Privacy notice

Clasly is the data fiduciary for the personal data described here. Questions and requests go to our grievance officer at orciprahul@gmail.com.

• Account: your mobile number (to send a one-time code), and an email address and name if you add them. Purpose: signing you in and sending the alerts you ask for. Basis: your consent.
• Saved searches, watched auctions and alert settings: purpose: telling you about new and changed auctions. Basis: your consent.
• Reports you send us: the message and, only if you give them, your name, email or mobile. Purpose: handling the correction, objection or takedown. Basis: your consent; a legitimate use where the law requires us to respond.
• Technical data: pages requested, a shortened IP address, browser type, and error reports. Purpose: security, preventing abuse and keeping the service working. Basis: legitimate uses permitted by the Act.
• Cookies: one session cookie when you sign in, and on every browser a random device id (clasly.vid), so fair-use limits count your browser apart from others on the same network. The device id is never linked to your account or to who you are, and lasts up to 400 days; clearing this site's cookies removes it. A few settings are stored on your device (theme, row density, recently viewed lots). No advertising or cross-site tracking cookies.

Auction notices published under the SARFAESI Act, the Insolvency and Bankruptcy Code and the Recovery of Debts Act name borrowers, guarantors and companies, because the law requires them to be published. Clasly shows those names only as the notice prints them, only to signed-in users, never in search, page titles or links, and removes them when the sale is resolved. To correct or object to a listing, use the report form.

• Account data: until you delete your account, then within 30 days.
• Saved searches and alert history: until you delete them or your account.
• Report contact details: for the life of the report and one year after it closes.
• Security logs: 365 days, kept in India, to detect and investigate unauthorised access, as the DPDP Rules 2025 and CERT-In directions require.
• Device push subscriptions: until you turn alerts off, or they stop working.

We share personal data only with service providers that run parts of Clasly for us (hosting, messaging to send one-time codes and alerts, email delivery, error tracking), under contracts that limit them to that work. We disclose data to authorities only when the law requires it.

We keep your account data and our databases in India, on Oracle Cloud in Mumbai, and process them there. Email we send you (sign-in codes, alerts, replies to reports) goes through Amazon Web Services in the United States (N. Virginia), so your email address and those messages are processed there. Sign-in codes by SMS, once we offer them, will go through Amazon Web Services in Mumbai. Other service providers may process limited data outside India, where the Act permits it; auction notice text sent for automated reading contains no data about you.

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and how we use it;
• correct, complete or update it;
• have it erased, and withdraw your consent at any time;
• nominate someone to exercise these rights if you cannot;
• raise a grievance with us, and if unresolved, with the Data Protection Board of India.

Signed-in users can download or delete their data from their account settings. Anyone can write to the grievance officer, who acknowledges within 48 hours and resolves within one month.

Data is encrypted in transit and at rest, access is limited to the people who need it, and access is logged. If a breach affects your data, we tell you and the authorities without delay, as the law requires.

Clasly is not meant for people under 18, and we do not knowingly collect their data.

When this notice changes, we update the date above and, for material changes, ask signed-in users to review it again.