Privacy Policy

Last updated: 7 November 2026

This policy explains what personal data Aupesbox Software Solutions Private Limited (“we”, “us”) collects through maatruka.com and the Maatruka platform, why we collect it, and the choices you have. Maatruka is the system the Quelto marketplace runs on. If you use the Quelto app or quelto.in, the Quelto Privacy Policy also applies.

1. Who we are

Aupesbox Software Solutions Private Limited, 23, Thatte Plot, Udyam Nagar, Ratnagiri 415612, Maharashtra, India (CIN U62011MH2024PTC432969). We decide how your personal data is used, which makes us the data fiduciary under the Digital Personal Data Protection Act, 2023.

2. When you visit maatruka.com

• This website sets no cookies, runs no analytics or advertising trackers and has no forms.
• Our fonts are served from our own server, so loading a page does not send your details to a font service.
• The site is hosted on Google Firebase Hosting. Like any web host, it handles your IP address and browser details to deliver pages and protect the site from abuse. We do not use this to identify you.
• Links to Google Play and other sites take you to services that have their own privacy policies.

3. When you pay for a subscription

Subscriptions bought in the app are paid on our checkout page through our payment partner, Cashfree Payments.

• You enter your card, UPI or bank details with Cashfree, not with us. We never see or store your card number.
• Cashfree tells us whether the payment succeeded, the amount and a payment reference. We keep these with your subscription record.
• Cashfree’s own privacy policy covers the details you give them.

4. When you use the Maatruka platform

You reach Maatruka through Quelto. To run the marketplace, we collect:

• Account details: your name, email address and phone number.
• Location: to show nearby sellers and route deliveries. You can turn this off in your device settings.
• What you upload: photos and videos for listings and your profile.
• Activity: your listings, orders, payment status, reviews and community posts.

Where it is stored

Today, account and marketplace data is stored with Google Firebase. Copies of some of it, such as listings, reviews and community posts, are also kept on servers we run ourselves. That includes the local node for your area: a small server that runs one area’s market on its own WiFi and holds the data that market needs. Each node is run by us or by a local operator working with us.

AI features

Some features use AI. Examples are writing a listing from a photo, translating between languages, suggesting fair values for a barter and helping resolve disputes. This runs partly on our own servers and partly through outside AI service providers, who process the text or images to do the task for us.

SanChat

Messages and calls in SanChat are end-to-end encrypted, so only you and the people you are talking to can read or hear them. They are carried by our own servers and, where your area has a node, over its local network. If there is no signal, a message can be carried by another Quelto phone until it reaches signal or a node. That phone cannot read it, but it can see who the message is from, who it is for and when it was sent.

Aadhaar offline verification

This is being switched on after testing. When it is, you verify yourself with the offline e-KYC file you download from UIDAI yourself, and we check UIDAI’s digital signature on it on our own server. We never ask for your full Aadhaar number and never store it.

Who else sees your data

• Other users see what you choose to publish: your shop, listings, reviews, community posts and public profile.
• People in an order (the buyer, the seller and the delivery rider) see the details needed to complete it.
• Service providers who work for us: Google (hosting, database, sign-in and notifications), Cashfree (payments) and our AI service providers.
• Authorities, when the law requires us to share it.

We do not sell your personal data.

5. How long we keep it

We keep your data while your account is active. When you delete your account, we delete your personal data, except what the law requires us to keep, such as invoices and tax records, and what we need to settle an open dispute.

6. Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask for a summary of the personal data we hold about you and who we have shared it with;
• correct, complete or update it;
• have it erased, by deleting your account in the Quelto app or following the steps on the account deletion page;
• withdraw your consent at any time, though some features may then stop working;
• name someone to use these rights for you if you die or cannot act yourself;
• complain to our grievance officer (below) and, if you are not satisfied, to the Data Protection Board of India.

To use any of these rights, write to us using the details in section 10.

7. Children

You must be 18 or older to use the platform, or use it under the supervision and with the consent of a parent or guardian. We do not knowingly collect a child’s personal data without that consent.

8. Security

We use encrypted connections and limit access to personal data to the people and systems that need it. No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

9. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell you in the app or on this site before it applies.

10. Contact and grievance officer

For questions about your data, or to make a complaint, contact our grievance officer. We acknowledge a complaint within 48 hours and resolve it within one month.