Privacy Policy

1. Who we are

Orecore Global Private Limited, a company registered in India. Registered address: Near Garhi Wala Mandir, Behlolpur Road, Samrala, Ludhiana, Punjab 141114. GSTIN: 03AAFCO0321G1Z5. For any privacy question, contact us at orecoreglobal@gmail.com.

2. Information we collect

• Account & sign-in data. When you sign in with Google, we receive your name, email address, and profile picture from your Google account. You may instead sign in with a one-time code sent to your email; in that case we collect only your email address. We do not receive or store your Google password.
• Profile & business data. The details you provide during onboarding and in your profile — your role, company name, mobile/WhatsApp number, GST details, and business address.
• Trading & deal data. Price quotes, bids, matches, deals, payment references (UTR numbers), dispatch and delivery records, freight bids, invoices, and related messages you create on the Service.
• Support & communications. Messages you send through in-app support chat and our records of notifications sent to you.
• Technical data. Standard log information (such as device, browser, and session data) needed to operate and secure the Service.

3. How we use your information

• To authenticate you and provide access to the Service.
• To operate the deal workflow — surfacing matches, recording deals, tracking payments, dispatch, delivery, and closure.
• To generate GST commission invoices and meet related legal and accounting obligations.
• To send you operational notifications by WhatsApp and email about your deals and account.
• To provide customer support and to maintain the security, integrity, and reliability of the Service.

We do not sell your personal information, and we do not use Google user data for advertising.

4. Google user data

OreCore’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the basic profile and email scopes needed to sign you in and identify your account. We do not transfer Google user data to third parties except as necessary to provide the Service, comply with the law, or as part of a merger or acquisition.

5. How we share information

Identities of counterparties are private by default on the Service and are shown as codenames unless deliberately revealed. We share your information only:

• With other parties to a deal you are part of, to the extent needed to complete that deal (for example, contact and pickup details once a deal is secured).
• With service providers who process data on our behalf under contract: Supabase (database, authentication, storage), Vercel (application hosting), Meta / WhatsApp Cloud API (notifications), and Resend (email delivery).
• When required by law, regulation, or valid legal process, or to protect our rights, users, and the Service.

6. Data retention

We retain your information for as long as your account is active and as needed to provide the Service. Deal, invoice, and tax records are retained for the periods required by Indian law. You may request deletion of your account by contacting us; some records may be retained where we are legally required to keep them.

7. Security

We protect your data with access controls, row-level security on the database, encryption in transit, and least-privilege access for our team. No method of transmission or storage is completely secure, but we work to safeguard your information and to respond promptly to any incident.

8. Your rights

You may access and update most of your details from your profile within the Service. To request a copy, correction, or deletion of your data, or to ask any privacy question, email orecoreglobal@gmail.com.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you within the Service.