Privacy Policy

1. What we collect, and when

When you register or run a listing. Your name, email address, phone number, company name and job title, and anything you put on the listing itself - address, phone, WhatsApp number, website, logo, photographs, products and services. If you upload incorporation or tax documents they are stored privately and are never published.

Photos you upload. Product and gallery photos are shown with a small DailySundry mark in one corner, added when the photo is saved. We keep an unmarked copy privately, outside the public site, so the mark can be redrawn without asking you to upload again. That copy is never published.

When you contact a company. Your name, email, phone, company name and the message itself, for an enquiry; the conversation and any attachments, for a chat. An enquiry is read by one of our administrators before it is passed to the business, so that spam and abuse never reach them.

When you look up a contact without an account. A visitor who is not signed in may reveal a small number of contact details a day. To count them we set a cookie (ds_guest) holding a random identifier, and we record which company was revealed with the IP address and browser it was revealed from. The identifier is not your name and is not linked to an account unless you later sign up.

When you write to us. Support tickets and requests to claim, remove or report a listing carry your name, email, phone and what you wrote. A reply you send to one of our WhatsApp alerts arrives here too and opens a support ticket.

When you pay. The amount, the plan or item, the invoice or proforma number, and the reference the payment provider gives us. We never see your card details - the payment happens on the provider's own page, and only the result comes back to us.

As you use the site. Pages you open on a listing are counted so the owner can see how it is performing. While a listing's owner is signed in, the listing may show that they are online, so visitors know a chat is likely to be answered; it shows only that, never when they were last seen.

The connection you did it from. Where something is submitted rather than merely read, we record the IP address and the browser it came from, alongside the time. That covers registering, logging in, sending an enquiry, agreeing to the terms before a chat, revealing a contact, opening a support ticket, asking to claim, remove or report a listing, placing an order, and starting a payment or a credit top-up, as well as every administrative action taken in our console. It is what an abuse investigation is built on: without it, five requests from one person are indistinguishable from five people.

A coarse location, if we can get one. An IP address can be turned into an approximate city and country by an outside lookup service. Where that lookup is switched on, the result - a place name, never coordinates, never an address - is stored beside the address it came from. It is an estimate and is often wrong: a company network, a mobile connection or a VPN can put you in another city or another country entirely. Nothing is decided by it on its own.

None of that is shown to another user. The business you write to does not see your IP address, your browser or the place we estimated. Nor do you see theirs. It is visible only to us, in our own console.

2. Verification codes and consent records

Logging in is passwordless: we email a 10-minute code and the code is the credential, so it is masked out of our own mail log rather than sitting there readable. When you accept the terms before a chat we record that you did - the time, your IP address, your browser, and a coarse location if we are configured to resolve one - because that record is the proof of consent, and it is deleted with the account it belongs to.

3. What is public on purpose

A listing is meant to be found: its name, description, location, products and services are public. A paid listing also publishes its phone number and email, which is most of what the plan is for - though its owner may switch that off, in which case those details are handled the way a free listing's are. A free listing's phone and email are shown to a signed-in member who asks for them, or to a visitor without an account within the small daily allowance described above, and we record who asked. Nothing you write in a chat or an enquiry is ever published.

Search engines and AI assistants. Because a listing is public, it is also made easy to find elsewhere. Listing pages appear in our sitemap and RSS feeds; when one is added or changed, its web address is sent to search engines through IndexNow (only the address, never anything about you); and the directory's categories and counts are summarised in files written for AI assistants. Search engines and AI services may read, index and quote public pages. A listing shows the date it was last updated, and a new one may appear under “Recently added” on category pages. If a listing is removed here, the copies other services hold drop out on their own timetable, not ours.

