Legal

Privacy Policy

What we collect, why we collect it, how long we keep it, and who else sees it. Written to describe what the software actually does rather than to cover every theoretical possibility.

Last updated 30 August 2026 · FnB Network is operated by Projects Management Group (PMG), India.

Who we are

FnB Network is a professional network and marketplace for the food and beverage value chain, operated by Projects Management Group (PMG) in India. This policy covers the FnB Network website, the mobile apps for Android and iOS, and the API behind them.

For anything in this policy, or to exercise any of the rights below, write to info@pmg.engineering.

What we collect and why

We ask for the minimum an account needs. Most fields below are optional and stay blank until you choose to fill them in.

WhatWhyKept
Mobile numberIt is your username. We send a one-time code to it to prove the number is yours.While your account exists
PasswordTo sign you in. Stored only as a salted hash — we cannot read it.While your account exists
Email addressOptional. Only if you add one, for contact and recovery.While your account exists
Profile — name, photo, headline, role, bio, linksYour public professional profile. You choose what to put here.Until you change or remove it
Verification selfieMatched against your profile photo to confirm you are a real person.Deleted right after the match
Business and organisation detailsEntity pages, listings, offerings, tenders and produce you publish.Until you remove them
Messages and postsTo deliver them to the people you send them to.Until deleted by a participant
Usage eventsCounting views and interactions so pages can show what is popular. IP addresses are stored only as an irreversible hash.Aggregated into daily counts
Payment recordsSubscription and invoice history, if you buy a paid plan.As long as tax and accounting law requires

Your selfie, specifically

Identity verification works by comparing a selfie you take against the photo already on your profile. The comparison runs on Amazon Rekognition in AWS's Mumbai region. This is biometric processing, so we treat it differently from everything else here.

The selfie is deleted as soon as the match is decided. We keep the outcome — verified or not, a similarity score, and how many attempts you have used — but not the image. Verification is entirely optional; you can use FnB Network without it, and you are asked for explicit consent before the camera is used.

You are given three attempts. We record each one, including attempts refused before any matching happened, so that support can tell you why you are stuck rather than guessing.

What we do not collect

  • Your location. The apps do not request location permission at all. Where a business appears on our map, that is an address someone typed in, not a device reading.
  • Your contacts, calendar, photos library, or call logs. The apps ask for camera access, and only for taking a profile photo or a verification selfie.
  • Raw IP addresses in analytics. They are hashed before storage and cannot be reversed back to an address.
  • Advertising identifiers. We do not use third-party advertising or tracking SDKs, and we do not build advertising profiles of you.

Who else sees your data

We do not sell your personal data, and we do not share it for anyone else's advertising. We use a small number of service providers who process data only on our instructions:

  • SMS providers (Twilio, MSG91) — receive your mobile number to deliver your one-time code.
  • Amazon Web Services (Mumbai region) — stores uploaded files, and runs the face match for verification.
  • Payment gateways (Razorpay, Stripe) — handle payments if you buy a paid plan. Card details go to them directly; they never reach our servers.
  • Error monitoring (Sentry) — receives technical crash reports. Configured not to send personal data.
  • Hosting (DigitalOcean, India) — runs the servers and the database.

We may also disclose data where the law requires it, or to investigate fraud, abuse or a threat to someone's safety.

What is public by default

FnB Network is a professional directory, so parts of it are meant to be seen. Your profile page, the entity pages you administer, and anything you publish — posts, listings, offerings, reviews, produce, tenders — are visible to anyone, including people who are not signed in, and may appear in search engines.

Your mobile number, your email address, and your private messages are not public. Neither is your verification selfie, which is stored on private, non-public storage for the short time it exists.

Industry data and benchmarks

We publish aggregate industry benchmarks. Before any figure is shown it must pass a k-anonymity threshold — a cohort with too few contributors is suppressed rather than published, and so is one where a single contributor dominates the result. The intent is that a published number cannot be traced back to your business.

Your rights

Under India's Digital Personal Data Protection Act, 2023, and equivalent rights elsewhere, you can ask us to:

  • Show you the personal data we hold about you.
  • Correct anything that is wrong or out of date.
  • Delete your account and the personal data attached to it.
  • Withdraw consent for identity verification, which stops any further biometric processing.
  • Nominate someone to exercise these rights on your behalf if you cannot.

Most profile fields you can edit yourself, in the app or on the web, without asking us.

Deleting your account

You can delete your account yourself, and you do not need to ask us. In the app, go to Profile → Delete account; on the web, go to Me → Delete account. You will be asked to confirm with your password, so that someone with your unlocked phone cannot do it for you.

It happens immediately and cannot be undone. Your account, profile, identity verification, saved searches and uploads are removed, and your mobile number becomes free to register again. If you would rather we did it, write to info@pmg.engineering from the number or address on the account.

One thing will stop it: if you are the only owner of an entity page that other people are still members of, we ask you to hand that page over first, rather than leaving their page with nobody able to manage it.

Two things survive deletion, and we would rather say so than surprise you. Records we are legally required to keep — chiefly invoices and tax records — are retained for the statutory period. And content that is part of someone else's record stays with them: a message you sent remains in their conversation, and a review you wrote remains on the business it rated. Those are shown as written by a deleted user, with no link back to you — which is the point of erasure here, severing you from the record rather than destroying somebody else's.

How we protect it

  • Everything travels over HTTPS. Passwords are stored only as salted hashes.
  • Sensitive uploads — verification selfies and identity documents — go to private storage that is not reachable by URL, unlike ordinary profile photos.
  • Access to production systems is restricted and logged.
  • One-time codes are single-use, expire quickly, and are rate-limited against guessing.

No system is perfectly secure. If we discover a breach affecting your personal data, we will notify you and the Data Protection Board of India as the law requires.

Children

FnB Network is for people working in the food and beverage industry and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, tell us and we will remove it.

Changes to this policy

If we change how we handle your data we will update this page and move the date at the top. Where a change is significant we will tell you in the app rather than relying on you to re-read this.

See also our Terms of Use.