Privacy Policy

1. Definitions

1.1“Advertisement” means any listing, description, photograph, image, audio, video or other content submitted or proposed to be submitted for publication on the Platform in relation to any permitted product or service.

1.2“Advertiser” means any User, including a seller or service provider, who submits or seeks to submit an Advertisement for publication on the Platform.

1.3“Agent” means a person registered with Only 50 who introduces eligible Advertisements to the Platform and may receive commission in accordance with the applicable terms.

1.4“Applicable Law” means any applicable statute, enactment, ordinance, rule, regulation, notification, direction, judgment, order or governmental requirement having the force of law, as amended, substituted or re-enacted from time to time.

1.5“Child” means an individual who has not completed eighteen years of age or such other age as may be prescribed under Applicable Law.

1.6“Data Principal” means the individual to whom the Personal Data relates and, where such individual is a Child or a person with a lawful guardian, includes the parent or lawful guardian acting on behalf of that individual, as applicable under Applicable Law.

1.7“Data Processor” means any person who processes Personal Data on behalf of Only 50.

1.8“Personal Data” means any data about an individual who is identifiable by or in relation to such data.

1.9“Personal Data Breach” means any unauthorised processing of Personal Data or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to Personal Data that compromises its confidentiality, integrity or availability.

1.10“Platform” means the Only 50 website, mobile application and any related digital service, feature or interface operated under the name “Only 50.”

1.11“Service Provider” means any third party engaged by Only 50 to provide hosting, payment processing, OTP authentication, analytics, communication, security, technical support or any other service connected with the operation of the Platform.

1.12“User” means any person who visits, accesses, registers on, submits information to or otherwise uses the Platform, including an Advertiser, prospective buyer, seller, service provider or Agent.

1.13“Reminder” means a task, meeting, birthday, anniversary, occasion, event or other matter entered by a User for which the User requests a notification through the Platform.

2. PERSONAL DATA WE COLLECT

The Personal Data collected by Only 50 depends on how a User accesses or uses the Platform, the features used and the information voluntarily provided. We may collect the following categories of Personal Data.

2.1Account and Registration Data

When a User creates, accesses or manages an account, we may collect the User’s name, mobile number, account type, profile information, preferred language, login and authentication details, OTP-verification status and other information submitted during registration.

Mobile-number authentication may be carried out through an authorised third-party OTP service provider. Only 50 does not ordinarily retain the OTP after completion of authentication, except for limited technical records such as the time of request, delivery or verification status, device or session information and unsuccessful authentication attempts, where reasonably necessary for security, fraud prevention, troubleshooting or compliance with Applicable Law.

2.2Advertisement and Business Data

When an Advertiser submits an Advertisement, we may collect the Advertiser’s name, business or trade name, business description, product or service details, category, price, photographs, audio or other media, mobile or WhatsApp number, locality or location and any other information submitted for reviewing, publishing or managing the Advertisement.

Information submitted in fields intended for publication may become Public Information after the Advertisement is approved. Users must carefully review the information submitted and must not include Aadhaar numbers, bank details, payment credentials, residential addresses or other sensitive or confidential information in publicly visible fields.

A User must not submit Personal Data, photographs or confidential information relating to another individual unless the User is lawfully authorised to do so and has obtained any consent required under Applicable Law.

2.3Agent Registration and Verification Data

When a person applies to register, registers or operates as an Agent, we may collect the applicant’s or Agent’s name, mobile number, address, photograph, business or professional information, identity document, verification status and other information reasonably necessary to assess whether to accept the application, verify identity, prevent impersonation or fraud, administer any Agent relationship and determine eligibility for commission.

Where an Aadhaar document is accepted, Only 50 will seek a masked Aadhaar or other limited identity information wherever practicable and will collect, verify and retain such information only where lawfully permitted. Only 50 does not collect Aadhaar biometric information and does not independently carry out Aadhaar authentication unless duly authorised under Applicable Law.

Identity documents, Aadhaar information and internal verification records submitted for Agent verification will not be intentionally displayed publicly.