5. Why we use it, and on what basis

We use personal data only for these purposes, each resting on a legal ground:

• To provide the service you asked for - your account, your listing, enquiries, chats, revealing contact details, plans and payments. Basis: performing our contract with you.
• To run and protect the directory - publishing and moderating listings (including compiled ones), search, preventing spam, fraud and scraping, keeping connection records and investigating abuse. Basis: our legitimate interest in a trustworthy directory, balanced against your rights; you can object.
• With your consent - analytics and personalised ads (the Accept all cookie choice), WhatsApp alerts, and the terms you accept before a chat. You can withdraw consent at any time, as easily as you gave it; that does not undo what was lawfully done before.
• Service and reminder mail - receipts and codes (contract), and reminders and announcements to members (legitimate interest, with one-click unsubscribe).
• To meet the law - invoices and accounting records, answering lawful requests from courts and government agencies, and the records Indian law asks an online intermediary to keep. Basis: legal obligation.

We do not use your data for any other purpose without telling you first and, where needed, asking.

6. Cookies

Essential cookies remember your answer to the cookie banner for 180 days, your currency, that you are logged in, and - if you are not signed in - how many free looks at contact details you have used. Analytics run only if you choose Accept all. Pages of Free listings, the category pages, search results and the products & services catalogue may show ads from Google AdSense: with Accept all Google may personalise them using its cookies and your earlier visits to this and other sites; otherwise it shows ads that are not personalised, for which it may still use cookies to limit repeats and to stop fraud. The cookie section of our terms names each one and what it does.

7. Who else sees it, and where

We do not sell your personal data, and nothing you give us - your name, email, phone number or what you write - is shared for anyone's advertising. The only advertising use is Google personalising the ads it shows, and only if you choose Accept all; choosing Essential only turns that off. Other companies see some of your data in these cases only, as service providers acting on our instructions:

Our email provider carries the mail we send you. Meta's WhatsApp service carries WhatsApp alerts, if the listing has opted into them. Our payment providers take payments and tell us the result. Cloudflare Turnstile checks that a form was filled in by a person, on the sign-up, log-in, enquiry and support forms. If you chose Accept all, the analytics provider configured for the site sees your visit. On a page with ads, Google sees the visit to choose and count the ad - see how Google uses information from sites that use its services; you can turn off personalised ads from Google at Google's ad settings.

Search runs on our own servers, including the part that matches meaning rather than words. If we switch that part to OpenAI's embedding service instead, the text of public listings and the words typed into search are sent to OpenAI to be turned into the numbers the matching uses; nothing identifying the person searching is sent with them. When a listing is added or changed, its public web address is sent to the IndexNow service, which shares it with the search engines taking part (among them Bing and Yandex).

A listing's owner sees the enquiries and chats sent to them, which is the point of sending one - an enquiry once an administrator has passed it, a chat as it is written. They are also shown the website and address of the sender's own listing, where the sender has one on this directory, so they know who is asking. They are not shown the sender's IP address, browser or estimated location, and there is no screen anywhere in a member's account that displays them.

Administrators can see accounts, listings, enquiries, chats, tickets and the mail log in order to run the directory and act on reports, and it is only there that a connection - address, browser, estimated place - is shown. An estimate that has never been looked up is labelled as such rather than left blank, so that nobody in the console mistakes “we did not look” for “there was nothing to find”.

We may also disclose data where the law requires it - to a court, a regulator or a government agency with the power to ask - or to protect people from fraud or harm. If the business behind DailySundry changes hands or is incorporated as a company, your data passes to that successor under this policy.

Where your data is processed. We are based in India, and our servers and several of the providers above - email, payments, Google, Cloudflare, OpenAI where used - may process data in other countries, including the United States. Wherever it is processed it stays protected by this policy, and where the law of your country requires a safeguard for such a transfer (for example the EU's standard contractual clauses), we rely on the ones those providers offer.

None of this covers a site you leave us for. A listing's own website, its social links and the bodies named on the reference pages each have their own privacy practices, which are theirs and not ours - Links to other websites in the Terms says so in full.

8. How long we keep it

Your account and your listing stay until you ask us to remove them. The copy of an email we send is kept for 180 days and then deleted, while the record that it was sent - who to, what about, whether it arrived - is kept. A verification code expires in 10 minutes. A confirmation link for a claim or removal expires in 48 hours and works once. A photograph that fails moderation is deleted from storage after 30 days. The private unmarked copy of a photo is deleted together with the photo - when you delete or replace it, when we delete it, or when it is purged after failing moderation. The cookie that counts free looks at contact details lasts a year. Records we need for accounting, such as invoices, are kept as long as the law where we are registered requires.

