LEGAL
Privacy Policy for PehchanKon
This Privacy Policy explains how Vsolwit Industries Private Limited (“Company”, “We”) collects, uses, stores, and protects your personal data when you use Pehchankon. This policy is compliant with the Digital Personal Data Protection Act, 2023 (“DPDPA”), the Information Technology Act, 2000 (“IT Act”), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).
1. Data We Collect
1.1 Data You Provide (Users / Pehchanwale)
- Full name and Google account details (where Google login is used)
- Mobile number (OTP-verified)
- Vehicle registration number
- Last 4 digits of chassis number (used only for Vahan API verification; not stored post-verification)
- Relationship with vehicle (Owner / Primary User / Designated Driver)
- Contacts imported from phonebook (only if explicitly permitted by user, for linking a secondary contact number)
- Payment method details (tokenised; full card/bank details are not stored by the Company)
- Profile name and optional vehicle contact name
1.2 Data Collected from Requesters
- Mobile number (OTP-verified; masked and not disclosed to vehicle owner)
- Selected reason for contact (Vehicle Blocking / Emergency / Damage / Other)
- Timestamp of Contact Request
1.3 Data Collected from Pehchankartas
- Full name, mobile number, and Government-issued ID (for KYC)
- Bank account or UPI details for commission disbursement
- Referral code usage records and earning history
1.4 Data Automatically Collected
- Device information (device model, OS version, unique device identifiers)
- IP address and browser type
- Log data (access times, pages visited, errors)
- Location data (only when the user explicitly accesses “Find Pehchankarta” map feature and grants permission)
- App usage analytics
2. Purpose of Processing
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & authentication | Name, mobile, email | Consent |
| Vehicle registration & Vahan verification | Reg. no., chassis digits | Consent; Legitimate purpose |
| Routing Contact Requests via masked call bridge | Masked mobile, reason, timestamp | Consent |
| Processing subscription payments | Tokenised payment data | Contract performance |
| Pehchankarta commission disbursement | Bank / UPI details | Contract performance |
| Spam and abuse prevention | Device ID, request logs | Legitimate purpose |
| Theft alert notifications | QR scan events, timestamps | Consent |
| Platform analytics & improvement | Anonymised usage data | Legitimate purpose |
| Legal compliance and law enforcement | Any relevant data | Legal obligation |
3. Data We Do NOT Collect or Store
- Full chassis number — only last 4 digits are used for verification and not stored post-verification
- Personal phone numbers of Requesters — these are masked and not disclosed to vehicle owners, nor stored in identifiable form beyond 90 days
- Vehicle owner phone numbers are not transmitted/displayed to Requesters under any circumstance by the Company
- Full debit/credit card numbers or CVV codes
- Call recordings — the content of masked calls is not recorded
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:
- With Vahan API (Ministry of Road Transport) for vehicle verification
- With Exotel / Twilio or equivalent for masked call routing
- With Razorpay or equivalent payment gateway for subscription and commission processing
- With Google Firebase for push notification delivery
- With Google Maps for the “Find Pehchankarta” map feature
- With law enforcement, courts, or regulatory authorities where required by applicable law or court order
- With professional advisors (lawyers, accountants) under strict confidentiality obligations
- With a successor entity in the event of merger, acquisition, or business transfer, with prior notice to users
All third-party service providers are bound by data processing agreements requiring them to process your data only as instructed by the Company and to implement appropriate security measures.