2.4Payment, Transaction and Commission Data

Payments relating to Advertisements or other Platform services may be processed through Razorpay or another payment service provider identified at the time of payment. The payment service provider may independently collect payment instrument details, bank or UPI information, card information, billing details, transaction credentials and KYC information in accordance with its own terms and privacy policy.

Only 50 may receive and retain limited payment information, including the payer’s name, mobile number, transaction reference, amount, date, payment status, refund status, invoice information and other records necessary for accounting, reconciliation, customer support, fraud prevention and legal compliance. Only 50 does not intend to collect or store complete card numbers, CVV numbers, UPI PINs, banking passwords or other payment-authentication credentials.

For payment of Agent commission, we or our authorised payment service provider may collect or verify the Agent’s bank-account or settlement details. Only 50 may retain the Agent’s verified beneficiary details, masked account information, bank name, payment status, commission ledger, tax information and settlement records to calculate, process, reconcile and evidence commission payments. Such information will remain private and will not be displayed to Platform users.

2.5Location Data

The Platform may request access to a User’s approximate or device location to display Advertisements relevant to the User’s area. Device-based location will be accessed only after the User grants the relevant permission through the browser, device or application settings.

A User may decline or subsequently disable location permission. In that event, location-based features may be unavailable, less accurate or based upon a locality manually selected or entered by the User.

Where an Advertiser voluntarily includes a locality or location in an Advertisement, that information may be displayed publicly. Users should avoid publishing an exact residential address unless it is necessary and intentionally meant for public display.

2.6Communications and WhatsApp Interactions

We may collect communications sent directly to Only 50, including enquiries, support requests, complaints, feedback, notices and communications relating to Advertisements, accounts, payments or Agent commission.

When a User selects an option to contact an Advertiser through WhatsApp, telephone or another external communication service, the Platform may redirect the User to that service using the contact information provided by the Advertiser. Communications taking place after such redirection are generally processed by the relevant third-party service and are subject to its privacy practices.

Only 50 does not ordinarily receive or store the contents of communications exchanged independently between Users outside the Platform unless those communications are subsequently submitted to us for support, investigation, complaint or dispute-resolution purposes.

2.7Device, Log and Usage Data

When a User accesses or uses the Platform, we and our authorised Service Providers may automatically collect technical and usage information, including IP address, device type, operating system, browser type, device or advertising identifiers where permitted, language settings, referral source, pages or screens viewed, searches, clicks, session dates and timestamps, login activity, error reports, crash data and general interaction information.

We may also maintain security and system logs reasonably necessary to operate and protect the Platform, investigate suspicious activity, prevent fraud, diagnose technical problems and comply with lawful cybersecurity requirements.

2.8Cookies and Analytics Data

The website may use cookies, software development kits, pixels and similar technologies for authentication, security, session management, preference storage, performance monitoring, analytics and improvement of the Platform.

Google Analytics or another disclosed analytics provider may collect information about visits, devices, interactions and usage patterns. Where required, non-essential analytics or advertising technologies will be activated only after the User makes the relevant choice through the Platform’s cookie-consent mechanism. Further information may be provided in a separate Cookie Notice.

2.9Voice, Camera and Media Data

Where the Platform provides Gujarati voice input or another voice-enabled feature, microphone access may be requested when the User activates that feature. The Platform or its authorised technical provider may process the voice input, audio data or resulting transcription solely to provide, maintain or improve the requested functionality, subject to any separate notice presented at the time of collection.

Camera, photograph, gallery, file or device-storage access may be requested when a User chooses to capture or upload images, documents or other material. These permissions are optional and may be managed through the User’s device settings, although disabling them may prevent the corresponding feature from functioning.

2.10Reminder and WhatsApp Notification Data

Where a User voluntarily creates a Reminder, we may collect and store the title and description of the task, meeting, occasion or event; the relevant name or other details entered by the User; the scheduled date and time; recurrence, frequency and time-zone preferences; any place or location details manually included in the Reminder; the registered or separately verified WhatsApp number selected for delivery; and the creation, modification, delivery, completion or cancellation status of the Reminder.

