Privacy Policy

1. Information We Collect

We collect information you provide directly: email address, name (via Google OAuth), profile image, listing content (titles, descriptions, images, prices, locations), and messages sent through our platform.

We automatically collect: browser type, IP address, pages visited, time spent on pages, and device information.

2. How We Use Your Information

• To provide and maintain our marketplace service
• To authenticate your identity via email and password, Google, or Facebook
• To display your listings to other users
• To facilitate messaging between buyers and sellers
• To send transactional emails (address verification, password resets, notifications)
• To improve our platform and user experience

3. Third-Party Services

These are every company that processes your data on our behalf, and what each one does. This list was last checked against what the site actually runs on 5 September 2026.

• Cloudflare — the site itself runs on Cloudflare Workers. The same account holds the database (D1), the listing photographs (R2), the rate limiter, the automated first look at uploaded images, the transactional email we send you, our DNS, and Cloudflare Web Analytics
• Migadu — the mailbox behind support@caio.ltd. Email you send us is received and stored there
• Google and Facebook — for optional social sign-in, and only if you choose it
• Cashfree (payments in rupees) and PayPal (payments in US dollars) — used only when you buy something. We never see or store your card details

What is no longer true, named rather than deleted: this page listed Vercel for hosting and analytics until 5 September 2026. The site left Vercel on 1 September 2026 and that entry was stale from then on. It also listed Neon for database hosting; the database moved to Cloudflare D1 on 2 September 2026 and the Neon project was deleted, so no copy of your data remains there. Google Analytics was removed on 2 September 2026.

The analytics we do run is Cloudflare Web Analytics, which is live and was confirmed serving on this site. It sets no cookie and stores no identifier for you, which is why there is no cookie banner to click.

4. Cookies

We use cookies to sign you in and to keep that sign-in safe, plus one that remembers your choice of language if you make one. There is no advertising cookie and no analytics cookie. Our Cookie Policy names every one of them, says how long each lasts, and lists separately what the site keeps in your browser without using a cookie at all.

5. The business directory

Parts of this site list businesses — name, address, telephone number and website — that we did not receive from the business itself. These entries are imported from Overture Maps Foundation, an open dataset published under permissive licences (CDLA-Permissive-2.0, Apache-2.0 and CC0-1.0). Every entry we show names its source and licence on the page it appears on.

They are records about businesses, not advertisements those businesses placed with us, and the page says so. We show only contact details the business had already published in order to be contacted.

Where a business is run by one person, that information can also be personal data. For people in the United Kingdom, the European Economic Area and Brazil, our lawful basis for publishing it is legitimate interests — helping people find local businesses, which is the purpose of a directory. We think that is fair because the details were already public, because they concern someone acting in a business capacity rather than a private one, and because we do not publish anything beyond what is needed to make contact. If you disagree, you can object and we will act on it.

To have an entry removed, email support@caio.ltd or use our contact form. You do not have to explain why. We remove entries within 30 days and normally much sooner, and removal is permanent: we keep a record of the entry’s identifier for the sole purpose of ensuring that a later refresh of the source data cannot restore it. That record holds no contact details.

These rights apply to the directory in addition to everything in section 6 below.

6. Your Rights

You may request to access, correct, or delete your personal data by contacting us at support@caio.ltd. You can delete your listings at any time through the platform.

7. Data Security

We implement appropriate security measures to protect your data, including encrypted connections (HTTPS), secure authentication tokens, and access controls on our database.

8. Contact

For privacy-related inquiries, contact us at support@caio.ltd.