1. Scope and controller
This policy applies when you visit yaar.buzz, join the waitlist, submit an inquiry, communicate with Yaar on WhatsApp, email, phone, web forms, or social media, provide a supplier quote, or use an administrative or support workflow.
Yaar determines the purposes and means of processing described here and acts as the data fiduciary or controller where applicable. Yaar is based in India. This policy should be read with any additional notice shown at the point of collection.
2. Information we collect
We collect information you provide, information generated through your use of Yaar, and limited information supplied by platforms and service providers that operate our workflows.
Identity and contact data
Your name, business name, email address, phone or WhatsApp number, city, business location, role as buyer or supplier, and account or waitlist details.
WhatsApp and communication data
Messages you send to Yaar, message identifiers, timestamps, delivery and read status, button or list selections, profile name, and communication history. We do not access unrelated personal chats, your contacts, or your WhatsApp password.
Inquiry and media data
Products, specifications, quantities, budgets, urgency, delivery details, quotes, availability, and files you choose to send, including photographs, documents, drawings, lists, audio, or location pins.
Supplier and transaction data
Supplier profile and verification details, service areas, catalog information, quote price, stock, MOQ, lead time, payment or fulfilment notes, response history, credits, and dispute or support records.
Location data
An area, address, or precise latitude and longitude when you actively share a location or submit a location-enabled form. Location is used for delivery context and matching nearby suppliers.
Device, usage, and security data
IP address, browser and device type, pages viewed, referral source, timestamps, cookie identifiers, diagnostic logs, security events, and approximate location inferred from network information.
Consent and preference records
How and when you opted in, the source of consent, communication preferences, unsubscribe or STOP requests, suppression status, and records needed to demonstrate or honour those choices.
Please do not send passwords, card credentials, medical information, government identity documents, or other sensitive personal data unless Yaar specifically requests it for a stated and lawful purpose.
3. WhatsApp Business Platform and Meta
Yaar uses the official WhatsApp Business Platform. When you communicate with Yaar on WhatsApp, Meta and WhatsApp transmit your message and related metadata to our systems and transmit our replies back to you. This can include your WhatsApp number, profile name, message content, attachments, message identifiers, timestamps, and delivery or interaction status.
Meta and WhatsApp independently process information under their own terms and privacy notices. Their processing, infrastructure, security, and retention are not controlled by Yaar. Review the WhatsApp Privacy Policy, WhatsApp Business Terms, and Meta Privacy Policy.
Yaar is an independent service. It is not WhatsApp or Meta, and Meta does not endorse Yaar merely because Yaar uses the WhatsApp Business Platform.
4. Consent and communication preferences
Before a new buyer or supplier profile is created on WhatsApp, Yaar presents a link to this policy and asks the person to choose “Agree & Continue” or “Not Now”. Agreeing records the policy version, time, and WhatsApp registration source. Choosing “Not Now” pauses registration; Yaar does not create the profile or process the submitted requirement until the person returns and agrees.
You ask Yaar to communicate with you when you start a WhatsApp conversation, send a requirement, tap a Yaar WhatsApp link or button, submit your number with a request to be contacted, join an enabled waitlist flow, or otherwise clearly opt in. We may send service messages needed to respond, clarify specifications, provide account or supplier-review updates, route an active inquiry, deliver quotes, prevent fraud, or handle support.
Marketing or product-update messages are sent only where we have the required permission or another permitted basis. Consent is specific to the stated purpose and is not a condition for receiving unrelated services. WhatsApp business-initiated messages may use templates reviewed by WhatsApp.
- Reply STOP on WhatsApp to stop promotional WhatsApp messages from Yaar.
- Use the unsubscribe link in an email to stop promotional email.
- Contact krishn@yaar.buzz to withdraw consent or change preferences.
- Operational messages may still be sent when necessary to complete a request you initiated, protect the service, comply with law, or confirm an opt-out.
5. AI and automated processing
Yaar uses automated systems and AI services to interpret unstructured messages, photos, documents, and other inquiry content; extract product specifications; identify missing details; classify intent; match supplier categories; detect spam or abuse; and normalize quotes.
AI output can be incomplete or incorrect. We may ask you to confirm extracted information before routing it and may use human review for exceptions, quality, safety, supplier approval, or support. Yaar does not use automated processing to make decisions that produce legal or similarly significant effects about individuals without appropriate safeguards.
6. How and why we use information
- Provide waitlist access, accounts, onboarding, inquiries, supplier matching, quote collection, comparison, and support.
- Respond through WhatsApp, email, phone, or web channels and maintain conversation context.