Reminder information may contain Personal Data relating to the User or another individual, including a name, birthday, anniversary, meeting detail or other occasion-related information. A User who enters information relating to another individual must be lawfully entitled to provide and use that information for the intended Reminder and must not include sensitive, confidential, excessive or unlawful information. A place or location manually entered in a Reminder does not, by itself, authorise continuous access to or tracking of the User’s device location.

Reminder information is treated as private account information and will not be displayed in an Advertisement or made publicly available. Only 50 will process Reminder information for providing the requested Reminder functionality and will not use the contents of a Reminder for unrelated advertising or promotional communications without separate consent.

2.11Support, Complaint and Legal Data

When a User requests assistance, reports an Advertisement, disputes a payment or commission, exercises a privacy right, submits a legal notice or communicates with us regarding a complaint or investigation, we may collect the User’s identity and contact details, account information, correspondence, documents, call or communication details, transaction information and any other material voluntarily submitted or reasonably required to address the matter.

2.12Personal Data Obtained from Third Parties

We may receive limited Personal Data from authorised Service Providers, payment processors, authentication providers, hosting and security providers or other persons where necessary to provide the Platform, verify a transaction, prevent fraud, investigate a complaint or comply with Applicable Law.

Where an Agent or another User submits Personal Data relating to an Advertiser or any other individual, the person submitting such data represents that the information has been lawfully obtained and that they are authorised to provide it to Only 50 for the stated purpose.

3. How We Use Personal Data

We process Personal Data only for lawful purposes connected with the operation, security and improvement of the Platform and for the purposes described in this Privacy Policy or in a specific notice presented at the time of collection.

We use account and registration data to create, authenticate, maintain and secure User accounts; facilitate mobile-number and OTP-based login; manage account preferences; verify login attempts; prevent unauthorised access; and communicate service-related information.

We use Advertisement, business, contact, media and location data to receive, review, verify, approve, reject, publish, display, categorise, modify, renew, suspend or remove Advertisements; enable Users to search for and discover relevant Advertisements; display Advertisements based on a selected locality or permitted location information; and facilitate communication between prospective buyers and Advertisers.

We use Agent application, registration, identity and verification data to assess, accept or decline applications; verify Agents; prevent impersonation, misuse and fraud; administer, suspend or end an Agent relationship; identify Advertisements introduced by an Agent; determine commission eligibility; and calculate, process, reconcile and maintain records of commission payable to an Agent.

We use payment and transaction data to process and confirm payments, activate paid Advertisements or Platform features, issue payment acknowledgements or invoices, administer refunds where applicable, identify failed or duplicate transactions, reconcile accounts, maintain statutory records and respond to payment or settlement queries.

We use Reminder information to create, schedule, manage, modify and deliver Reminders requested by the User, including notifications relating to tasks, meetings, birthdays, anniversaries, occasions and other events. Where the User selects WhatsApp delivery, the User’s verified mobile number, the relevant Reminder message and scheduled-delivery information will be processed solely to send and administer the requested notification, maintain delivery status and address related support or technical issues.

We use device, log, cookie and usage data to operate and secure the Platform; maintain sessions; remember preferences; detect technical errors, suspicious activity, unauthorised access and misuse; measure performance and usage; understand how Users interact with the Platform; and develop, test and improve its functionality and User experience.

We may use Personal Data to provide customer support; respond to enquiries, complaints and privacy requests; investigate reported Advertisements or User conduct; resolve disputes; enforce the Platform’s Terms and Conditions; protect the rights, property and safety of Users, Only 50 and third parties; and establish, exercise or defend legal claims.

We may also process Personal Data to comply with obligations relating to taxation, accounting, payments, cybersecurity, record retention and regulatory reporting; respond to lawful orders, notices or requests from courts, law-enforcement agencies, regulators or other competent authorities; and undertake internal audits, risk assessments and compliance reviews.

