🔒 Privacy Policy

1. Information We Collect

• Mobile number — for login and OTP verification
• Name, address and email (if provided) — used in your application
• Application details — information entered in forms (father's name, date of birth, district, etc.)
• Uploaded documents — Aadhaar card, photo, bank passbook, marksheet, etc.
• Payment reference — UPI transaction ID, receipt screenshot
• Device info — browser push notification subscription
• Technical logs — IP address, browser, click timestamps (for security and analytics)

2. Why We Collect It

• 🎯 Solely to process your application and assist with form filling
• 📞 To notify you of application status (WhatsApp / push notification)
• 💳 Payment verification and receipt records
• 📊 Internal analytics to improve service quality (aggregated, not individual)
• 🔒 Fraud prevention and security
• ⚖️ Compliance with legal obligations (tax, mining regulations, etc.)

3. Data Retention

Your application data and documents are retained until approval and thereafter as required by law (typically 3 years for tax and regulatory records). You may submit a 'Delete My Data' request at any time (see below). Upon admin approval, all your applications, documents, OTP records, support messages, and push subscriptions are permanently deleted within 2–3 working days. Only your name, mobile number, and address are retained so you can log back in.

4. Where Data Is Stored

• 🗄️ Database: Supabase (PostgreSQL) — encrypted servers in Mumbai/Singapore region
• 📁 Document files: Supabase Storage — TLS encryption, signed URLs (time-limited access)
• 🌐 Website hosting: Vercel — global CDN, automatic HTTPS
• 🔐 All communications are encrypted via HTTPS (SSL/TLS 1.3)

5. Do We Send Data to AI/OCR Services?

No. Your documents are never sent to any AI, OCR, or machine-learning service. Documents are reviewed only manually by our admin team to fill your government form. We do not use your data to train any AI model.

6. Data Sharing

• ✅ Relevant government portals (to submit your application — e-District, UP Mine Mitra, NSDL, etc.)
• ✅ Supabase (our database provider — under data processing agreement)
• ✅ Vercel (hosting provider)
• ✅ Google Analytics (page-view statistics only, IP anonymised)
• ❌ We do not sell your data to any advertiser
• ❌ We do not share data with SMS marketing or cold-call services
• ⚖️ Government agencies only upon valid court order or legal request

7. Your Rights

• 👁 Right to view your data (everything is visible on your Profile page)
• ✏️ Right to correct inaccurate information
• 🗑️ Right to delete — submit a request via the 'Delete My Data' button
• 🔕 Option to disable push notifications (via browser settings)
• 📤 Right to request a data download (contact us)

8. How to Request Data Deletion

Log in and go to your Profile page. Scroll to the bottom and tap '🗑️ Delete My Data'. A confirmation modal will appear showing exactly what will be deleted and what will be retained (name, mobile, address). Upon confirmation, the request is sent to our admin. After review and approval, all data is permanently deleted within 2–3 working days. You will receive a push notification when the process is complete.

9. Cookies and Tracking

We use only essential session cookies (to maintain your login). Google Analytics is used solely to count aggregate page views — IP addresses are anonymised. We do not use advertising trackers, Facebook Pixel, or any cross-site tracking pixels.

10. Security Measures

• 🔒 HTTPS (TLS 1.3) — all data transmitted encrypted
• 🛡️ Row-Level Security (RLS) — you can only see your own data
• 🔐 Admin panel secured with email allowlist + 2FA
• ⏱ Rate limiting — protection against automated attacks
• 📋 Regular security audits and dependency updates

11. Minors

This service is intended for users aged 18 and above. If a scholarship or exam form is being filled for a minor, it must be done under the guidance of their parent or guardian.

12. Policy Updates

We may update this policy at any time. You will be notified of significant changes via push notification or WhatsApp. The latest version is always available on this page. See the 'Last Updated' date above.