identity-document details and their verification status where you complete KYC. Listing and transaction data: what you post, your offers, purchases, plans and boosts. Communications: chat messages, offers, voice notes, shared locations, and any support or report you submit. Technical data: device identifier, IP address, app version, and interaction events used for safety and product analytics. Payment data: we receive confirmation and status from our payment partner, and we do not store full card numbers.
3. Why we use it, and on what basis
To create and operate your account and show your listings (performance of our agreement with you); to detect and prevent fraud, spam and abuse, and to keep users safe (legitimate use and legal obligation); to process payments and issue invoices (contract and tax law); to provide support and handle grievances; to send you service notifications; and, where you have not opted out, to measure product usage in aggregate so we can improve it. We do not sell your personal data.
4. What other users can see
Your display name, profile photo, city, verification badges, trust indicators and your active listings are visible to other users. Your phone number is not shown publicly — contact happens through in-app chat. Anything you type into a chat is visible to the person you are talking to, and may be reviewed by us if it is reported.
5. Who we share it with
Service providers who operate the platform on our behalf — hosting and storage, our payment gateway, communications and analytics providers — under contracts that limit them to our instructions. Law-enforcement or courts where we are legally required to disclose. A successor entity in the event of a merger or acquisition, subject to this policy. We do not sell or rent personal data to advertisers.
6. How long we keep it
Account data is kept while your account is open. After deletion we remove or anonymise personal data, except where we must retain it — transaction and tax records for the statutory period, and safety records where an account was actioned for fraud or abuse, so the same actor cannot immediately return.
7. Your rights
You can access and correct your profile in the app, request a copy of your data, ask us to erase your account, withdraw consent where processing relies on it, and nominate someone to exercise these rights if you are unable to. To make a request, contact us at the address in section 1. We may need to verify your identity before acting, and we will respond within the period required by law.
8. Security
We use encryption in transit, scoped access tokens, and access controls on internal systems. No system is perfectly secure; if a breach affects your personal data we will notify you and the Data Protection Board as required.
9. Children
Listro is not for anyone under 18. We do not knowingly collect data from children. If we learn that we have, we will delete the account and its data.
10. Changes and contact
We will post material changes to this policy on this page with a new effective date. For any privacy question or complaint, contact our Grievance Officer Hassain at legal@listro.in. If you are not satisfied with our response you may complain to the Data Protection Board of India.