We will not process Personal Data for a purpose that is materially different from the purpose disclosed at the time of collection unless such further processing is permitted under Applicable Law or the User is provided with an appropriate notice and fresh consent is obtained where required.

Only 50 does not use private Personal Data for unrelated commercial exploitation. Public Information contained in an Advertisement will, however, be used and displayed for the inherent purpose of publishing and making the Advertisement discoverable.

4. Review, Approval and Moderation of Advertisements

Advertisements submitted to the Platform are subject to administrative review and may not be published automatically. For the purpose of conducting such review, authorised administrators may access the Advertisement, images and other submitted content, the Advertiser’s account and contact information, relevant payment status and any other information reasonably necessary to assess the Advertisement.

Only 50 may approve, reject, return for correction, restrict, suspend, disable or remove an Advertisement where it appears to be unlawful, prohibited, fraudulent, misleading, deceptive, offensive, unsafe, incomplete, inaccurate, infringing, duplicative or inconsistent with the Platform’s Terms and Conditions, publication standards or Applicable Law. It may also decline publication where the category is unavailable, publication conflicts with its editorial or commercial standards, or the Platform lacks capacity to support the proposed Advertisement. A fee paid for an Advertisement declined for reasons unrelated to the Advertiser’s breach will be dealt with under the Return and Refund Policy.

Administrative review is undertaken solely for Platform governance, safety and compliance. Approval of an Advertisement does not constitute verification or certification of the Advertiser’s identity, authority, ownership, title, qualifications or legal capacity. It also does not constitute inspection, authentication, valuation, endorsement, recommendation, warranty or guarantee of any Advertisement, product, service, document, claim or proposed transaction.

The Advertiser remains solely responsible for the legality, accuracy, completeness and authenticity of the Advertisement and for possessing all necessary rights, permissions, licences, registrations and consents relating to the advertised product or service and the information submitted for publication.

Only 50 may retain a record of moderation decisions, rejected or removed Advertisements and related communications where reasonably necessary to prevent repeated violations, investigate complaints, establish an audit trail, comply with Applicable Law or protect its legal rights.

5. Publicly Available Information and User Interactions

The Platform is designed to enable the publication and discovery of Advertisements. Accordingly, information submitted by an Advertiser for public display may be accessible to visitors, registered Users and other persons accessing the Platform. Such information may include the Advertiser’s name, business or trade name, mobile or WhatsApp number, Advertisement description, images, product or service information, price, locality and other information intentionally included in the Advertisement.

Only 50 will not intentionally display Reminder information, an Agent’s Aadhaar information, identity-verification documents, private bank or settlement details, payment-authentication information, OTPs, internal verification records or other information expressly designated as private.

Users should submit only such information as is reasonably necessary for publication of an Advertisement. Information made public may be viewed, copied, downloaded, indexed, contacted, photographed, recorded or further shared by third parties beyond Only 50’s reasonable control. Removal of an Advertisement from the Platform may not remove copies independently retained, indexed or circulated by third parties.

Prospective buyers and Advertisers are responsible for determining what additional information they wish to disclose to each other. Only 50 does not control Personal Data independently exchanged between Users through WhatsApp, telephone, in-person meetings or any other external channel.

6. Consent and Lawful Processing

Where processing is based on consent, Only 50 will seek consent that is free, specific, informed, unconditional and unambiguous and is provided through a clear affirmative action. A request for consent will identify or make reasonably accessible the Personal Data proposed to be processed, the specified purpose of processing and the manner in which the User may withdraw consent or raise a grievance.

Consent to this Privacy Policy will not be inferred merely from silence, inactivity or continued browsing of publicly available Advertisements. Where a User voluntarily provides Personal Data for a specified and evident purpose, such data may be processed for that purpose in accordance with Applicable Law.

Certain Personal Data is necessary to create an account, publish an Advertisement, process a payment, administer Agent commission or provide another feature requested by the User. If the User does not provide such data, Only 50 may be unable to provide the corresponding account, service or functionality.

