1. Introduction
This Data Retention Policy explains how long Anomaa Studio keeps different categories of data collected through eBodhya Marketplace, and why. It exists to give Buyers, Sellers, and Institution/School purchasers a clear picture of what happens to their data over time, independent of any specific deletion request (covered in the Data Deletion Policy).
2. Definitions
This document uses the shared definitions in Anomaa Studio's canonical definitions list and the Marketplace-specific terms defined in the Privacy Policy Section 2.
3. Applicability
This Policy applies to all data categories described in the Privacy Policy, across Buyer, Seller, and Institution/School Accounts.
4. Legal Entity
eBodhya™ is a trademark owned and used by Anomaa Studio, a sole proprietorship business based in Bengaluru, Karnataka, India ("Anomaa Studio," "eBodhya," "we," "us," or "our"). Anomaa Studio owns and operates the entire eBodhya suite of platforms, comprising:
- eBodhya Studio — studio.ebodhya.in
- eBodhya Marketplace — marketplace.ebodhya.in
- eBodhya Schools — schools.ebodhya.in
- eBodhya Workspace — workspace.ebodhya.in
(together, the "eBodhya Platforms").
Every account, subscription, order, listing, or agreement created or entered into through any eBodhya Platform is an agreement with Anomaa Studio directly. No eBodhya Platform is owned, operated by, or offered on behalf of any third party, franchisee, reseller, school district, or unrelated entity, unless we state so expressly and in writing. eBodhya™ and the eBodhya logo are trademarks of Anomaa Studio; no license to use them is granted except as expressly permitted in writing.
In this document, "the Platform" means eBodhya Marketplace (marketplace.ebodhya.in) specifically, and "eBodhya" or the "eBodhya Platforms" means the wider suite of products described above. Where this document imposes obligations on "Anomaa Studio," those obligations are undertaken by Anomaa Studio in its capacity as operator of the Platform.
5. Retention Periods by Category
| Category | Retention Period | Basis |
|---|---|---|
| Account data (Buyer, Seller, Institution profile, credentials) | For as long as the Account remains active, plus a limited period after closure to handle disputes, fraud investigation, and re-registration checks. | Contractual necessity; legitimate use. |
| Order / transaction records (Orders, invoices, Payouts, refunds) | Retained for the period required by applicable tax, accounting, and consumer-protection law (generally at least eight (8) years from the date of the transaction), regardless of any Account deletion request. | Legal obligation (tax and financial record-keeping law; Consumer Protection (E-Commerce) Rules, 2020). |
| KYC / tax / payout details | Retained for as long as required by tax and anti-money-laundering record-keeping obligations applicable to payment intermediaries, following the same minimum period as transaction records. | Legal obligation. |
| Reviews and ratings | Retained for as long as the associated Listing remains on the Marketplace, or until you request removal of your own Review, subject to Section 14 of the Community Guidelines. | Contractual necessity; legitimate use (marketplace trust signals). |
| Browsing, search, and analytics data | Retained in identifiable form for a limited operational period (typically up to twenty-four (24) months), after which it is anonymized or aggregated. | Legitimate use (product improvement); consent, where applicable to Personalization cookies. |
| Backups | Backup snapshots are retained on a rolling schedule (typically up to ninety (90) days) for disaster-recovery purposes, and are purged or overwritten on that schedule. | Legitimate use (business continuity and security). |
| Support and grievance correspondence | Retained for the period necessary to resolve the matter and for a reasonable period afterward to demonstrate compliance with grievance-redressal timelines. | Legal obligation; legitimate use. |
6. AI
Data used to train or operate recommendation, search-ranking, or fraud-detection features is retained only as long as necessary for those purposes and is described further in the AI Usage Policy.
7. Data Processing
Retention is a form of Processing under the DPDP Act; we retain Personal Data no longer than necessary for the purposes described in the Privacy Policy and this Policy.
8. Cookies
Cookie-specific retention periods are set out in the Cookie Policy.
9. Third-Party Services
Our Payment Processor and cloud hosting provider retain data under their own contractual obligations to us, which require retention and deletion practices consistent with this Policy and Applicable Law.
10. Security
Retained data continues to be protected under the safeguards described in the Security Statement for as long as it is held.
11. Retention Review
We periodically review retained data and delete or anonymize it once the applicable retention period expires and it is no longer needed for the purposes described above.
12. Deletion
The effect of a User-initiated deletion request on the categories above — including the statutory retention of order and tax records despite such a request — is described in full in the Data Deletion Policy.
13. Intellectual Property
Not separately applicable; see the Intellectual Property Policy.
14. User Responsibilities
You should assume that order and tax-related records cannot be deleted before the statutory period above expires, even if you close your Account, and should not rely on this Policy to permanently erase records you are separately required to keep (for example, as evidence for your own tax filings).
15. Prohibited Activities
Not applicable to this Policy.
16. Limitation of Liability
Our liability in connection with data retention practices is limited as described in the Terms of Service.
17. Disclaimer
Retention periods above are indicative and may vary based on updates to Applicable Law; where a conflict arises, the longer statutory period controls.
18. Termination
This Policy continues to apply to data we hold after your Account is closed, for as long as we are entitled or required to retain it.
19. Governing Law, Jurisdiction, and Changes
Governing Law and Dispute Resolution
This Data Retention Policy and any dispute, claim, or controversy arising out of or relating to it, the Platform, or the Services (a "Dispute") is governed by the laws of India, without regard to its conflict-of-laws principles.
The parties will first attempt in good faith to resolve any Dispute through informal negotiation for thirty (30) days after one party gives the other written notice of the Dispute. If the Dispute is not resolved within that period, it will be referred to and finally resolved by arbitration in Bengaluru, Karnataka, under the Arbitration and Conciliation Act, 1996, before a sole arbitrator appointed by Anomaa Studio. The arbitration will be conducted in English, and the seat and venue of arbitration will be Bengaluru, Karnataka. The award of the arbitrator will be final and binding on the parties.
Nothing in this clause prevents either party from seeking urgent injunctive or equitable relief before a competent court at any time. Subject to the arbitration agreement above, the courts at Bengaluru, Karnataka shall have exclusive jurisdiction over any Dispute not subject to arbitration and over any proceeding to enforce an arbitral award.
Jurisdiction
Without prejudice to the arbitration agreement above, the Platform is directed at Users in India, and Anomaa Studio makes no representation that the Platform or its Content is appropriate or lawfully available in other locations. Users who access the Platform from outside India do so on their own initiative and are responsible for compliance with local law.
Changes to This Data Retention Policy
We may update this Data Retention Policy from time to time to reflect changes in the Services, Applicable Law, or our practices. We will post the revised version on the Platform with an updated "Effective Date" and, for material changes, will provide reasonable advance notice through the Platform, by email, or by an in-product notice, as appropriate to the change and the audience of the Platform. Continued use of the Platform after the revised Data Retention Policy takes effect constitutes acceptance of the changes. Where Applicable Law requires your express consent to a change (for example, a material change to how we Process Personal Data of a Child), we will seek that consent before the change takes effect.
20. Contact Information
| Purpose | Contact |
|---|---|
| Privacy and data protection queries | privacy@ebodhya.in |
| Grievances under Applicable Law | grievance@ebodhya.in |
| Sales, billing, and refunds | sales@ebodhya.in |
Registered office: Anomaa Studio, Bengaluru, Karnataka, India.
Grievance Officer
Anomaa Studio has designated a Grievance Officer for the eBodhya Platforms, reachable at grievance@ebodhya.in. The Grievance Officer will acknowledge a grievance within twenty-four (24) hours and endeavor to redress it within fifteen (15) days.