Privacy Policy

Who we are

Dryshades Private Limited, operating the Infrecx platform, is the data fiduciary for personal data processed through this site. CIN U47912HR2025PTC137850 · GSTIN 06AAMCD1475B1ZW. Write to us at info@infrecx.com for any privacy matter.

What we collect

• Account data — name, work email, phone, company, GSTIN, buyer or supplier type, and address where you provide it.
• Commercial data — requirements, bills of material, part numbers, quantities, target prices, quotations, purchase orders and dispatch details you submit or receive.
• Usage data — IP address, browser type, pages visited, and timestamps, used for security and to improve the service.
• Correspondence — messages you send us, including negotiation threads held inside the platform.

We do not collect special category personal data, and we ask that you do not submit it.

Why we use it

• To operate sourcing: matching requirements to suppliers, preparing quotations, issuing purchase orders and tracking dispatch.
• To verify businesses — including GSTIN checks — so buyers and suppliers can transact with confidence.
• To communicate about your enquiries, quotations and orders.
• To keep the platform secure, prevent misuse, and meet legal, tax and audit obligations.

We do not sell personal data. We do not use your bills of material to train third-party models.

The identity broker model

Infrecx sits between buyers and suppliers by design. Suppliers receive the technical requirement only — never the buyer's identity, company, tender reference or contact details. Buyers receive Infrecx's quotation — never the underlying supplier identities or their individual prices.

This is enforced in the data model, not merely by policy: buyer-facing and supplier-facing records are stored and rendered separately. It protects your commercial position on both sides.

Who we share it with

We share only what is necessary, and only with:

• Suppliers — the de-identified technical requirement needed to quote.
• Service providers — hosting, email delivery and GSTIN verification, bound by confidentiality and permitted to process data only on our instructions.
• Authorities — where we are legally required to disclose.

How long we keep it

Account data is retained while your account is active. Transaction records — quotations, purchase orders, invoices — are retained for the period required by Indian tax and company law, currently eight years from the end of the relevant financial year. Requirement data not converted to an order is retained for up to 24 months so we can serve repeat sourcing, then deleted or aggregated.

Your rights

You may ask us to access, correct, or delete your personal data, or to withdraw consent where processing relies on it. Write to info@infrecx.com and we will respond within 30 days. Where we cannot delete data — for example records we must retain for statutory audit — we will tell you why.

You may also nominate someone to exercise these rights on your behalf in the event of death or incapacity.

Security

Data is transmitted over TLS, access is restricted by role, and critical actions are recorded in an audit trail. See our information security overview for detail.

Changes

We will post any material change on this page and update the effective date. Continued use after a change means you accept the revised policy.