A User may withdraw consent as easily as it was given through the available Platform controls or by contacting us. Withdrawal of consent will not affect processing lawfully undertaken before withdrawal. Following withdrawal, Only 50 will cease the relevant processing within a reasonable period unless continued processing or retention is permitted or required under Applicable Law.

By activating a WhatsApp Reminder, the User specifically requests and consents to the processing of the relevant Reminder information and to delivery of the requested message through WhatsApp. The User may withdraw that consent by editing, pausing, disabling or deleting the Reminder, using any available opt-out control, or contacting Only 50. Withdrawal will not affect a message already transmitted for delivery before the withdrawal became effective.

Only 50 may also process Personal Data without consent where such processing falls within a use expressly authorised under Applicable Law, including compliance with a judgment, decree, order or legal obligation; response to a medical or public emergency where applicable; protection against loss or threat to life; or any other legitimate use recognised by law.

Only 50 will not use Personal Data for a materially unrelated purpose without providing an appropriate notice and obtaining fresh consent where required.

7. Disclosure of Personal Data

Only 50 does not sell or rent private Personal Data to third parties. This does not restrict the publication of information that an Advertiser intentionally submits for public display or the disclosures described in this Privacy Policy.

We may disclose Personal Data to Razorpay and relevant banks, payment-system participants or settlement providers for processing payments, verifying transactions, administering refunds, paying Agent commission, reconciling accounts, completing KYC where applicable and preventing payment fraud.

We may disclose a User’s mobile number and limited authentication information to an authorised third-party OTP service provider engaged to generate, deliver or verify OTPs. Only the information reasonably necessary for authentication, security, fraud prevention and troubleshooting will be disclosed for this purpose.

We may disclose Personal Data to Hostinger and other hosting, cloud-storage, database, content-delivery, backup, cybersecurity, software, technical-support and infrastructure providers engaged to operate, maintain and secure the Platform.

Subject to the User’s cookie choices and Applicable Law, limited device, cookie and usage data may be disclosed to Google Analytics or another disclosed analytics provider for traffic measurement, performance analysis and improvement of the Platform.

When a User voluntarily selects WhatsApp, telephone or another third-party communication option, the information necessary to initiate that communication may be transmitted to the selected service. For delivery of a WhatsApp Reminder requested by the User, Only 50 may transmit the User’s verified mobile number, the Reminder message, its scheduled date and time, delivery instructions and limited technical information to WhatsApp and any authorised messaging or communication service provider engaged for delivery. Only the information reasonably necessary to create, transmit, administer and confirm the requested Reminder will be disclosed for this purpose.

We may disclose necessary Personal Data to professional advisers, advocates, accountants, auditors, insurers, consultants and contractors who require access for legitimate professional or operational purposes and who are subject to appropriate confidentiality or legal obligations.

We may disclose Personal Data to courts, tribunals, law-enforcement agencies, government departments, regulatory authorities, tax authorities or other competent bodies where disclosure is required by law, necessary to comply with a lawful direction or reasonably necessary to prevent or investigate fraud, cyber incidents, unlawful activity or threats to the safety of any person.

If the ownership, control or operation of Only 50 or its relevant business or assets is proposed to be transferred, reorganised or succeeded, Personal Data may be disclosed to bona fide advisers, counterparties and successors subject to appropriate confidentiality, due-diligence and legal safeguards. Any successor receiving Personal Data will be required to process it consistently with Applicable Law and the privacy commitments applicable at the time of transfer.

Only 50 will require its contracted service providers to process Personal Data only for the services entrusted to them, implement appropriate safeguards and comply with applicable contractual and legal obligations. Some third parties may independently determine how they process Personal Data and will also be governed by their own privacy policies.

8. Third-Party Services and External Transactions

The Platform may contain links, redirects, integrations or communication options involving Razorpay, WhatsApp, Google Analytics, Hostinger, the OTP provider, Advertisers and other third parties. Access to or use of a third-party service is subject to that third party’s terms and privacy practices.

Only 50 does not control the independent collection, use, retention, security or disclosure of Personal Data by such third parties. This clause does not exclude or limit any responsibility that Only 50 is legally required to assume.

