Privacy Policy

1. Introduction

Grizo Enterprises (“the Business,” “we,” “us,” or “our”) is an Indian sole proprietorship registered under the Goods and Services Tax (GST) framework. We respect the privacy of individuals and entities that interact with our commercial website and are committed to handling personal and business data transparently, conservatively, and in compliance with applicable Indian digital data protection standards.

This policy describes what information we may receive when you visit this website, how commercial inquiries are managed, and how data governance is structured within our internal operational software.

2. Information We May Collect

The information we collect depends strictly upon how you interact with our website:

• Direct Communications & Inquiries: When you contact us via our contact form or official email, we may collect your name, email address, corporate affiliation, telephone number (if provided), and the subject/message content you supply.
• Technical Browsing Data: When navigating our website, standard web server logs may temporarily register non-identifying technical data such as your IP address, browser type, operating system version, referring URL, and timestamp. We do not use third-party behavioral profiling or cross-site tracking cookies.
• Supplier & Procurement Records: Where manufacturers or suppliers submit product catalogs, pricing sheets, or GST documentation, such commercial records are retained exclusively for procurement due diligence.

3. Purpose of Information Processing

We process received information strictly for legitimate commercial and administrative purposes:

• To evaluate, respond to, and document business inquiries submitted by potential suppliers, partners, or platform administrators.
• To maintain website security, prevent spam, and protect against malicious cyber attacks or unauthorized server access.
• To meet statutory recordkeeping, commercial invoicing, and tax obligations under Indian tax laws.
• To test and refine our internal operational workflows in isolated development environments.

We do not sell, rent, lease, or monetize personal information to third-party data brokers or marketing aggregators.

4. Marketplace API Information

Grizo Enterprises is developing internal software intended to interface with authorized marketplace APIs (specifically the Amazon Selling Partner API). We establish clear parameters regarding marketplace data:

• Current Status: Our marketplace API integration is actively under development. No live Amazon customer data or seller account feeds are currently ingested by this public website.
• Planned Operational Scope: If authorized, API data access will be strictly restricted to the seller account of Grizo Enterprises for inventory management, listing auditing, and financial settlement verification.
• Data Minimization: Our internal systems will request only the specific API roles and scopes necessary to fulfill verified operational functions.
• Compliance with Developer Policies: All future handling of Amazon marketplace data will strictly adhere to Amazon's Acceptable Use Policy and Data Protection Policy.

5. Data Storage and Security

We apply practical, defense-in-depth measures to safeguard information:

• Encrypted Web Transit: All website traffic is served over Hypertext Transfer Protocol Secure (HTTPS) using Transport Layer Security (TLS) certificates.
• Credential Protection: Development environment secrets, API tokens, and administrative keys are stored strictly in secure server-side environment configurations and are never committed to client-side code or public version control.
• Access Control: Administrative access to website hosting and development repositories is restricted to authorized administrative personnel via multi-factor authentication.

Note: While we implement prudent security practices, no Internet transmission or digital storage architecture can be guaranteed to be 100% impenetrable. We do not claim third-party certifications (e.g. ISO 27001 or SOC 2) that have not been independently awarded.

6. Data Sharing and Third-Party Processors

We do not share your personal information except with necessary infrastructure service providers operating under confidentiality obligations:

• Hosting and Infrastructure Providers: Our website assets and build pipelines are hosted on secure cloud infrastructure platforms (such as Vercel or cloud web providers) that process technical traffic data to deliver web pages.
• Email Delivery Services: When our email communication gateway is activated, messages submitted through our contact form may be processed through reputable email infrastructure providers solely to route correspondence to our inbox.
• Legal and Statutory Mandates: We may disclose information if required to do so by applicable Indian law, court order, or formal request from statutory tax or regulatory authorities.

7. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the operational purpose for which it was collected:

• Inquiry Records: General commercial correspondence is retained for the duration of the commercial relationship or until resolution of the inquiry, after which records are archived or deleted.
• Tax & Statutory Records: Formal procurement invoices and tax documents are retained for the statutory period mandated by Indian tax and GST legislation (ordinarily up to six years).
• Deletion Requests: You may request the deletion of non-statutory communication records at any time by contacting our privacy email.

8. Individual Privacy Rights

In accordance with applicable data protection principles, individuals who submit personal information have the right to:

• Request confirmation of whether we process personal data relating to them.
• Request access to or a summary of personal information we hold about them.
• Request correction or updating of inaccurate or incomplete personal records.
• Request erasure of personal information where statutory retention requirements do not apply.

To exercise any of these rights, please submit a written request using the contact information below.

9. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our operational procedures, marketplace integrations, or relevant legal requirements. When updates are published, the revised “Effective Date” at the top of this page will be updated accordingly. Continued interaction with our website following such revisions constitutes acknowledgment of the updated terms.

10. Contact Information

For any questions, clarifications, or privacy requests regarding this policy or our data management approach, please reach out to: