Privacy Policy

Last updated: 08/2026

We never ask for the debtor’s data

We do not ask the person listing a debt for any personal or contact details of the debtor. From the creditor we only ask for:

  • the amount owed,
  • what documentation they hold in their favour,
  • and the nature of the debt.

The debtor’s contact or personal details are only shared with the buyer if the two parties reach an agreement.

Debtalia.com merely puts the two parties in touch: it does not transfer data or take part in the transaction.

1. Data controller

In accordance with the Digital Personal Data Protection Act, 2023. Oversight: the Data Protection Board of India, the controller of the personal data collected through debtalia.com is Debtalia. You can contact us via the contact form.

2. What data we process

Debtalia only processes the personal data of its own site users:

  • Account and listing data: the name and email of whoever registers or lists a debt.
  • Contact and support data: what you provide when you write to us (form, tickets).
  • Payments: the listing fee is processed by Stripe; Debtalia does not store your card details.
  • Technical data: anonymous audience measurement with no tracking cookies.
Important — we do not collect debtor data. Whoever lists a debt is only asked for the amount, the documentation they hold in their favour and the nature of the debt: never any personal or contact data of the debtor. Debtalia therefore holds no debtor data, and no right (access, rectification, erasure, etc.) over debtor data can be exercised against Debtalia, because it is never collected. Any data the seller and buyer exchange if they reach an agreement is handled directly between them, outside the platform, each being responsible for its own processing.

3. Purpose and legal basis

We process your data to provide and manage the service (performance of the contract), to answer your enquiries and to ensure security and fraud prevention (legitimate interest), and to comply with our legal obligations.

4. Recipients

We do not sell your data. It is only shared with the providers needed to deliver the service (for example the Stripe payment gateway and the hosting provider), acting as data processors.

5. Retention

We keep your data while your account is active and thereafter for the periods required by applicable law. When no longer needed, it is deleted.

6. Your rights

As a site user you may exercise, over your own data, the rights granted to you by the DPDP Act 2023: access, rectification, erasure, objection, restriction and portability, as well as lodging a complaint with the supervisory authority. To exercise them, contact us via the contact form.

7. Applicable law and supervisory authority

This policy is governed by the Digital Personal Data Protection Act, 2023. Oversight: the Data Protection Board of India.

8. Minors

The service is intended for adults. We do not knowingly collect data from minors.

9. Changes

We may update this policy to reflect legal or service changes. We recommend reviewing it periodically.