WhatsApp Reminder messages are delivered through a third-party communication service and are subject to that service’s terms, privacy practices, technical requirements and availability. Only 50 will use the WhatsApp Reminder feature for notifications requested by the User and will not treat consent to receive a Reminder as consent to receive unrelated advertising or promotional messages.

Communications, negotiations, inspections, payments and transactions between a prospective buyer and an Advertiser generally take place independently of Only 50. Users should verify the identity and credibility of the other party, inspect the relevant product or service, exercise caution before making payment and avoid disclosing unnecessary Personal Data or financial credentials.

Only 50 is not responsible for Personal Data voluntarily disclosed by a User outside the Platform except where such responsibility cannot lawfully be excluded.

9. Storage, Security and Confidentiality

Personal Data may be stored or processed using Hostinger and other authorised hosting, cloud, database, backup, security and technical-service providers engaged by Only 50.

Only 50 will implement reasonable technical and organisational safeguards appropriate to the nature, scope and sensitivity of the Personal Data and the risks associated with its processing. Such safeguards may include encryption or secure transmission where appropriate, access controls, role-based administrative permissions, authentication controls, logging and monitoring, backups, malware protection, vulnerability management, incident-response procedures and confidentiality obligations.

Access to Aadhaar information, identity documents, private KYC records and Agent bank or settlement details will be restricted to authorised persons who reasonably require such access for verification, commission payment, accounting, compliance, investigation or dispute resolution.

Only 50 will take reasonable steps to ensure that Personal Data disclosed to a Data Processor or Service Provider is protected through appropriate contractual and security requirements. Access permissions will be reviewed and withdrawn when no longer reasonably required.

No method of electronic transmission, online communication or data storage is completely secure. Accordingly, while Only 50 will implement safeguards required under Applicable Law, absolute security cannot be guaranteed.

Users are responsible for maintaining control over their registered mobile number, device, OTPs and account access. A User must not disclose an OTP or other authentication credential to any unauthorised person and should promptly notify Only 50 of suspected unauthorised access, impersonation or misuse.

10. Personal Data Breaches and Security Incidents

Only 50 will maintain reasonable procedures to identify, assess, contain, investigate and remediate Personal Data breaches and other security incidents affecting Personal Data under its control.

Where a Personal Data breach occurs, Only 50 will provide notice to affected individuals, the Data Protection Board of India, CERT-In or any other competent authority in the manner and within the period required under Applicable Law.

A notification to an affected individual may contain information regarding the nature and extent of the breach, its likely consequences, the measures taken or proposed to mitigate its effects, safety measures the individual may adopt and the contact details through which further information may be obtained.

Users should promptly report suspected account compromise, unauthorised access, misuse of Personal Data or any other security concern through the contact details provided in this Privacy Policy.

11. Retention and Deletion of Personal Data

Only 50 will retain Personal Data only for as long as reasonably necessary to fulfil the purpose for which it was collected or subsequently processed and for any additional period required or permitted under Applicable Law.

Account and profile information may be retained while the User’s account remains active. Advertisement content may be retained during the applicable publication period and thereafter for renewal, republication, account history, complaint handling, fraud prevention, audit and legal purposes.

Expired Advertisement content may remain accessible within the Advertiser’s account to enable renewal or republication. The Advertiser may delete the Advertisement or request its deletion, subject to information that Only 50 is required or permitted to retain.

Payment, invoice, commission, settlement, accounting and taxation records may be retained for the period required under applicable financial, taxation and record-keeping laws. Complaint, investigation, moderation, fraud-prevention and legal records may be retained until the relevant matter is resolved and for the applicable statutory or limitation period thereafter.

Records of Agent applications that are not accepted may be retained only for so long as reasonably necessary to document the decision, respond to a complaint, prevent repeated fraud or misuse, or meet a legal obligation. Such records will not be used to pay commission unless an Agent relationship is established and the applicable eligibility conditions are met.

