Privacy Policy

• We collect only what we need to run a safe giveaway community.
• We never sell your personal data and we don’t show third-party advertising.
• Other members see your display name, area (PIN code/locality), ratings and listings — never your email, phone number or exact address.
• Your exact address is shared only by you, in a private chat, after you accept a request.
• Analytics cookies are used only if you agree to them.
• You can access, correct and delete your data, and withdraw consent, at any time.

GiveAway India, New Delhi, runs GiveAway and is the data controller for your personal data under the PDPA. For any privacy question or request, contact us at support@giveawayworld.online.

Data you give us

• Account: email address, password (stored only as an irreversible hash — nobody, including us, can read it), display name, preferred language, home PIN code, and your confirmation that you are 18 or older. We do not ask for your date of birth.
• Mobile number, if you provide it for verification.
• If you sign in with Google: your name, email address and profile picture from your Google account.
• Listings: photos, title, description, condition, category, PIN code and locality, pickup notes.
• Activity: requests, messages, handover confirmations, ratings and reviews, reports, saved items and searches.
• Support: anything you send us when you contact support or the Grievance Officer.

Data collected automatically

• Technical and security data: IP address, browser and device type, pages visited, date and time, and error logs.
• Cookies needed for sign-in and language choice (see our Cookie Policy).
• Anti-spam checks by Cloudflare Turnstile when you sign up, sign in or post.
• With your consent only: usage statistics through Google Analytics.

What we don’t collect: Aadhaar, PAN, bank account or card details, or payments of any kind. Location data (EXIF/GPS) is removed from photos before they are uploaded.

We process your personal data on the basis of your consent, which you give when you create an account and use the Platform, and for the legitimate uses permitted under Section 7 of the DPDP Act (for example, complying with the law). We use it to:

• create and secure your account and let you sign in;
• publish your listings and show items near your PIN code;
• let you send and receive requests and messages, confirm handovers and leave reviews;
• moderate content, prevent spam, fraud and abuse, and keep members safe;
• send service messages, such as email confirmation, password resets and important updates;
• understand how the Platform is used, in aggregate, to improve it (analytics only with consent);
• comply with the law, respond to lawful requests from authorities and enforce our Terms.

We send promotional emails only if you have opted in, and every such email has an unsubscribe link.

• Public: display name, profile picture, area (PIN code and locality), member since, ratings and reviews, Verified badge and your active listings.
• The giver of an item you request: your request message, display name, rating and verification status.
• Only people in a chat: the messages in that chat, including anything you choose to share, such as an address or phone number.
• Never shown to other members: your email address, mobile number, password or IP address.

We share personal data only with service providers (“Data Processors”) that help us run the Platform, under contracts that require them to protect it and use it only on our instructions:

• Supabase — database, sign-in and photo storage;
• our web hosting provider (for example, Vercel) — serving the website;
• Cloudflare — security and CAPTCHA (Turnstile);
• Google — “Sign in with Google” if you choose it, and Google Analytics if you consent;
• our email delivery provider — sending account and service emails.

We may also disclose data when required by law, for example to a government agency lawfully authorised to request it under the Information Technology Act, 2000, or to protect the rights, safety and property of our members and the public. If GiveAway is ever merged or transferred, your data would move to the new operator under this policy, and we would tell you first.

We do not sell or rent personal data to anyone.

Our service providers store and process data on servers outside Thailand. We transfer data only to providers that protect it with appropriate security measures and written commitments, as the PDPA requires.

• Account data: as long as your account is active.
• After you delete your account, we erase or anonymise your personal data within 30 days, except where the law requires us to keep it longer. The IT Rules require us to keep certain information for 180 days after an account is closed, and security logs are kept for at least one year as required by the DPDP Rules.
• Reviews you gave others stay visible with your name removed, so ratings remain fair.
• Inactive accounts: if you have not signed in for 3 years, we may delete your account after warning you by email at least 48 hours in advance.
• Backups are overwritten on a rolling basis within 90 days.

Under the PDPA you have the right to:

• be informed about how your personal data is used — that is the purpose of this policy;
• access your personal data and receive a copy of it;
• correct inaccurate or incomplete data (most of it you can edit yourself in your profile);
• erase or block your data when it is no longer needed or when you withdraw consent;
• object to the use of your data, or ask us to restrict it;
• data portability — receive your data in a commonly used format (Profile → Privacy & data → Download my data);
• withdraw consent at any time, as easily as you gave it. We may then no longer be able to provide the service;
• complain to the Office of the Personal Data Protection Committee (PDPC).

To use these rights, write to support@giveawayworld.online from your registered email address. We may need to verify your identity. We answer within 30 days.

GiveAway is only for people aged 18 or older. We do not knowingly collect personal data of anyone younger. If we learn that a younger person has created an account, we will delete it. If you believe a child is using the Platform, please contact us.

• All connections are encrypted with HTTPS.
• Passwords are stored only as salted hashes; optional 2-step verification protects your account further.
• Database access is restricted by row-level security, so members can reach only the data they are allowed to see.
• Staff access is limited to people who need it, and administrative actions are logged.
• Photos are resized and stripped of location data before upload.

No system is perfectly secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by law, and tell you what we are doing and what you can do.

We use essential cookies to keep you signed in and remember your language. Analytics cookies (Google Analytics) are set only after you choose “Accept” in the cookie banner, and you can change your choice at any time with “Cookie settings” at the bottom of every page. Details are in our Cookie Policy.

We will update this policy when our practices or the law change. The date of the latest version is shown at the top. If a change affects how we use data you have already given us, we will inform you in advance and, where required, ask for your consent again.

Privacy requests and complaints: support@giveawayworld.online

Address: GiveAway India, New Delhi

General support: support@giveawayworld.online

Regulator: Office of the Personal Data Protection Committee (PDPC)

When you use the Services section we process some additional data:

• Bookings: the service, date and time, the address and phone number you give for the job, your notes, the price, messages in the booking chat, your review, and any problem report. The address and phone number are shown to the provider only after they accept the booking.
• Providers: profile details, phone number, business registration details, the services and prices you offer, working hours, your identity and business documents, your balance and its movements, and the account details you give for payouts.
• Documents are kept in a private storage area that only the provider and our review team can open, and are deleted a short time after the decision on the application.
• Online payments are handled by licensed payment companies (Razorpay in India; Xendit in the Philippines and Thailand). You enter card, bank or wallet details on their pages; we never receive or store them. We receive the payment reference, amount and status. These companies process your data under their own privacy policies.
• Records of payments, commission and payouts are kept for as long as tax and accounting laws require, even if you close your account; personal details in them are reduced to what the law requires.

We use this data to carry out bookings, pay providers, prevent fraud, handle complaints and meet legal duties.