- Verify buyers and suppliers, manage credits or payments where enabled, and maintain operational records.
- Improve product-specification research, matching quality, response time, AI accuracy, usability, and reliability.
- Measure website and campaign performance and understand aggregate product usage.
- Protect users and Yaar through authentication, rate limits, audit logs, fraud detection, abuse prevention, and incident response.
- Comply with legal obligations, enforce agreements, resolve disputes, and establish or defend legal claims.
Depending on the context and applicable law, processing is based on your consent, your voluntary request for a service, performance of our arrangements with you, compliance with law, or permitted legitimate uses such as security, fraud prevention, and responding to an inquiry you initiated.
7. Buyer-supplier routing and contact disclosure
To obtain quotes, Yaar may share a structured requirement with selected suppliers. It can include the product, specifications, quantity, budget, and urgency. A buyer's location remains mandatory for Yaar's internal matching and delivery context, but supplier quote requests do not include the buyer's location name, address, delivery location, latitude, longitude, GPS coordinates, or location pin. Yaar may use that private location internally to rank or filter nearby suppliers.
We generally avoid disclosing a buyer's direct contact details during initial quote collection. Buyer or supplier contact details and fulfilment location may be disclosed after the buyer approves a quote or connection, when direct coordination is required, and only when the disclosure was explained or authorised. Recipients must use disclosed information only for the relevant sourcing or fulfilment purpose and not for unrelated marketing or resale.
9. Cookies and analytics
Yaar's website uses essential storage and may use Google Analytics or similar measurement tools. These technologies can collect cookie identifiers, IP-derived location, device and browser details, referral source, visited pages, and interaction events. We use this information to operate, secure, and improve the website and understand aggregate campaign performance.
You can restrict cookies through your browser and use available Google Analytics opt-out controls. Blocking essential storage may affect sign-in, preferences, or other functionality. Yaar does not use WhatsApp inquiry content for third-party behavioural advertising.
10. International data transfers
Some providers operate infrastructure or support teams outside your state or country. Information may therefore be processed in India and other locations where Meta, Google, Supabase, Vercel, Resend, or their subprocessors operate. We use contractual, organisational, and technical safeguards appropriate to the service and comply with applicable transfer restrictions.
11. Retention and deletion
We retain data only for as long as reasonably necessary for the purpose collected, including active waitlist or account use, inquiry and quote operations, supplier history, support, security, accounting, dispute resolution, legal compliance, and improving reliable matching. Retention depends on the data type, sensitivity, operational need, user expectations, and legal requirements.
Deletion from active systems may not immediately remove encrypted backups or records that must be retained for security, fraud prevention, legal, tax, or suppression purposes. Such records are isolated, access-limited, and deleted or anonymised when the applicable need ends. We may keep a minimal suppression record so that an opt-out remains effective.
12. Security and incidents
We use reasonable administrative, technical, and organisational measures such as access controls, managed secrets, encrypted transport, environment separation, logging, backups, and vendor controls. No online system is completely secure. If a personal-data breach creates a notification obligation, we will notify affected people and authorities as required by applicable law.
13. Your rights, deletion requests, and grievances
Subject to applicable law, including India's Digital Personal Data Protection framework when in force and applicable, you may:
- Request a summary of the personal data we process and the processing activities involving it.
- Request correction, completion, or updating of inaccurate personal data.
- Request erasure where retention is no longer required or another lawful reason does not apply.
- Withdraw consent as easily as it was given. Withdrawal does not invalidate processing already performed.
- Opt out of promotional email through its unsubscribe link and opt out of promotional WhatsApp messages by replying STOP.
- Raise a grievance and, where applicable, nominate another person to exercise your rights in the event of death or incapacity.
If you are dissatisfied, first contact our Privacy and Grievance Contact below. You may also approach the competent data-protection authority where the law gives you that right.
14. Children
Yaar is a business-to-business service intended for adults acting for businesses, workshops, factories, procurement teams, or suppliers. It is not directed to children under 18. Do not submit a child's personal data through Yaar. If we learn that such data was collected without valid authorisation, we will take appropriate steps to delete it.
15. Changes, governing law, and contact
We may update this policy as Yaar, its vendors, or legal requirements change. The date at the top identifies the current version. For material changes, we may provide additional notice through the website, WhatsApp, or email.
This policy is governed by applicable laws of India. Nothing in this policy limits rights that cannot legally be waived.
Privacy and Grievance Contact
Contact Yaar
Contact us for access, correction, erasure, consent withdrawal, communication preferences, security concerns, or privacy grievances.