Privacy Policy - Rushivarya Solutions

Rushivarya Solutions ("we", "our", "us", or "Company") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Personal Information

We may collect the following personal information:

Full name and contact details (email address, phone number, postal address)
Organization/NGO information (name, registration details, tax ID)
User account credentials (username, encrypted password)
Profile information and preferences
Communication history and support inquiries

1.2 Financial Information

Billing and payment information (processed securely through our payment gateway partners)
Transaction history and invoice details
Bank account details (if applicable, stored in encrypted format)
Tax and GST information for Indian compliance

1.3 Technical and Usage Information

Device information (device type, operating system, unique device identifiers)
IP address and approximate location data
App usage statistics and feature interactions
Log data (access times, pages viewed, app crashes)
Cookies and similar tracking technologies

1.4 User-Generated Content

Documents, images, and files you upload
Text content, comments, and communications
Any other data you choose to provide through our Services

2. How We Use Your Information

We use the collected information for the following purposes:

Service Delivery: To provide, maintain, and improve our Services and features
Payment Processing: To process transactions, manage subscriptions, and handle billing
Customer Support: To respond to inquiries, troubleshoot issues, and provide technical assistance
Communication: To send service updates, security alerts, and administrative messages
Analytics: To analyze usage patterns, optimize performance, and develop new features
Security: To detect, prevent, and address fraud, unauthorized access, and security threats
Legal Compliance: To comply with applicable laws, regulations, and legal processes
Marketing: To send promotional materials, newsletters, and offers (with opt-out options)

3. Payment Gateway and Financial Data Security

Important: We use industry-standard, PCI DSS compliant payment gateways to process all financial transactions. Your credit/debit card information is never stored on our servers.

3.1 Payment Processing

All payment transactions are processed through secure, third-party payment gateway providers (such as Razorpay, PayU, CCAvenue, or similar certified providers)
Payment information is transmitted using SSL/TLS encryption (256-bit encryption)
We do not have access to your complete card details - only tokenized payment information
Payment gateways comply with PCI DSS (Payment Card Industry Data Security Standard)

3.2 Transaction Data

We retain transaction records for accounting, tax compliance, and dispute resolution purposes
Transaction data is stored in encrypted databases with restricted access
Financial records are maintained as per Indian legal requirements (minimum 7 years)

4. Data Security Measures

We implement comprehensive security measures to protect your information:

Encryption: Data is encrypted in transit (SSL/TLS) and at rest (AES-256)
Access Controls: Role-based access controls and multi-factor authentication for sensitive operations
Secure Infrastructure: Hosting on secure cloud platforms with regular security audits
Regular Backups: Automated encrypted backups stored in geographically distributed locations
Security Monitoring: 24/7 monitoring for suspicious activities and potential breaches
Employee Training: Regular security awareness training for all personnel
Incident Response: Established protocols for data breach notification and response

Please Note: While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.

5. Information Sharing and Disclosure

We may share your information only in the following circumstances:

5.1 Service Providers

Payment gateway providers for transaction processing
Cloud hosting and storage service providers
Email and SMS service providers for communications
Analytics and performance monitoring tools
Customer support and CRM platforms

All service providers are bound by strict confidentiality agreements and data processing terms.

5.2 Legal Requirements

To comply with applicable laws, regulations, or legal processes
In response to valid requests from law enforcement or government authorities
To enforce our Terms of Service or protect our legal rights
To investigate and prevent fraud, security breaches, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5.4 With Your Consent

We may share information with third parties when you explicitly provide consent for such disclosure.

6. Data Retention

Personal data is retained as long as your account is active or as needed to provide Services
Financial and transaction records are retained for a minimum of 7 years as required by Indian tax and accounting laws
We may retain certain information for legitimate business purposes or legal compliance even after account closure
Upon request, we will delete or anonymize your data, except where retention is legally required

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request access to the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal data (subject to legal retention requirements)
Opt-Out: Unsubscribe from marketing communications at any time
Data Portability: Request a copy of your data in a structured, machine-readable format
Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise these rights, please contact us at privacy@rushivaryasolutions.in

8. Marketing Communications

We may use your email address and phone number for:

Promotional offers, product updates, and newsletters
Important service announcements and security alerts
Customer feedback surveys and satisfaction studies
Administrative communications related to your account

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in emails or by contacting us directly. Please note that you cannot opt out of essential service-related communications.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain user sessions and remember preferences
Analyze usage patterns and improve Services
Personalize content and advertisements
Detect and prevent fraud

You can control cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of our Services.

10. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information promptly.

12. Data Breach Notification

In the event of a data breach that may compromise your personal information, we will:

Notify affected users within 72 hours of discovering the breach
Inform relevant regulatory authorities as required by law
Provide details about the nature of the breach and steps being taken
Offer guidance on protective measures you can take

13. International Data Transfers

Your information may be transferred to and processed in countries other than India. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards, including standard contractual clauses and adequacy decisions.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. We will:

Post the updated policy on our website and within the App
Update the "Last Updated" date at the top of this policy
Notify you of material changes via email or in-app notification
Obtain your consent for changes that materially affect your rights

Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Compliance with Indian Laws

We comply with applicable Indian data protection laws, including:

Information Technology Act, 2000 and rules thereunder
Digital Personal Data Protection Act, 2023 (when enacted)
Reserve Bank of India (RBI) guidelines for payment data
Goods and Services Tax (GST) regulations for financial records

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiries within 30 days.