Privacy Policy & Data Protection

1 Information We Collect

When you register or use our portal, we collect the following categories of information:

• Account & Profile Details: Full name, shop/agency name, mobile number, email address, physical store address, city, state, and pincode.
• Transaction & Billing Records: Date, time, transaction amount, unique ledger reference ID, payment method type (UPI / Net Banking / Debit Card), and gateway transaction confirmation code.
• Service Application Data: Demographic data submitted with citizen consent (e.g. PAN numbers, vehicle registration numbers, or voter slip parameters) strictly necessary to process the requested digital utility lookup or print layout.
• Technical Device Logs: IP address, browser user-agent, operating system details, session cookies, and security audit timestamps to prevent fraudulent multi-accounting or cyber intrusions.

2 Payment Information & PCI-DSS Security Compliance

We hold user payment security to the highest industry standards:

• No Storage of Banking Credentials: MR CSC Service DOES NOT store, view, or retain your Debit/Credit Card 16-digit numbers, Card CVV/CVC codes, Card Expiration dates, Net Banking Passwords, or UPI PINs.
• PCI-DSS Certified Gateways: All payment transactions are routed directly to licensed, PCI-DSS Level 1 compliant Payment Aggregators (Razorpay, Cashfree, PayU, PhonePe) using encrypted end-to-end HTTPS/TLS sockets.
• Tokenization & Webhook Verifications: Payment confirmations are verified programmatically using cryptographic SHA-256 HMAC digital signatures between the payment aggregator server and our application.

3 Purpose of Processing & Lawful Basis

We process your data strictly for legitimate operational purposes:

• To authenticate your account, maintain your retailer wallet float, and process authorized service applications.
• To generate verified invoice receipts, payment passbook entries, and transaction history.
• To deliver automated SMS, email, or WhatsApp notifications regarding application completion or wallet top-ups.
• To maintain statutory audit trails required under the Information Technology Act, 2000 and prevention of money laundering protocols.

4 Security Architecture & Data Retention

All customer records and uploaded documentation are housed on secure hosting environments fortified by enterprise web application firewalls (WAF), rate-limiting mechanisms, and 256-bit AES encryption.

Citizen document files uploaded for print formatting or verification are retained only for the duration necessary to complete the service or satisfy legal record retention mandates, after which they are purged from temporary fulfillment caches.

5 Your Digital Personal Data Rights

In accordance with India's Digital Personal Data Protection Act, you have the right to:

• Right to Access: Request a summary of the personal data held about you in your account profile.
• Right to Correction: Request the correction of inaccurate or outdated personal profile information.
• Right to Erasure: Request the deletion of your account and personal details, subject to statutory taxation and audit trail requirements.
• Right to Grievance Redressal: Register any concerns regarding data handling with our designated Data Protection & Grievance Officer.

Data Protection & Grievance Redressal Officer

For any inquiries, requests for data correction, or privacy grievances, please contact our designated officer: