Privacy Policy

1About ListIT

ListIT is a digital catalogue and commerce-enablement platform operated by WoraCode.

ListIT enables businesses, wholesalers, manufacturers, distributors, retailers and other Vendors to create and manage digital product catalogues and share them with buyers through WhatsApp, Instagram, Facebook, email and other digital platforms.

Customers can browse Vendor catalogues and submit Orders or enquiries to Vendors.

ListIT currently does not process payments between Customers and Vendors through the customer ordering interface.

2Information We Collect

The information we collect depends on how you interact with ListIT.

2.1 Vendor Account Information

When a Vendor creates or manages a ListIT Account, we may collect:

• name;
• email address;
• mobile/telephone number;
• login and authentication information;
• business name;
• business address;
• business description;
• business contact information;
• business logo;
• profile photograph;
• website or social-media information;
• tax or business information where required for applicable ListIT features; and
• other information voluntarily added to a Vendor profile.

We use this information to create and maintain Vendor Accounts and provide ListIT services.

3Authentication Information

ListIT may use information such as:

• email address;
• mobile number;
• password or securely stored password credentials;
• one-time passwords (OTP);
• authentication tokens; and
• session information

to authenticate users and protect Accounts.

Where passwords are used, ListIT should store them using appropriate cryptographic password-hashing mechanisms rather than in readable plain-text form.

4Product and Catalogue Information

Vendors may provide information to create and maintain catalogues, including:

• product names;
• product descriptions;
• product images;
• product videos where supported;
• categories;
• brands;
• prices;
• discounts;
• product variants;
• product attributes;
• stock or availability information;
• minimum order quantities;
• product codes/SKUs; and
• other product-related information.

Most product and catalogue information is intended to be displayed to Customers or people with access to a Vendor's catalogue.

Vendors should therefore avoid uploading confidential or unnecessary personal information into public product descriptions, photographs or catalogue content.

5Images, Photos and Files

ListIT may allow Vendors to upload product photographs, logos and other images or documents.

Depending on the functionality selected by the user, the ListIT mobile application may request permission to:

• access selected photographs or media on the device;
• select files stored on the device; or
• use the device camera to capture product photographs.

These permissions are used to provide the feature requested by the user.

Where technically supported by the operating system, ListIT should request only the level of access necessary to perform the selected function.

Images selected or uploaded by users may be transmitted to and stored on ListIT's servers or cloud-storage infrastructure so that they can be displayed in catalogues.

6Customer Information

Customers may browse certain Vendor catalogues without creating a ListIT Vendor Account.

When a Customer places an Order, submits an enquiry, or otherwise interacts with a Vendor through ListIT, we may collect information such as:

• Customer name;
• mobile/telephone number;
• email address, where provided;
• delivery or shipping address;
• city, state and postal/PIN code;
• company or business name, where applicable;
• Order information;
• quantities requested;
• Customer notes or instructions; and
• communications or information submitted in connection with an Order.

Only information reasonably required for the applicable functionality should be requested.

7Order Information

When an Order or purchase request is created through ListIT, we may process:

• Order number;
• Vendor information;
• Customer information;
• products ordered;
• quantities;
• product prices;
• applicable discounts;
• estimated or final Order value;
• shipping/delivery information;
• Order status;
• date and time;
• Customer notes; and
• Vendor Order-management information.

This information is used to provide the Order functionality and allow Vendors to manage Customer requests.

8Payment Information

ListIT currently does not process Customer-to-Vendor payments through the customer ordering interface.

Payment arrangements for products ordered from a Vendor are made directly between the Customer and Vendor.

ListIT therefore does not ordinarily require Customers to provide credit-card, debit-card or bank-account details for purchasing Vendor products through the customer ordering interface.

If ListIT introduces integrated payment functionality in the future, this Privacy Policy will be updated as appropriate to explain the information processed and the applicable payment service providers.

Vendor payments made to purchase a ListIT subscription or other ListIT service are separate from Customer-to-Vendor transactions and may be processed through an authorised third-party payment provider.

9Automatically Collected Information

When you access ListIT, certain technical information may be collected automatically, depending on the services and technologies used.

This may include:

• IP address;
• browser type;
• operating system;
• device type;
• application version;
• date and time of access;
• pages or features accessed;
• session information;
• error and crash information;
• diagnostic information;
• security logs; and
• approximate location derived from information such as IP address where necessary.

We may use this information for security, troubleshooting, service operation, analytics, fraud prevention and improving ListIT.

We do not intend to collect precise GPS location unless a ListIT feature specifically requires it and appropriate permission or consent is obtained.

10Cookies and Similar Technologies

The ListIT website and web-based interfaces may use cookies or similar technologies.

These technologies may be used to:

• keep users signed in;
• maintain sessions;
• remember preferences;
• protect Accounts;
• prevent fraud and abuse;
• understand application performance; and
• improve ListIT.

Where required by applicable law, appropriate consent mechanisms will be provided for non-essential cookies or similar technologies.

11How We Use Information

We may use information collected through ListIT to:

Provide the Service

Including to:

• create and manage Accounts;
• authenticate users;
• create Vendor profiles;
• create and publish catalogues;
• upload and display products;
• enable catalogue sharing;
• receive and manage Orders;
• enable Vendor-Customer interactions; and
• provide customer support.

Communicate With Users

We may use contact information to send:

• email verification;
• OTP/authentication messages;
• Account notifications;
• security alerts;
• Order confirmations;
• Order notifications;
• subscription notifications;
• password-reset communications;
• important service announcements; and
• customer-support responses.

Maintain Security

We may process information to:

• detect suspicious activity;
• prevent fraud;
• prevent unauthorised Account access;
• investigate abuse;
• enforce our Terms and Conditions; and
• protect ListIT, WoraCode and our users.

Improve ListIT

We may analyse service usage and technical information to understand how ListIT performs, identify errors and improve functionality and user experience.

Comply With Legal Obligations

We may process or preserve information when reasonably necessary to comply with applicable law, legal processes, regulatory obligations or valid governmental requests.

12Transactional Emails and Communications

ListIT may use email and other communication providers to deliver transactional communications.

These may include:

• OTPs;
• email verification;
• password-reset emails;
• security notifications;
• Order confirmations;
• Order-status notifications;
• Vendor notifications;
• Account notifications; and
• service-related communications.

Information such as the recipient's email address and message information may therefore be processed by our email-delivery service provider for the purpose of delivering these communications.

13Marketing Communications

Where ListIT sends optional marketing or promotional communications, we will use appropriate consent or other lawful mechanisms required by applicable law.

Users may unsubscribe from marketing emails using the unsubscribe mechanism provided with those communications where applicable.

Unsubscribing from marketing messages does not necessarily prevent us from sending essential transactional or administrative messages such as security alerts, Order information or Account notices.

14How We Share Information

We do not sell users' personal information.

Information may be shared in the following circumstances.

14.1 Between Customers and Vendors

When a Customer submits an Order or enquiry, relevant information may be provided to the applicable Vendor.

For example, this may include:

• Customer name;
• contact details;
• delivery address;
• products requested;
• quantities; and
• Order instructions.

This sharing is necessary for the Vendor to respond to and fulfil the Customer's Order.

Vendors receiving Customer information are responsible for handling that information appropriately and in accordance with applicable law.

14.2 Service Providers

We may use third-party service providers to operate ListIT.

Depending on the services we use, these may include providers for:

• cloud infrastructure;
• databases;
• file and image storage;
• email delivery;
• SMS/OTP delivery;
• hosting;
• security;
• application monitoring;
• crash reporting;
• analytics;
• customer support; and
• subscription/payment processing.

These providers may process information as necessary to provide services to ListIT.

We seek to use service providers with appropriate privacy and security practices.

14.3 Legal Requirements

We may disclose information where reasonably necessary to:

• comply with applicable law;
• comply with a court order or valid legal process;
• respond to lawful government requests;
• investigate fraud or security incidents;
• protect the rights or safety of ListIT users; or
• establish, exercise or defend legal claims.

14.4 Business Transfers

If WoraCode or ListIT is involved in a merger, acquisition, restructuring, financing or transfer of business or assets, information may be transferred as part of that transaction subject to applicable law and appropriate protections.

15Publicly Available Information

Vendor catalogues are designed to be shared.

Information intentionally published in a catalogue may therefore become accessible to Customers and other people receiving or discovering the catalogue link.

This may include:

• Vendor/business name;
• business logo;
• business contact information;
• catalogue information;
• product photographs;
• product descriptions;
• product prices; and
• other information intentionally published by the Vendor.

Vendors should not publish information that they consider confidential.

16Sharing Catalogues Through Third-Party Platforms

ListIT allows users to share catalogue links or information through third-party services such as WhatsApp, Instagram, Facebook, email, SMS and other communication platforms.

When you choose to share information through a third-party platform, that platform's own privacy policy and terms apply to its processing of information.

ListIT does not control the privacy practices of independent third-party platforms.

17Data Storage

Information processed through ListIT may be stored using cloud infrastructure and hosting providers used by WoraCode.

This may include:

• Account information;
• Vendor information;
• Customer information;
• product information;
• catalogue information;
• Order information;
• uploaded images/files;
• application logs; and
• backups.

Information may be processed in locations where our infrastructure or service providers operate, subject to applicable legal requirements.

18Data Security

We take reasonable technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration, loss or misuse.

Depending on the nature of the information and service, these measures may include:

• encrypted network communications;
• HTTPS/TLS;
• access controls;
• authentication mechanisms;
• secure password hashing;
• restricted administrative access;
• cloud-security controls;
• logging and monitoring;
• backups; and
• security updates.

However, no Internet-based service or storage system can guarantee absolute security.

Users are responsible for protecting their Account credentials and should not share passwords or authentication codes with unauthorised persons.

19Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, maintaining appropriate business and transaction records, preventing fraud, resolving disputes and complying with legal obligations.

Different categories of information may have different retention periods.

For example, information may be retained while an Account remains active and for a reasonable period after Account closure where necessary for legitimate legal, accounting, security, fraud-prevention or dispute-resolution purposes.

When information is no longer reasonably required, we may delete or anonymise it, subject to applicable legal requirements.

Backup copies may remain for a limited period as part of normal backup and disaster-recovery processes before being overwritten or deleted.

20Account and Data Deletion

Users may request deletion of their ListIT Account and associated personal information.

Vendors may initiate account deletion through the deletion option in the vendor panel settings.

Customers may request account deletion by emailing woracode@gmail.com.

When an Account-deletion request is completed, we will delete or anonymise personal information associated with the Account except information that we reasonably need or are legally required to retain.

Information may be retained where necessary for purposes such as:

• compliance with legal obligations;
• tax or accounting requirements;
• fraud prevention;
• security;
• resolving disputes;
• enforcing agreements; or
• establishing or defending legal claims.

Where information must be retained, we will restrict its use to the applicable retention purpose where appropriate.

21Your Privacy Choices and Rights

Subject to applicable law, users may have rights concerning their personal information.

Depending on the circumstances, these may include the ability to:

• access certain personal information;
• correct inaccurate information;
• update Account information;
• request deletion of personal information;
• withdraw consent where processing is based on consent;
• manage communication preferences; and
• raise questions or grievances regarding the processing of personal information.

Requests can be submitted using the contact information provided in this Privacy Policy.

We may need to verify your identity before fulfilling certain requests.

22Customer Information Controlled by Vendors

ListIT enables Vendors to receive information from Customers in connection with Orders and enquiries.

Once Customer information has been provided to an independent Vendor for the purpose of completing a transaction, that Vendor may separately process the information for purposes such as:

• contacting the Customer;
• fulfilling the Order;
• delivery;
• invoicing;
• tax compliance;
• returns;
• warranties; and
• customer support.

Vendors are responsible for their independent processing of Customer information and their compliance with applicable privacy and data-protection requirements.

Customers should contact the applicable Vendor regarding information independently retained or processed by that Vendor.

23Children's Privacy

ListIT is primarily intended for businesses and persons capable of engaging in commercial transactions.

ListIT is not designed or directed specifically toward children.

We do not knowingly seek to collect personal information from children contrary to applicable law.

If we learn that personal information relating to a child has been collected in circumstances requiring parental or guardian consent and the required consent was not obtained, we will take appropriate steps consistent with applicable law.

Parents or guardians who believe that a child has provided personal information to ListIT inappropriately may contact us using the information below.

24Third-Party Links

ListIT catalogues, Vendor profiles or other areas of the Service may contain links to external websites, social-media pages or third-party services.

WoraCode does not control these independent services.

This Privacy Policy does not govern information collected independently by third parties.

Users should review the privacy policies of third-party services before providing information to them.

25International Data Processing

Some service providers used to operate ListIT may process or store information outside the user's state or country.

Where personal information is transferred or processed across jurisdictions, we will take steps required by applicable law to provide appropriate protection.

26Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

• ListIT functionality;
• technologies we use;
• our business practices;
• service providers;
• legal requirements; or
• privacy and security practices.

When we update this Privacy Policy, we will change the Last Updated date at the top.

Where required by applicable law, we may provide additional notice or request consent for material changes.

27Relationship With Our Terms and Conditions

Use of ListIT is also governed by the ListIT Terms and Conditions.

The Terms and Conditions explain the rules governing Vendors, Customers, catalogues, Orders, subscriptions and use of the ListIT Service.

Terms and Conditions: https://listitonline.in/terms

28Contact and Privacy Requests

Questions, concerns or requests relating to this Privacy Policy or personal information may be submitted to:

ListIT / WoraCode

WORACODE website: https://www.woracode.com

ListIT website: https://www.listitonline.in

Privacy/Support Email: woracode@gmail.com

Business Address: Korba, Chhattisgarh, India

For customer account deletion, email woracode@gmail.com. Vendors can use the account deletion option in vendor panel settings.

29Grievances

If you have a concern regarding the processing of your personal information, please contact us first so that we can investigate and respond.

Privacy / Grievance Contact

Name/Designation: WORACODE Privacy and Grievance Contact

Email: woracode@gmail.com

Address: Korba, Chhattisgarh, India

We will handle privacy requests and grievances in accordance with applicable law.

30Consent and Acknowledgement

By using ListIT and providing information through the Service, you acknowledge that your information will be handled as described in this Privacy Policy.

Where applicable law requires consent for a particular processing activity, ListIT will seek the appropriate consent before undertaking that processing.

You may withdraw consent where applicable, subject to legal requirements and the consequences of withdrawing information necessary to provide a requested Service.

WoraCode ListIT — Create Beautiful Product Catalogues in Minutes

WORACODE website: https://www.woracode.com

ListIT website: https://www.listitonline.in