Data Protection & Privacy

Privacy Policy for Suppliers

Last Updated: September 2026 • Covers all data processed on business.grabraw.com

1. Introduction & Scope

At GrabRaw ("GrabRaw", "we", "our"), we respect the confidentiality of our suppliers, component manufacturers, and distribution partners. This Privacy Policy details how we collect, store, process, and safeguard information provided by suppliers using the GrabRaw Seller portal located at business.grabraw.com.

2. Information We Collect

To provide supplier discovery, BOM search matching, and commercial lead generation, we collect the following categories of information:

A. Company Information & Corporate Credentials

  • Business Identification: Registered legal entity name, corporate brand names, official company website URL, physical factory or corporate address, and corporate contact phone number.
  • Authorized Representative Details: Full name, professional email address, designation/job title, and communication preferences.
  • Verification & Tax Identifiers: Tax registration numbers (e.g., GST, VAT, EIN, or business certificate numbers) submitted during the supplier credentialing process to verify legitimate business status.

B. Product, Catalog & Keyword Data

  • Catalog Listings: Manufacturer Part Numbers (MPNs), product descriptions, technical parameter specifications, packaging details, and minimum order quantities (MOQs).
  • Search Keyword Mappings: Targeted component keywords, functional synonyms, industry classifications, and manufacturing capability tags uploaded to match buyer BOM searches.

C. Buyer Leads & Search Match Analytics

  • Search Matching Records: Logs of buyer BOM search queries that matched your catalog keywords, including timestamp, matched component, and query terms.
  • Inquiry & RFQ Logs: Buyer contact inquiries, request details, volume requirements, quotation statuses, and communications facilitated through the platform.

D. Payment Data via Cashfree Payments

When you pay for profile verification or premium supplier features, payment processing is handled securely by our integrated payment gateway partner:

Cashfree Payments Integration: All online payments are processed by Cashfree Payments India Pvt. Ltd. ("Cashfree"). When initiating a transaction, billing details (company name, billing address, phone, email, and transaction amount) are transmitted securely to Cashfree via encrypted APIs. GrabRaw does not collect, record, or store full credit card numbers, CVVs, or net-banking credentials on our servers. We store only transaction identifiers, order IDs, payment status (Success/Failed), currency, and timestamps for accounting and verification purposes.

3. How We Use Supplier Data

We utilize the information collected for specific business purposes:

  • Powering AI BOM Search Matching: Indexing your catalog components so active hardware engineers and procurement teams discover your products when searching on grabraw.com.
  • Delivering Verified Buyer Leads: Providing actionable RFQs, profile views, and lead notifications directly to your Seller Dashboard.
  • Supplier Verification: Validating the legitimacy of registered suppliers to maintain network integrity and prevent counterfeit component distribution.
  • Payment Reconciliation & Invoicing: Confirming transaction statuses with Cashfree and generating compliant tax invoices.
  • System Notifications & Digest Updates: Alerting you to new keyword matches, lead submissions, and platform policy changes.

4. Data Sharing & Third Parties

We do not sell, rent, or trade supplier proprietary data to advertisers. We share data only with trusted service infrastructure providers necessary to operate the platform:

  • Cloud Infrastructure & Database: Cloud hosting, server infrastructure, and secure database services (including Supabase) with enterprise-grade data encryption.
  • Payment Gateway: Cashfree Payments for processing supplier verification and subscription payments.
  • Network Delivery & Security: Cloudflare for CDN acceleration, DDoS mitigation, and edge SSL/TLS encryption.
  • Legal & Regulatory Authorities: When required by enforceable subpoena, court order, or applicable tax and export compliance laws.

5. Data Security & Storage Practices

We implement rigorous technical and organizational safeguards to protect supplier data against unauthorized access, loss, alteration, or disclosure:

  • Industry-standard TLS 1.3 encryption for all data in transit across business.grabraw.com.
  • Encrypted storage at rest for sensitive business registration records and transaction histories.
  • Strict role-based access control (RBAC) restricting backend access solely to authorized personnel.

6. Cookies & Local Storage

We use browser local storage and essential session cookies strictly for platform operation, such as preserving your active session authentication token and saving your visual interface theme preference (grabraw_theme). We do not deploy third-party advertising tracking pixels on the Seller dashboard.

7. Your Rights & Data Control

As a registered supplier, you have the right to access, edit, or remove your catalog products, update company contact details, download your historical lead data, or request account closure.

To exercise your privacy rights or request catalog deletion, please contact our team at support@grabraw.com.