Privacy policy

We hold four separate kinds of data, and we keep them separate because they are treated very differently.

• Your account: your name, firm name, mobile and WhatsApp number, email, city, state and PIN code, and your password — stored only as a one-way cryptographic hash, never in a readable form.
• Your private inventory: the numbers you add and everything you record against them — asking price, RTP/NRTP status and activation date, COCP status, telecom circle and SIM location, stage (in inventory, pre-booked or sold), and the private fields such as cost price, who you bought from, partner and customer names, sale price and your own notes.
• Your published listings: the fields of a number you choose to make public — the number, its asking price, its RTP status and your firm name.
• Technical and usage data: your IP address, device and browser, log and session data, cookies and local storage, bot-detection signals from sign-in, and aggregate usage — used to run and secure the service.

We do not collect payment details — there is nothing to pay for during the beta. We do not currently collect identity documents, GST certificates or proof of ownership; if that changes as the network grows we will update this policy first.

The numbers you add and the fields you record against them are your confidential book. No other dealer can see any of it unless you publish it yourself.

This is enforced in the database, not just in the screens — row-level security and restricted views mean another dealer’s request for your data returns nothing. It is architecture, not an interface convention.

NumberGINN staff do not browse or extract individual dealers’ commercial data. A small number of authorised people hold limited technical access strictly to keep the system running, investigate a security problem, answer a support request you have raised, or comply with a valid legal order.

Some inventory fields are used only in aggregated, de-identified form to run features such as pattern search, price history and market trends. That aggregate output is never tied back to an identifiable dealer and is not presented in a way that would let anyone reverse it.

Your cost price, purchase source, partner and customer names, sale price and notes never leave your account. They are not sent to another dealer’s screen even in a hidden form.

Every number starts private. Publishing is your own act, number by number, and it is reversible — you can make a public number private again at any time.

A published listing shows only the number, its asking price, its RTP status and your firm name. Your cost and source are never part of a listing.

When you publish, your firm identity becomes visible to other verified members, and your contact number is shared with another dealer only when one of you enquires about the other’s listing or offers on a requirement. The conversation itself then happens on WhatsApp, off NumberGINN. Once a listing is visible to another dealer, we cannot control how that dealer records, copies or forwards it.

If you record an end customer’s details against a number — for example when marking it pre-booked — that is personal data about someone else, and the responsibility for it is yours, not ours.

You confirm you have a lawful basis (and any required consent) to record it, you handle any notice or request those individuals are owed, and you cover us against claims arising from it. We process it only to run the platform for you.

To run your account and the marketplace search, deliver enquiries, offers and alerts, send the emails you have turned on, produce the aggregated market features described above, and keep the network safe — including reviewing reports and moderating listings.

Administrators can see your application details, your listings and their status, and the reasons recorded for any moderation action, so they can review applications and reports. They do not trade on the network.

We use a small set of service providers, each processing data only to provide its service to us: Supabase (database, authentication and storage), Cloudflare Turnstile (bot protection on sign-in and sign-up), Resend (the emails we send you) and Google Workspace (our business email). Publishing our apps uses the Google Play Store and Apple App Store.

Some of this infrastructure may store data outside India; where it does, we require appropriate contractual safeguards of the provider. We may add or change providers and will keep this list current.

We do not sell, rent or disclose your private inventory data to advertisers, or to anyone for their own commercial purposes. We do not currently use any advertising or analytics service; if that changes we will say so here.

We keep your account and inventory for as long as your account is open. A number you delete is removed from every other dealer’s view at once.

If you ask us to close your account, your listings come down immediately. For up to 30 days after that we may keep a copy so your account can be restored if you change your mind; after 30 days it is deleted.

Two things outlast that window: records we are required to keep under law (including tax and company records, once paid plans and registration begin), and data held while a dispute, investigation or legal request involving your account is live, or where the account was closed for breach.

If your application is not approved, we keep the application record so the decision stands; it is never shown to other dealers.

You can ask us to show you the data we hold about you, correct it, or delete it, and you can nominate someone to exercise these rights on your behalf. Where we rely on your consent, you can withdraw it as easily as you gave it.

• Export: you can export your inventory at any time — including if you decide not to move to a paid plan, and if you choose to leave. This is a standing right, not a favour.
• Edit your profile, contact numbers and email notifications under Settings whenever you like, and make any number private or delete it.

To make any of these requests, or to raise a privacy grievance, write to [email protected]. Grievances reach our Grievance contact at the same address; we aim to acknowledge within 24 hours and resolve within 15 days.

Data is encrypted in transit, passwords are stored only as one-way hashes, access to your inventory is controlled at the database with row-level security, sign-in and sign-up are protected by CAPTCHA, and access is logged. No system is perfectly secure, but these are the measures a dealer’s confidential book warrants. If a breach ever affects your data, we will notify you and act as the law requires.

We use only what is needed to keep you signed in and to remember your display preferences, such as light or dark mode, on the device you use. Cost prices you reveal on screen are never remembered between visits — they reset every time.

NumberGINN is a tool for businesses and is not directed to anyone under 18. You must be 18 or older to hold an account.

If this policy changes in a way that matters, we will tell you by email before it takes effect. NumberGINN is expected to be incorporated as a company and may be restructured, merged or sold; your data may transfer to that successor as part of continuing to run the service for you, under this same policy.

Questions about this policy or your data go to [email protected].