Reminder information may be retained until the Reminder has been delivered, completed, cancelled or deleted, or is no longer required for the purpose selected by the User. A recurring Reminder may be retained and processed until the User pauses, disables or deletes it. Limited delivery records, including the scheduled time, transmission status, delivery status and failure information, may be retained for a reasonable period for security, troubleshooting, support, complaint resolution, audit and legal compliance.

Security and system logs may be retained for the period required under applicable cybersecurity directions, including any minimum retention period prescribed by CERT-In. The official CERT-In directions presently require covered entities to maintain specified ICT system logs securely for a rolling period of 180 days within India.

Where an account or Advertisement is deleted, its public display will be removed or disabled within a reasonable period, subject to technical processing time. Limited copies may temporarily remain in secure backups, archives, logs or disaster-recovery systems and will not be restored for ordinary business use except where required for recovery, security or legal purposes.

When Personal Data is no longer required, Only 50 will take reasonable steps to erase it or render it incapable of identifying the individual, subject to lawful retention requirements.

12. Rights of Individuals

Subject to Applicable Law and reasonable verification of identity, an individual may request a summary of the Personal Data being processed by Only 50 and information regarding the processing activities undertaken in relation to such data.

An individual may request correction of inaccurate or misleading Personal Data, completion of incomplete Personal Data and updating of Personal Data that has become outdated. Advertisers may also be able to correct or update certain information directly through their accounts, subject to administrative review of changes made to published Advertisements.

An individual may request erasure of Personal Data that is no longer necessary for the specified purpose or where consent has been withdrawn. Only 50 may refuse or limit erasure where retention is required or permitted for payment records, taxation, accounting, cybersecurity, fraud prevention, legal proceedings, regulatory compliance, enforcement of rights or another lawful purpose.

An individual may withdraw consent and seek grievance redressal regarding the processing of Personal Data or the exercise of any applicable right.

A User may view, edit, reschedule, pause, disable or delete a Reminder through the controls made available on the Platform. Deleting or disabling a Reminder will stop future processing and delivery relating to that Reminder, except where a message has already been transmitted for delivery or limited information must be retained for security, troubleshooting, dispute resolution or legal compliance.

Where recognised by Applicable Law, an individual may nominate another person to exercise applicable rights in the event of the individual’s death or incapacity.

A request may be submitted through the available account controls or through the contact details specified below. The requester should provide sufficient information to identify the relevant account, Advertisement, transaction or Personal Data. Only 50 may request reasonable verification to prevent unauthorised access, correction, disclosure or deletion.

Only 50 will respond within the period prescribed under Applicable Law or, where no particular period has been prescribed, within a reasonable period having regard to the nature and complexity of the request.

If an individual is dissatisfied with Only 50’s response, the individual may escalate the matter through the grievance mechanism described below and, after exhausting that mechanism where required, may make a complaint to the Data Protection Board of India or another competent authority in accordance with Applicable Law.

13. Account Deletion

A User may request deletion of an account through the deletion function provided on the website or mobile application or by contacting Only 50 through the details stated below.

Upon verification and processing of a valid deletion request, Only 50 will remove or deactivate the User’s public profile and active Advertisements and discontinue processing that depends solely upon the User’s withdrawn consent, subject to reasonable technical time.

Upon deletion of an account, pending and recurring Reminders associated solely with that account will ordinarily be cancelled and removed from active processing, subject to reasonable technical time and any limited retention permitted or required under this Privacy Policy or Applicable Law.

Deletion of an account will not necessarily result in immediate erasure of every record. Only 50 may retain limited information where necessary for payment and commission records, taxation, accounting, fraud prevention, moderation history, cybersecurity, complaints, pending disputes, legal compliance or establishment, exercise or defence of legal rights.

Deletion of an account does not automatically remove information independently copied, indexed, downloaded or shared by third parties while it was publicly available.

14. Children’s Personal Data

For the purpose of this Privacy Policy, a “Child” means an individual who has not completed eighteen years of age or such other age as may be prescribed under Applicable Law.

