Privacy Policy

1What we collect

We collect only what a service actually needs, and nothing more:

• Identity and contact — your name, mobile number and email address, so we can create your account, sign you in, and send OTPs and service updates.
• Business details — shop name, category, address, pincode, photos and opening hours, so we can publish your listing and mini-website.
• Transaction data — order ID, amount, plan, wallet ledger and payment status, so we can process payments and refunds and issue invoices.
• Service inputs — the mobile or DTH number, consumer number or draft text you type, so we can complete the specific service you asked for.
• Technical data — IP address, device type, browser and approximate location, for security, fraud prevention and showing you nearby results.
• Support data — your emails, chat messages and call notes, so we can answer your query and keep a record of the resolution.

We do not collect biometric data, and we do not ask for your card CVV, UPI PIN, internet-banking password or account OTP at any time.

2Consent and legal basis

When you give us personal data to complete a transaction, verify a payment or place an order, you consent to us collecting and using it for that specific purpose only. We also process data where it is necessary to perform our contract with you, to comply with a legal obligation, or to prevent fraud.

You may withdraw your consent at any time by writing to info@suvidha.app. Withdrawing consent does not affect processing already carried out, and it may mean we can no longer provide certain services to you.

3How we use your data

We use your data to create, secure and operate your account; to deliver the services you ask for, such as listings, drafts, recharges, bill payments and photo tools; to process payments, apply refunds and maintain your wallet ledger; and to send transactional messages such as OTPs, receipts, renewal reminders and service alerts.

We also use it to provide customer support and investigate complaints, to detect and prevent fraud, abuse and security incidents, and to meet our accounting, tax and other legal obligations. We use your data for marketing only if you have opted in, and every marketing message carries a one-tap opt-out.

4Payments

Supported Wallet Add Money payments on Suvidha are processed by our authorised payment partner Cashfree Payments India Private Limited, a payment aggregator authorised by the Reserve Bank of India. Subscription collection is not part of this Cashfree integration.

• Card data is handled entirely by the gateway under the Payment Card Industry Data Security Standard (PCI-DSS) and is encrypted during processing.
• Suvidha never stores your full card number, CVV, UPI PIN or net-banking credentials on its servers.
• We receive only a transaction reference, the amount, the payment method type and the success or failure status — which we need in order to activate your service and handle refunds.
• Your use of the gateway is also subject to that provider's own privacy policy and terms.

5Who we share data with

We share personal data only with the parties below, only to the extent needed, and under contracts that require them to protect it:

• Payment partner — to process your payment and any refund.
• Telecom operators and billers — the number or consumer ID needed to complete a recharge or bill payment.
• Messaging providers — to deliver OTPs and transactional messages over SMS, email or WhatsApp.
• Cloud hosting providers — for secure storage of data on servers in India.
• Government or law enforcement — only where we are legally required to disclose, or where you have breached our Terms of Service.

Once you follow a link away from Suvidha, that third party's own privacy policy applies and this policy no longer governs you.

We never sell, rent or trade your personal data, and we never share your contact details with advertisers.

6How long we keep it

• Account data — while your account is active, and up to 90 days after you delete it, to allow recovery of an accidental deletion.
• Transaction and invoice records — up to 8 years, as required by Indian tax and accounting law. This applies even after account deletion.
• Support conversations — up to 24 months, for quality and dispute resolution.
• Server and security logs — up to 180 days.

Once a retention period ends, data is permanently deleted or irreversibly anonymised.

7Security

We take reasonable technical and organisational precautions and follow industry best practice: encryption in transit (HTTPS/TLS), hashed passwords, role-based internal access, and audit logs on administrative actions. Access to personal data is restricted to authorised personnel who need it to do their job.

No method of transmission over the internet is completely secure. If a data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law.

8Cookies

We use a small number of cookies and similar browser storage:

• Essential — to keep you signed in and to protect forms against cross-site request forgery. These cannot be turned off without breaking the site.
• Preference — to remember your language and last used location.
• Analytics — aggregated, non-identifying counts of page visits so we can improve the product.

We do not use third-party advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings; essential cookies are required for sign-in to work.

9Your rights

Under Indian data protection law you may:

• Access — ask for a copy of the personal data we hold about you.
• Correct — have inaccurate or incomplete data fixed. Most fields can be edited directly in your account.
• Delete — have your account and personal data erased, subject to the legal retention periods in Section 6.
• Withdraw consent — opt out of non-essential communications at any time.
• Complain — raise a grievance with our Grievance Officer, and escalate to the Data Protection Board of India if you remain dissatisfied.

To exercise any of these, use Account → Settings or email us from your registered address. We verify your identity first, then respond within 7 working days. See the User Data Policy for data collected through Meta platforms.

Suvidha is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it promptly.

10Changes to this policy

We may modify this Privacy Policy at any time; the revised version takes effect when it is posted on this page. If the change is material, we will also notify you in the app or by email. If Suvidha is acquired by or merged with another company, your data may be transferred to the new owner, who will remain bound by this policy.

11Aadhaar data handling

Where an Aadhaar number is voluntarily provided for a specific service, it is handled in strict compliance with the Aadhaar Act, 2016 and the IT Act, 2000:

• Purpose: collected only for the limited period needed to complete the service you requested, and only with the Aadhaar holder's permission.
• Security: stored in encrypted form; accessible only to the Aadhaar holder and specifically authorised personnel.
• Sharing: never shared with any third party. The only exception is sharing with the user themselves via India Post, to print the address on an activation kit or KYC letter.
• Your control: because the service is fully digital, you decide how long the data stays — you can delete it from your account at any time.
• We do not store Aadhaar biometrics, and we never use Aadhaar data for profiling or marketing.

12Grievance and privacy contact

To access, correct, amend or delete any personal data we hold about you, or to register a complaint, contact our Privacy Compliance / Grievance Officer:

• Email: grievance@suvidha.app (or info@suvidha.app)
• Address: Privacy Compliance Officer, Sevapaal Mandal, C 218, Unnati Vihar, New Loha Mandi Road, Near Road No. 14, VKIA Harmada, Jaipur, Rajasthan 302013

We acknowledge every privacy grievance within 48 hours and resolve it within one month of receipt.