The connection records described above - address, browser, estimated place - are kept for as long as the thing they belong to is kept, because their whole purpose is to answer a question asked later about that order, that ticket or that request. Deleting your account deletes the consent records tied to it. Ask us to erase yours and we will, except where a record is one we are required to keep or need in order to defend a claim.

Two periods are set by Indian law. When content or an account is removed, the information about it is kept for 180 days afterwards, or longer if a court or government agency asks, so that it is available to an investigation. Security and access logs of our systems are kept for at least 180 days. When a purpose has ended and no law needs the data kept, we delete it.

9. Your rights, and how to use them

You can stop the mail: every reminder and announcement carries a one-click unsubscribe, and it takes effect immediately. Transactional mail - a receipt, a verification code, a reply to your own ticket - has no unsubscribe, because switching it off would break the thing you asked for.

You can change your cookie answer at any time through Cookie settings at the foot of every page.

Wherever you are, you can ask us to:

• tell you what personal data we hold about you, how we use it and who we have shared it with, and give you a copy;
• correct data that is wrong or incomplete, or bring it up to date;
• delete your data and close your account, where we are not required to keep it;
• stop using your data for a purpose that rests on our legitimate interest, or restrict how we use it while a question is looked at;
• give you the data you provided in a common, machine-readable format, or send it to someone else (portability);
• withdraw a consent you gave;
• nominate another person to exercise these rights for you if you die or become unable to (a right under India's DPDP Act).

If you are in California, you also have the right to know, delete and correct personal information, and the right not to be treated differently for using those rights. We do not sell personal information. Choosing Essential only in Cookie settings stops the only sharing for advertising that happens here.

Send a request to legal@dailysundry.com from the email address on your account, or say which listing it concerns. We may ask you to confirm who you are before acting, so that nobody can obtain or delete another person's data. We answer within 30 days and do not charge for it. There is no button for deletion - a request reaches a person, because deleting a listing also destroys the enquiries, chats and invoices attached to it.

If a listing is yours and you did not create it, or should not be here at all, claim, remove or report it - every request is read by a person, and a claim or a removal is confirmed by email before anything happens.

10. Keeping it safe, and if something goes wrong

Stored credentials - mail server passwords, payment keys, the WhatsApp token - are encrypted at rest. Uploaded documents sit outside the public web root. Logging in is passwordless, so there is no password of yours for us to lose. Attachments in a chat are reachable only by the two people in it and by an administrator. Connections to the site are encrypted, and access to our console is limited to the people who need it and recorded in an audit log.

If there is a data breach. No system is perfectly secure. If a breach affects your personal data, we will tell you without undue delay - what happened, what it may mean for you and what we are doing about it - and report it to the authorities the law names, including the Data Protection Board of India and CERT-In in India, and a supervisory authority abroad where that law applies.

11. Children

DailySundry is for businesses and for adults acting for them. It is not meant for anyone under 18, and we do not knowingly collect a child's personal data. If you believe a child has given us their data, tell us and we will delete it.

12. Decisions made by software

Software orders search results and category lists (by plan, then by how recently a listing was updated), and counts allowances. None of it makes a decision with legal or similarly significant effects on you without a person involved: a listing is approved or rejected, and an account closed, by one of our administrators.

13. Changes to this policy

When we change this policy, the date at the top changes. If a change is significant - a new purpose, a new kind of recipient, less protection for you - we will say so on the site, and by email to registered members, before it takes effect.

14. Contact and complaints

Write to accounts@dailysundry.com about your account or a listing, or to our Grievance Officer, Sachin Singh, at legal@dailysundry.com or +91 63978 78842, about anything on this page - including a request to see, correct or delete what we hold. We acknowledge a complaint within 24 hours and aim to resolve it within 15 days. DailySundry is at Ghaziabad, Uttar Pradesh, 201001, India.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India once it is accepting complaints; in the EU or UK, to the data protection authority where you live or work (in the UK, the Information Commissioner's Office); or to the authority that applies in your own country.