NextWave Technology Private Limited ("us", "we", or "our") operates the catafy.com website and the Catafy mobile application (hereinafter referred to as the "Service"). Until 31 August 2026, the Service was operated by SparkSphere Venture Private Limited.

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It covers sellers who hold a Catafy account and buyers who view a seller's catalogue or place an order.

Catafy occupies two different roles. For your seller account we decide how your data is handled, so we are the data fiduciary. For the buyer data you collect through your catalogue, you decide how it is used and we process it on your instructions — see "Our Two Roles" below. This distinction determines who you contact to exercise a right.

We use your data to provide, secure, bill and improve the Service. By using the Service you agree to the collection and use of information in accordance with this policy. Terms not defined here have the meaning given in our Terms and Conditions. This policy is written to meet our obligations under the Digital Personal Data Protection Act, 2023 and, for users in the EU and EEA, the GDPR.