Legal
How we collect, use, store, and protect your personal information on Trust Cabbage.
Last updated: August 2026 · Effective date: August 2026
Trust Cabbage is an online review and discovery platform for Indian B2B service companies, online brands, and retail stores. The Platform allows users to search for companies and brands, read and write verified reviews, and helps businesses build and manage their public reputation.
For the purposes of this policy, Trust Cabbage is the Data Fiduciary responsible for determining how and why your personal data is processed.
Grievance Officer: see Section 15
We collect different types of information depending on how you use the Platform.
When you create an account:
When you write a review:
When you upload proof of association:
When you create or claim a company page:
When you contact us:
When you visit or use the Platform, we automatically collect:
Google OAuth, if you choose to sign in with Google, we receive your name, email address, and profile photo from Google. We do not receive your Google password.
LinkedIn OAuth, if you choose to sign in with LinkedIn, we receive your name, email address, and professional profile information you have made public on LinkedIn.
Payment providers, if you subscribe to a paid plan, payment is processed by Razorpay or PayU. We do not store your card details. We receive confirmation of payment and your subscription status from the payment provider.
We use the information we collect for the following purposes:
Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:
Consent, where you have given us clear consent to process your data for a specific purpose, such as creating an account, writing a review, or receiving marketing communications.
Contractual necessity, where processing is necessary to fulfil our agreement with you, for example, publishing your review, managing your company page, or processing your subscription.
Legitimate interests, where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services, provided those interests do not override your rights.
Legal obligation, where we are required by law to process your data, such as responding to lawful government requests.
You have the right to withdraw consent at any time where consent is the basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
We retain your personal data for as long as necessary to provide the Platform and fulfil the purposes described in this policy.
Account data, retained for the duration of your account and for 3 years after account deletion, for legal and fraud prevention purposes.
Review content, reviews are retained permanently as part of the public record of a company's reputation. If your account is deleted, your reviews remain published but your personal details are anonymised, your display name is replaced with "Former Reviewer."
Proof of association documents, retained for 1 year after the review is verified, then deleted.
Company verification documents, retained for 3 years after the claim is approved or rejected.
Log data and IP addresses, retained for 90 days for security and fraud detection purposes.
Payment records, retained for 7 years as required by Indian tax and accounting law.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it.
Encryption, all data transmitted between your browser and our servers is encrypted using TLS. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
Access controls, access to personal data within our organisation is restricted to people who need it to perform their job. All access is logged.
Row-level security, our database enforces row-level security policies that prevent any user from accessing data they are not authorised to see.
Regular audits, we conduct regular reviews of our security practices and update them as threats evolve.
No method of electronic transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at info@trustcabbage.com.
Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:
Right to access, you have the right to know what personal data we hold about you and how it is being processed.
Right to correction, you have the right to have inaccurate or incomplete personal data corrected.
Right to erasure, you have the right to request deletion of your personal data in certain circumstances. Note that reviews you have published will be anonymised rather than deleted, as they form part of the public record.
Right to grievance redressal, you have the right to have your grievances addressed promptly. See Section 15 for our Grievance Officer details.
Right to nominate, you have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Right to withdraw consent, where we process your data based on consent, you may withdraw that consent at any time. This does not affect processing already carried out.
To exercise any of these rights, contact our Grievance Officer at the details in Section 15. We will respond within 30 days of receiving your request.
Trust Cabbage is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children under 18.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@trustcabbage.com and we will delete that information promptly.
The Platform may contain links to third-party websites, company websites, or external resources. These links are provided for convenience and do not constitute an endorsement. We have no control over the content or privacy practices of those websites and are not responsible for them. We encourage you to read the privacy policy of every website you visit.
Trust Cabbage is an Indian platform and your data is primarily stored and processed in India. Some of our service providers, including Supabase, Vercel, and Resend, may process data in servers located outside India.
Where data is transferred outside India, we ensure appropriate safeguards are in place in accordance with the DPDP Act and applicable regulations, including contractual clauses that require recipients to maintain the same standard of protection we apply.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make significant changes, we will notify you by email (if you have an account) and by displaying a prominent notice on the Platform. The updated policy will be effective from the date stated at the top of this page.
Your continued use of the Platform after the effective date constitutes acceptance of the updated policy. If you do not agree with the changes, you should stop using the Platform and delete your account.
For general privacy-related questions or concerns, contact us at:
Email: info@trustcabbage.com
Website: www.trustcabbage.com/contact
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns or complaints regarding the processing of your personal data.
Phone: 9993802466
Response time: We will acknowledge your grievance within 24 hours and resolve it within 30 days of receipt.
If you are not satisfied with our response, you may approach the Data Protection Board of India once constituted under the DPDP Act, 2023.
