Privacy Policy
How Global Produce Index collects, uses, and protects your information.
Last updated: 25 August 2026
1. Introduction and scope
This Privacy Policy explains how Global Produce Index ("Global Produce Index", "we", "us") collects, uses, discloses, and protects information when businesses and their authorized representatives use our platform to access market intelligence, request quotes, and manage trade relationships across the Saudi Arabia–India corridor. It applies to our website, web application, and related services (together, the "Service"). Global Produce Index is a business-to-business (B2B) platform; it is not directed at, and does not knowingly collect data from, individual consumers acting outside a business capacity or from children.
2. Data controller
Global Produce Index is the data controller (or equivalent role under applicable law) responsible for personal data processed through the Service. Registered company name, registration number, and registered address: [to be completed by Global Produce Index's legal team before publication]. For data protection queries, see "Contact us" below.
3. Information we collect
Account information: name, work email, phone number, role, and password-free (OTP) authentication records. Company and verification information: legal and trading name, country, commercial registration and VAT numbers, business address, commodity interests, and KYC documents you upload (e.g. registration certificates, authorization letters). Trade activity: RFQs, quotes, negotiation history, saved markets, and messages exchanged through the Service. Billing information: subscription plan, billing period, and invoice history; card and payment details are collected and processed directly by our payment processor (Stripe) — we do not store full card numbers. Technical information: IP address, device and browser type, log data, and cookies described in Section 11.
4. How we use your information
We use your information to: create and secure your account and verify your business identity; operate core features such as market price data, RFQs, quotes, and company directories; process subscriptions and payments; communicate service, security, and billing notices; detect and prevent fraud, abuse, and unauthorized access; comply with legal and regulatory obligations; and improve the Service's reliability and usability. We do not sell personal information, and we do not use your trade or company data to train third-party AI models without your consent.
5. Legal bases for processing
Depending on your location, we rely on one or more of the following legal bases: performance of a contract with you or your company (e.g. providing the Service you subscribed to); our legitimate interests in operating, securing, and improving a B2B platform, balanced against your rights; your consent, where required (e.g. certain cookies or marketing communications), which you may withdraw at any time; and compliance with legal obligations, including know-your-customer, tax, and record-keeping requirements applicable to a trade platform.
6. How we share information
We share information only as needed to operate the Service: with other users as part of the marketplace itself (e.g. an exporter sees the RFQ details an importer chooses to post, and vice versa for quotes); with service providers acting on our behalf under contract, including cloud hosting and database infrastructure, payment processing (Stripe), transactional email/SMS delivery, and (where enabled) WhatsApp Business messaging and mapping services; with professional advisers and authorities where required by law, to enforce our Terms of Use, or to protect the rights, safety, or property of Global Produce Index or others; and in connection with a merger, financing, or acquisition, subject to continued protection of your data. We do not sell your personal information to third parties.
7. International data transfers
Because Global Produce Index serves a cross-border corridor between Saudi Arabia and India and uses infrastructure providers that may process data in other countries, your information may be transferred to and processed in countries other than your own. Where required by the Saudi Personal Data Protection Law (PDPL), India's Digital Personal Data Protection Act (DPDP Act), or other applicable law, we take steps intended to ensure such transfers are subject to appropriate safeguards, such as contractual protections with service providers.
8. Data retention
We retain personal and company data for as long as your account is active and as needed to provide the Service, plus a reasonable period afterward to meet legal, tax, accounting, dispute-resolution, and audit-trail obligations relevant to a commercial trade platform. KYC documents are retained in line with applicable verification and record-keeping requirements. You may request earlier deletion as described in Section 10, subject to these legal retention needs.
9. Data security
We apply security measures appropriate to the sensitivity of the data we hold, including: one-time-passcode authentication with hashed, time-limited codes; HttpOnly, Secure session cookies; encryption of stored integration secrets; private object storage with short-lived signed URLs for KYC documents rather than public links; server-side enforcement of subscription and role-based access (not client-side hiding alone); and audit logging of privileged administrative actions. No system is completely secure, and we encourage you to use a unique password-free login and report any suspected unauthorized access immediately (see Section 14).
10. Your rights
Subject to applicable law (including the Saudi PDPL and India's DPDP Act), you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion or restriction of processing; object to certain processing; withdraw consent where processing is consent-based; and receive a copy of your data in a portable format. To exercise these rights, contact us using the details in Section 14; we will respond within the timeframe required by applicable law. We may need to verify your identity and your authority to act on behalf of a company account before fulfilling a request.
11. Cookies and similar technologies
We use strictly necessary cookies to keep you signed in and to secure your session, and may use limited analytics cookies to understand platform usage and improve reliability. We do not use cookies for third-party advertising. Where non-essential cookies are used, we will request your consent in accordance with applicable law before setting them.
12. Children's privacy
The Service is intended for business use by adults acting on behalf of a company and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated version on this page with a revised "Last updated" date, and for material changes we will provide additional notice (such as an in-app or email notification) before the change takes effect.
14. Contact us
For questions about this Privacy Policy or to exercise your data protection rights, contact us at support@globalproduceindex.com. Please include enough detail (such as your account email and company name) for us to verify and respond to your request.
This policy is a substantive draft prepared to reflect the platform's actual data practices and standard PDPL/DPDP Act concepts. It should be reviewed by qualified legal counsel — and completed with your registered entity details — before being treated as final, binding copy.