← Back to Directory

Privacy Policy

Last updated: 31 Oct 2026

1. Who we are

KoshurNet is a community directory for professionals, operated by KoshurNet from New Delhi, Delhi, India, which is responsible for your data (the "data controller"). Joining and listing are free; optional paid Featured plans are available for business and service listings. This policy explains what personal data we collect, why we collect it, and what rights you have over it.

2. What data we collect

When you register and create a profile, we collect:

  • Account data: email address and password (stored securely via Supabase Auth — passwords are hashed and never stored in plaintext)
  • Profile data: full name, phone number, job role, company, bio, services, location, LinkedIn URL, website URL, and profile photo URL
  • Consent record: timestamp of when you agreed to this policy
  • Payment records (only if you buy a Featured plan): your name and email, the listing name, the plan, amount, currency, date, status, PayU's transaction and payment IDs, and when you accepted the Terms

When you visit the site, with or without an account, we may also collect usage data(see Cookies): pages you visit, device and browser type, approximate location worked out from your IP address, a random visitor ID and, if you're logged in, your account's random ID. It doesn't include your name or email.

Your name, email and phone number are passed to PayU to process the payment. Card, UPI and bank details are entered on PayU's payment page and handled by PayU. We never see or store them. We don't collect government identifiers or sensitive personal data.

3. Why we collect it (lawful basis)

We process your profile data on the basis of consent (Article 6(1)(a) GDPR). You explicitly agree to this policy at registration. You may withdraw consent at any time by deleting your account.

If you buy a Featured plan, we process your payment details because it's necessary to provide what you paid for (contract, Article 6(1)(b) GDPR), and we keep payment records because tax and accounting law requires it (legal obligation, Article 6(1)(c) GDPR).

We collect usage data on the basis of consent if you're in the EU, EEA, UK or Switzerland, and our legitimate interest in understanding and improving the site everywhere else. Either way, you can turn it off at any time from "Cookie settings" at the bottom of every page.

4. What is publicly visible

Once your profile is approved by an admin, the following fields are displayed publicly in the directory: name, bio, role, company, services, location, LinkedIn URL, website URL, and profile photo.

Your email address and profile phone number are never displayed publicly. Administrators can see them. Logged-in members can see your email only if you allowed that. If you buy a Featured plan, they're also passed to PayU (see section 2). A phone number you add to a business or service listing is public.

5. Data storage and security

Your data is stored on Supabase, which runs on AWS infrastructure in Tokyo, Japan. Supabase is SOC 2 Type II certified. All data is encrypted at rest and in transit (TLS 1.2+). Access to raw data is controlled by database-level Row Level Security policies.

6. International transfers

KoshurNet is run from India and used by members around the world, so your data is handled outside your own country: it's stored in Japan (Supabase), payments are processed in India (PayU), the site and emails are delivered by providers in the United States (Vercel, Resend), and usage data is stored in the EU (PostHog). We choose providers that protect data with encryption and contractual safeguards, and we only share what each one needs to do its job.

7. Your rights

Under GDPR and applicable data protection law, you have the right to:

  • Access: request a copy of the data we hold about you
  • Rectification: update your profile at any time via the My Profile page
  • Erasure ("right to be forgotten"): delete your account and all associated profile data — use the Delete Account button on your profile page. Payment records are kept (see section 8)
  • Portability: request an export of your profile data in a machine-readable format
  • Object: object to your data being displayed publicly — contact us to unapprove or remove your listing
  • Withdraw consent: delete your account at any time, which removes your account data from the platform (see section 8 for what's kept elsewhere). For analytics, use "Cookie settings" at the bottom of any page

To exercise any of these rights, use the self-service tools on your profile page or contact the community admin.

8. Data retention

Your profile data is retained for as long as your account is active. If you delete your account, your account and profile data is permanently deleted within 30 days. Supabase Auth records may be retained in logs for up to 90 days as part of Supabase's infrastructure.

Payment records are kept after you delete your account, including your name and email, for as long as tax and accounting law requires. The right to erasure doesn't cover records we must keep by law.

PayU keeps its own record of each payment for as long as Indian payment and tax law requires, independently of your KoshurNet account.

Usage data is kept in PostHog for the retention period of our PostHog plan, and isn't removed automatically when you delete your account. To ask us to delete it, contact us using the details below.

9. Third parties

We do not sell, rent, or share your personal data with third parties for marketing purposes, and we display no advertising. These providers handle data on our behalf:

  • Supabase: database, accounts and file storage (Japan)
  • Vercel: hosts the website
  • PayU: processes Featured plan payments (India); see PayU's privacy policy
  • Resend: sends our emails (e.g. reminders and replies)
  • Google Maps: shows maps on listing and organisation pages; Google receives your IP address when a map loads
  • hCaptcha: checks that sign-ups are from real people
  • PostHog: analytics, showing us how the site is used (EU); see PostHog's privacy policy

10. Cookies

Supabase Auth keeps you logged in. We use no advertising cookies. When you go to the payment page, open a map, or use the sign-up check, PayU, Google or hCaptcha may set their own cookies, which are covered by their own policies.

We also use PostHog analytics cookies and browser storage, which keep a random visitor ID so we can see how the site is used. We work out which country you're in from your IP address to decide which rules apply. In the EU, EEA, UK and Switzerland, these are only set if you accept them. Elsewhere, they're on unless you turn them off. You can change your choice at any time from "Cookie settings" at the bottom of every page.

11. Contact

If you have questions about this policy or want to exercise your rights, email shaarika.consultancy@gmail.com or use the Feedback button on any page. If you are in the EU/UK and believe your rights have not been respected, you may also lodge a complaint with your local data protection authority.