The Platform may permit general browsing of publicly available Advertisements without prescribing a minimum age. However, browsing access does not authorise a Child to independently create an account, publish an Advertisement, purchase a paid Platform feature, register as an Agent or undertake a transaction for which legal capacity or verifiable parental consent is required.

Where Only 50 processes a Child’s Personal Data and Applicable Law requires consent, such processing will be undertaken only after obtaining verifiable consent from the Child’s parent or lawful guardian. Only 50 may request information reasonably necessary to verify the identity, age and authority of the parent or lawful guardian.

A User must not create a Reminder containing a Child’s Personal Data unless the User is the Child’s parent or lawful guardian or is otherwise lawfully authorised to provide and use that information. Where required under Applicable Law, Only 50 may require verifiable parental or guardian consent before processing such Reminder information.

Only 50 does not intend to undertake behavioural monitoring or tracking of Children or direct targeted advertising at Children. The Platform should not knowingly process a Child’s Personal Data in a manner likely to cause any detrimental effect on the Child’s well-being.

If Only 50 becomes aware that a Child’s Personal Data has been processed without appropriate authority, it may restrict or terminate the relevant account, remove the Advertisement and erase the Personal Data, subject to any lawful retention requirement.

A parent or lawful guardian who believes that a Child’s Personal Data has been submitted or processed without appropriate authorisation may contact the Grievance Officer.

15. Duties of Users

Users must provide information that is authentic and must not impersonate another person while submitting Personal Data or exercising a right under this Privacy Policy.

A User must not suppress material information or submit a grievance or complaint that is false, frivolous or misleading. A User must furnish only such information as is reasonably necessary to verify the User’s identity when seeking correction, access or deletion of Personal Data.

A User must not publish another person’s Personal Data, photograph, identity document, contact information or confidential information without lawful authority and any required consent.

Nothing in this section restricts a User from raising a genuine complaint, exercising a statutory right or seeking any remedy available under Applicable Law.

16. Changes to this Privacy Policy

Only 50 may update this Privacy Policy to reflect changes in Applicable Law, Platform functions, data-processing practices, service providers, security measures or business operations.

The revised Privacy Policy will be made available through the website or mobile application and will state the date on which it was last updated. Where required under Applicable Law, Only 50 will provide reasonable notice of a material change.

If a proposed change involves processing Personal Data for a materially new purpose that is not compatible with the purpose previously disclosed, Only 50 will provide an appropriate notice and obtain fresh consent where required before commencing such processing.

17. Applicable Law

This Privacy Policy is intended to operate in accordance with Applicable Law in India, including the Information Technology Act, 2000; rules, regulations and directions issued thereunder; the Digital Personal Data Protection Act, 2023; the Digital Personal Data Protection Rules, 2025; and other applicable cybersecurity, consumer-protection, payment, taxation and electronic-commerce requirements, in each case to the extent in force and applicable to Only 50’s activities.

Depending upon the nature and technical operation of the Platform, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 may also apply to Only 50 in its capacity as an intermediary. The Platform’s Terms and Conditions should separately contain the intermediary due-diligence, prohibited-content, takedown and grievance provisions required for that role.

If any provision of this Privacy Policy conflicts with a mandatory requirement of Applicable Law, the mandatory requirement will prevail to the extent of the conflict. Nothing in this Privacy Policy requires an individual to waive a statutory right or excludes any duty or liability that cannot lawfully be excluded.

18. Grievance Redressal and Contact Information

Questions, privacy requests, withdrawal or deletion requests, complaints and grievances relating to this Privacy Policy or the processing of Personal Data may be submitted to:

The complainant should clearly describe the request or grievance and provide sufficient information to identify the relevant account, Advertisement, transaction or processing activity. Only 50 may seek reasonable verification before accessing, correcting, disclosing or deleting Personal Data.

Only 50 will acknowledge and address grievances within the period prescribed under Applicable Law. Where the grievance is not resolved to the complainant’s satisfaction, the complainant may pursue any remedy available before the Data Protection Board of India, a court, consumer authority or another competent authority, subject to the applicable jurisdiction and procedural requirements.