Privacy Policy

Effective date: 9 October 2026

This Privacy Policy explains how MAK Services ("we", "us", "our") collects, uses, shares and protects your personal data when you use the BookX mobile app and the website makservices.in/bookx (together, the "Service"). By using BookX you agree to this policy. We follow applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

1. Information we collect

We do not collect or store your card number, CVV, UPI PIN or net-banking password. Payments are handled entirely by Razorpay.

App permissions

• Location (only while using the app): to find your current location on the map. You can deny it and pick your location manually.
• Photos: BookX uses the Android photo picker, so it can only see the photos you select for a listing.
• Notifications: for order, offer, chat and approval updates. You can turn them off in phone settings.
• Microphone (voice search): when you tap the mic, your phone's speech service converts speech to text. BookX receives only the text and does not record or store audio.

2. How we use your information

• To log you in with OTP and keep your account secure.
• To show books near you, publish your listings and review them before they go live.
• To process payments, create orders, arrange delivery, handle refunds and pay sellers.
• To send notifications about orders, offers, chats, listing approval and payouts.
• To provide customer support and resolve disputes.
• To prevent fraud, misuse and violations of our Terms & Conditions.
• To send occasional service announcements or offers (you can turn off notifications anytime).
• To comply with legal, tax and accounting obligations.

We do not sell your personal data and we do not use it for third-party advertising.

3. How your information is shared

With other BookX users

• Buyers can see a seller's name, listing location (area/city), approximate distance, listings and ratings.
• After an order, the buyer and seller can see each other's name and mobile number, and the seller can see the delivery address, so the order can be completed.
• Your name is shown in chats, offers and reviews you write.

With service providers (only what they need)

• Google Firebase / Google Cloud: login, database, file storage, cloud functions and push notifications.
• Razorpay: payment processing and refunds.
• Fast2SMS: sending the OTP SMS to your mobile number.
• Google Maps: showing the map and converting your location into an address.

These providers process data on our behalf under their own security and privacy terms.

For legal reasons

We may share information if required by law, court order or government authority, or to protect the rights, property or safety of BookX, our users or the public.

4. How long we keep your data

• Account and profile data: while your account is active.
• Order, payment, refund and payout records: for as long as required by tax and accounting laws, even after account deletion.
• Chat messages and reviews: while needed to provide the Service and handle disputes.
• OTP codes are stored only as a secure hash and expire in 5 minutes.

5. Deleting your account

You can delete your account anytime in the app: Profile → Delete Account. When you delete your account we:

• Delete your profile (name, email, address, location, UPI ID), saved addresses and notifications.
• Remove your unsold listings from BookX.
• Sign you out and delete your login.

We keep completed order and payment records as required by law. Messages you already sent in chats and reviews you wrote may remain visible to the other person. Account deletion is not possible while you have an active (unfinished) order. You can also request deletion on our Delete Account page.

6. Your rights and choices

• Access and correct your information in Profile → Edit Profile.
• Withdraw consent for location or notifications from your phone settings.
• Delete your account as described above.
• Ask questions or raise a complaint with our Grievance Officer (section 10).

7. Security

We use industry-standard safeguards: encrypted connections (HTTPS/TLS), Google Firebase security rules that let users read only their own private data, hashed OTPs, and payments through PCI-DSS compliant Razorpay. No method of transmission or storage is 100% secure, but we work hard to protect your data.

8. Children

BookX is meant for users aged 18 and above. Students under 18 may use BookX only with the involvement and consent of a parent or guardian. We do not knowingly collect data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a new effective date. Important changes will also be notified in the app.

10. Contact & Grievance Officer

For any privacy question, request or complaint, contact:

We will acknowledge your complaint within 48 hours and try to resolve it within 30 days.