Privacy Policy & Data Protection Notice

1. Data We Collect

We collect the minimum personal data necessary to evaluate, appoint, and manage sales executives across Uttar Pradesh:

• Identity Data: Full legal name, date of birth, gender, and father's name.
• Contact Data: 10-digit mobile number, email address, and residential postal address.
• Geographic Preferences: Uttar Pradesh district, block, and village selections with official Census/LGD codes.
• Payment & Bank References: 12-digit UPI transaction reference (UTR) and UPI VPA for refund disbursement.
• Technical Logs: IP address, device user-agent, and login timestamps for security and fraud prevention.

2. Purpose and Legal Basis of Processing

We process your data exclusively for lawful purposes in accordance with Section 4 of the Digital Personal Data Protection Act 2023, specifically: verifying applicant identity, checking payment records against banking settlements, issuing official credentials, distributing territory rights, and processing deposit refunds.

3. Data Security & Storage Architecture

All account passwords are encrypted using modern Argon2id cryptographic hashing with high memory cost parameters. We never store plain-text passwords. All financial transactions are stored with Row Level Security (RLS) policies and append-only audit logs. Access to sensitive payment references and bank information is strictly restricted to authenticated and authorized super-administrators.

4. Sharing & Disclosure Policy

We do not sell, rent, monetize, or barter your personal contact details or application data to marketing aggregators, third-party loan brokers, or advertisers. Data is shared strictly with banking and UPI payment networks for transaction reconciliation and law enforcement authorities when legally mandated under court order or statutory requirements.

5. Data Retention & Erasure

Application and audit logs are retained for a minimum statutory period of seven (7) years to satisfy financial audit requirements, tax compliance, and prevention of fraudulent chargebacks. Upon written verified request, non-financial profile information can be anonymized or archived.

6. Grievance Officer

In compliance with the Information Technology Rules and the DPDP Act 2023, for any privacy concerns, data corrections, or grievances, you may contact our designated Data Protection Officer at privacy@vocalink.internal or visit our Contact page.