5. Data Retention
- Account and vehicle data: retained for the duration of the account, and for 3 years after account deletion for legal compliance
- Contact Request logs: retained for 90 days, then anonymised
- Payment transaction records: retained for 7 years as required by the applicable law
- Requester mobile numbers: masked and anonymised after 90 days
- QR sticker purchase records: retained for 3 years
- Deleted accounts: personal identifiers purged within 30 days of deletion request, subject to legal retention obligations
6. Your Rights Under DPDPA 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access: You may request a summary of the personal data we hold about you
- Right to correction: You may request correction of inaccurate or incomplete data
- Right to erasure: You may request deletion of your personal data, subject to legal retention requirements
- Right to grievance redressal: You may raise a complaint with our Grievance Officer
- Right to nominate: You may nominate a person to exercise your rights on your behalf in case of death or incapacity
- Right to withdraw consent: You may withdraw consent for non-essential data processing at any time; this will not affect the lawfulness of processing before withdrawal
To exercise your rights, email: contact@vsolwit.com.
7. Data Security
- All data in transit is encrypted using HTTPS with TLS 1.2 or higher
- Data at rest is encrypted using AES-256 encryption
- All servers are located in India
- Access to personal data is restricted to authorised personnel on a need-to-know basis
- The Company undergoes periodic security reviews
- In the event of a data breach, the Company will notify affected users and the Data Protection Board within 72 hours of becoming aware, as required by DPDPA 2023
8. Children's Privacy
The Platform is not directed at or intended for use by persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has provided us with their data, contact us at contact@vsolwit.com.
9. Location Data
Location data is accessed only when you use the “Find Pehchankarta” feature and only while the app is in the foreground. We do not request continuous background location access. You may revoke location permission at any time through your device settings; this will only disable the map feature and will not affect other Platform functionality.
10. Phonebook / Contact List Access
If you choose to link a contact from your phonebook as your vehicle’s secondary contact number, we request temporary access to your contact list solely for that purpose. We do not import, store, or use your contact list for any other purpose. You may decline this permission and manually enter a contact number instead.
11. Changes to This Privacy Policy
We will notify you of material changes to this Privacy Policy via email or in-app notification at least 15 days before the change takes effect. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
12. Contact for Privacy
Privacy Officer: Amit Dabral, CEO. Email: contact@vsolwit.com.
LEGAL
Cookie Policy for PehchanKon
This Cookie Policy explains how Pehchankon uses cookies and similar tracking technologies on pehchankon.com and our mobile application.
1. What Are Cookies
Cookies are small text files placed on your device when you visit our website. They help the Platform function correctly, remember your preferences, and provide analytics data. Similar technologies — such as web beacons, local storage, and mobile device identifiers — are used on our app.
2. Types of Cookies We Use
| Type | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Essential for login sessions, OTP flows, and secure navigation. Cannot be disabled. | Session token, CSRF protection cookie, login state |
| Functional | Remember your preferences such as language, notification settings, and last-used vehicle. | User preferences, last-vehicle cookie |
| Analytics | Help us understand how users interact with the Platform so we can improve it. Data is aggregated and anonymised. | Google Analytics (anonymised), page view tracking |
| Marketing / Targeting | Not currently used. If introduced in future, this policy will be updated with 15 days’ advance notice. | N/A at present |
3. Third-Party Cookies
The Platform may use cookies from the following third parties:
- Google Analytics — anonymised traffic and behaviour analytics
- Google Firebase — push notification tokens and in-app analytics
- Razorpay — payment session management
- Google Maps — session cookies for map functionality
These third parties operate under their own privacy and cookie policies. We encourage you to review them.
4. Managing Cookies
- For the website: You may control cookie behaviour through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair Platform functionality including login.
- For the mobile app: Cookie-equivalent preferences (local storage and device identifiers) can be reset by clearing the app's cache in your device settings, or by uninstalling and reinstalling the app.
- Cookie consent: On your first visit to pehchankon.com, you will be presented with a cookie consent banner. You may accept all cookies, accept only necessary cookies, or manage individual cookie categories.
5. Retention of Cookie Data
- Session cookies: deleted when you close your browser
- Persistent cookies: retained for up to 12 months, unless deleted earlier by you
- Analytics data: aggregated and anonymised within 90 days
6. Contact for Cookie Queries
Email: contact@vsolwit.com