Privacy Policy

CropBid is an agricultural marketplace that connects farmers directly with buyers. This policy covers the CropBid website and the CropBid Android app.

Account details. Your name, phone number, and password. An email address is optional — many farmers do not have one, so we do not require it. Your password is stored only as a bcrypt hash; nobody at CropBid can read it.

Profile details. Your role (farmer, buyer or consumer), location, country, preferred language and currency, and a profile photo if you upload one. Buyers may add company details such as company name and GST number. Farmers may add an FPO name, APMC licence, and bank details for settlement.

Trading activity. Crop listings you create including photographs, bids you place or receive, negotiations, orders, and delivery addresses.

Payment information. Payments are processed by Razorpay. Card and bank credentials are entered on Razorpay's checkout and never reach CropBid's servers — we store only the Razorpay order and payment reference for the transaction.

Technical data. Standard server logs, and an internal audit log of significant account actions (for example account deletion) used for security and dispute resolution.

When you list a crop or place a bid, the counterparty sees what they need to trade with you and no more: your name, your general location, and your listing or bid details.

A farmer's phone number and email are never shown to buyers browsing listings, bidding, or negotiating. Contact details are exchanged only once an order is confirmed between the two of you, because at that point a delivery has to be arranged.

To create and secure your account, to show your listings to the right buyers, to run bidding and negotiation, to process payments and arrange delivery, to send you notifications about your trades, and to detect and prevent abuse of the platform.

We do not sell your personal data, and we do not use it for advertising.

Other CropBid users, limited as described above. Razorpay, our payment processor, to take payment. Logistics partners, where you choose to book delivery through the platform — they receive the pickup and delivery details needed for that shipment. Our infrastructure providers, who host the application, database and uploaded images on our behalf.

We may also disclose information where the law requires it, or to protect the safety and rights of our users.

We keep your account data for as long as your account is open. Completed transaction records are retained after that where we need them for tax, accounting and dispute-resolution purposes.

You can delete your account from Settings. If you have no settled trades, your account and its data are deleted outright.

If you do have settled trades, we cannot erase the record of a completed transaction the other party is also entitled to. In that case we anonymise your account instead: your name, phone number, location, profile photo and bank details are removed, your login is permanently disabled, and the transaction survives with no personal details attached. Uploaded images that are no longer referenced are deleted.

You can also ask us to access or correct your data by writing to info@cropbid.in.

Passwords are hashed with bcrypt. Password-reset links are stored only as a hash, expire after one hour, and can be used once. Sessions use short-lived access tokens with refresh tokens that are invalidated on logout. All traffic is served over HTTPS. Repeated failed sign-in attempts are rate limited per account.

No system is perfectly secure, but if we ever discover a breach affecting your personal data we will tell you.

CropBid is not intended for anyone under 18, and we do not knowingly collect data from children.

If we change what we collect or how we use it, we will update this page and change the date at the top. Significant changes will also be notified in the app.

Questions about this policy, or about your data, go to info@cropbid.in.