Legal
How we collect, use, store, and protect your personal information on Trust Cabbage.
Last updated: August 2026 · Effective date: August 2026
Trust Cabbage is an online review and discovery platform for Indian B2B service companies, online brands, and retail stores. The Platform allows users to search for companies and brands, read and write verified reviews, and helps businesses build and manage their public reputation.
For the purposes of this policy, Trust Cabbage is the Data Fiduciary responsible for determining how and why your personal data is processed.
Grievance Officer: see Section 15
We collect different types of information depending on how you use the Platform.
When you create an account:
When you write a review:
When you upload proof of association:
When you create or claim a company page:
When you contact us:
When you visit or use the Platform, we automatically collect:
Google OAuth, if you choose to sign in with Google, we receive your name, email address, and profile photo from Google. We do not receive your Google password.
LinkedIn OAuth, if you choose to sign in with LinkedIn, we receive your name, email address, and professional profile information you have made public on LinkedIn.
Payment providers, if you subscribe to a paid plan, payment is processed by Razorpay or PayU. We do not store your card details. We receive confirmation of payment and your subscription status from the payment provider.
We use the information we collect for the following purposes:
Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following lawful bases:
Consent, where you have given us clear consent to process your data for a specific purpose, such as creating an account, writing a review, or receiving marketing communications.
Contractual necessity, where processing is necessary to fulfil our agreement with you, for example, publishing your review, managing your company page, or processing your subscription.
Legitimate interests, where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services, provided those interests do not override your rights.
Legal obligation, where we are required by law to process your data, such as responding to lawful government requests.
You have the right to withdraw consent at any time where consent is the basis for processing. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
We retain your personal data for as long as necessary to provide the Platform and fulfil the purposes described in this policy.
Account data, retained for the duration of your account and for 3 years after account deletion, for legal and fraud prevention purposes.
Review content, reviews are retained permanently as part of the public record of a company's reputation. If your account is deleted, your reviews remain published but your personal details are anonymised, your display name is replaced with "Former Reviewer."
Proof of association documents, retained for 1 year after the review is verified, then deleted.
Company verification documents, retained for 3 years after the claim is approved or rejected.
Log data and IP addresses, retained for 90 days for security and fraud detection purposes.
Payment records, retained for 7 years as required by Indian tax and accounting law.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it.
Encryption, all data transmitted between your browser and our servers is encrypted using TLS. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
Access controls, access to personal data within our organisation is restricted to people who need it to perform their job. All access is logged.
Row-level security, our database enforces row-level security policies that prevent any user from accessing data they are not authorised to see.
Regular audits, we conduct regular reviews of our security practices and update them as threats evolve.
No method of electronic transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at info@trustcabbage.com.
Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:
Right to access, you have the right to know what personal data we hold about you and how it is being processed.
Right to correction, you have the right to have inaccurate or incomplete personal data corrected.
Right to erasure, you have the right to request deletion of your personal data in certain circumstances. Note that reviews you have published will be anonymised rather than deleted, as they form part of the public record.
Right to grievance redressal, you have the right to have your grievances addressed promptly. See Section 15 for our Grievance Officer details.
Right to nominate, you have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Right to withdraw consent, where we process your data based on consent, you may withdraw that consent at any time. This does not affect processing already carried out.
To exercise any of these rights, contact our Grievance Officer at the details in Section 15. We will respond within 30 days of receiving your request.
Trust Cabbage is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children under 18.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@trustcabbage.com and we will delete that information promptly.
The Platform may contain links to third-party websites, company websites, or external resources. These links are provided for convenience and do not constitute an endorsement. We have no control over the content or privacy practices of those websites and are not responsible for them. We encourage you to read the privacy policy of every website you visit.
Trust Cabbage is an Indian platform and your data is primarily stored and processed in India. Some of our service providers, including Supabase, Vercel, and Resend, may process data in servers located outside India.
Where data is transferred outside India, we ensure appropriate safeguards are in place in accordance with the DPDP Act and applicable regulations, including contractual clauses that require recipients to maintain the same standard of protection we apply.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make significant changes, we will notify you by email (if you have an account) and by displaying a prominent notice on the Platform. The updated policy will be effective from the date stated at the top of this page.
Your continued use of the Platform after the effective date constitutes acceptance of the updated policy. If you do not agree with the changes, you should stop using the Platform and delete your account.
For general privacy-related questions or concerns, contact us at:
Email: info@trustcabbage.com
Website: www.trustcabbage.com/contact
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any concerns or complaints regarding the processing of your personal data.
Phone: 9993802466
Response time: We will acknowledge your grievance within 24 hours and resolve it within 30 days of receipt.
If you are not satisfied with our response, you may approach the Data Protection Board of India once constituted under the DPDP Act, 2023.
