BookFlow

Privacy Policy

Last updated: 27 October 2026

BookFlow (bookflow.in) helps people in India buy and sell used books directly with each other. This policy explains, in plain words, what information we collect, why, who else sees it, how long we keep it, and what you can ask us to do with it. It follows the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

BookFlow is run by Saransh Jain from Vadodara, Gujarat. For any question about your data, write to saransh@bookflow.in.

1. What we collect

When you create an account

  • With email: your name, email address and a password (stored scrambled, we never see it).
  • With Google: your name, email address and profile photo from your Google account. We never see your Google password.
  • Welcome questions: what you are here for, your exam, class or interests, and your city. These are optional and help us show you the right books.

When you post an ad

  • The book details, price, photos and your city or area. Ads are public: anyone can see them, and search engines can show them.
  • Your phone number, if you add it. Signed-in members can see it on your ad so they can call or WhatsApp you.
  • Your public profile (shelf): your name, photo, city, a short intro and Instagram or LinkedIn links if you add them.

When you use BookFlow

  • Messages: chats between buyers and sellers are stored so you can read them later.
  • Saved books, reports you send about ads, and how you removed an ad (sold on BookFlow, sold elsewhere, not selling).
  • Phone notifications: if you turn them on, your browser gives us a notification address for your device. You can turn them off any time.
  • Payments: when you buy a plan or Feature or Bump up, we keep the order, amount, date and the name, email, phone and state needed for the GST invoice. Your card, UPI or bank details go to the payment company, not to us.
  • Technical data: your IP address, browser and device type, kept in server and security logs.

2. Why we use it

  • To run your account, show your ads and let buyers and sellers reach each other.
  • To show books for your exam, class and city, and tell you when someone messages you or your ad is about to expire.
  • To check ads before they go live and keep out spam, fraud, xerox copies and other banned items.
  • To process payments and send invoices.
  • To count how BookFlow is used (for example, how many ads were posted today). These are totals only, never tied to you.
  • To follow the law, for example to answer a valid order from a court or the government.

We do not sell your personal data. We do not use your messages for advertising.

3. Who else sees your data

  • Other members and visitors see what you put in ads and on your profile. Your phone number is shown only to signed-in members.
  • Cashfree Payments processes payments.
  • Google for Google sign-in, and for ads shown on BookFlow (Google AdSense). Google may use cookies to show ads based on your visits to BookFlow and other sites. You can turn off personalised ads at Google Ad Settings.
  • Amazon: some book pages have a “buy new on Amazon” link. If you click it, Amazon may set its own cookies. As an Amazon Associate BookFlow earns from qualifying purchases.
  • Service providers who help us run the site: web hosting, Cloudflare (security and speed), our email service and a website security service. They use the data only to provide that service.
  • Authorities, when the law requires it.

4. Cookies

We use cookies to keep you signed in, remember small choices (like a closed banner) and keep the site secure. Google uses cookies for the ads described above. You can block cookies in your browser, but you will not be able to sign in without them.

5. How long we keep it

  • Your account: until you ask us to delete it.
  • Ads: live for 240 days unless you renew them. After an ad is sold, removed or expired, its page shows “no longer available” for up to 12 months, and is then deleted with its photos.
  • Messages: as long as your account exists.
  • Payment records: for as long as tax law requires (usually 8 years).
  • Security logs of sign-in attempts: 24 hours. Other server logs: a few weeks.

6. Your rights

You can:

  • See and correct your details any time in My account → Profile.
  • Delete your account. Use “Delete my account” at the bottom of your profile, or write to us. We delete your account, ads and photos within 30 days. We keep only what the law requires, such as payment records.
  • Ask what data we hold about you, and who we shared it with.
  • Turn off chat emails in My account → Profile, and phone notifications in your browser settings.
  • Name someone to use these rights for you if you die or are unable to.
  • Complain to our Grievance Officer (below). If you are not satisfied, you can go to the Data Protection Board of India.

7. Children

Many students use BookFlow. If you are under 18, please use BookFlow with your parent’s or guardian’s permission. We do not knowingly show personalised ads to children. A parent can write to us to see or delete their child’s account.

8. Keeping your data safe

The site uses HTTPS, passwords are stored scrambled, and only the BookFlow team can see member details in the admin area. No system is perfect, so please use a password you do not use elsewhere, and never share one-time codes. We will tell you and the authorities if a breach affects your data, as the law requires.

9. Data about other members

You may use another member’s details only to talk about a book. Copying member details, sending spam or using them for marketing is not allowed and will get your account removed.

10. Grievance Officer

Saransh Jain
BookFlow, Vadodara, Gujarat, India
Email: saransh@bookflow.in

We reply within 24 hours to confirm we got your complaint, and resolve it within 15 days.

11. Changes to this policy

If we change this policy, we will update the date at the top. For important changes, we will also tell members by email or on the site before they apply.