Privacy Policy
1. Introduction & Data Fiduciary
RUPEEPEOPLE PRIVATE LIMITED (CIN: U70200TN2026PTC194904), having its registered office at Plot No -41, VTK First Street, Vasanthapuram, Katpadi, Vellore - 632007, Tamil Nadu, India (“RupeePeople”, “we”, “our”, “us”) is committed to protecting your privacy and personal data.
This Privacy Policy explains how we collect, process, store, share, and protect your personal data when you use our asset discovery services, website (rupeepeople.com), WhatsApp channels, and mobile applications.
Data Fiduciary: RUPEEPEOPLE PRIVATE LIMITED acts as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Data Principal: You (the client, claimant, or authorised representative) are the Data Principal whose personal and financial discovery data we process.
2. Grievance Officer
In accordance with Section 6 and Section 8 of the DPDP Act, 2023, RupeePeople has appointed a dedicated Grievance Officer:
- Name & Designation: Priyavardhini Gandhi, Director & Grievance Officer
- Entity: RUPEEPEOPLE PRIVATE LIMITED
- Email: support@rupeepeople.com (Alternate: info@rupeepeople.com)
- Phone / WhatsApp: +91 80562 21285
- Postal Address: Plot No -41, VTK First Street, Vasanthapuram, Katpadi, Vellore - 632007, Tamil Nadu, India
We acknowledge all data protection and privacy grievances within 72 hours and resolve them within 30 calendar days. Please email with the subject line “DPDP Grievance / Data Rights Request”.
3. Personal Data We Process
We collect only personal data required for asset discovery. Key categories include identity and contact details, government IDs (Aadhaar/PAN when provided), case documents, financial clues, survey data, OTP records, and anonymised app telemetry (counts only — no SMS text).
4. Mobile App & Authentication
- OTP login: One-time passwords via AWS SNS for authentication only — never for marketing.
- On-device SMS classification: Full message text is not sent to our servers.
- Privacy-safe telemetry: Anonymous aggregate counts only (type, category, has_amount).
- Document vault: Encrypted on your device; optional personal cloud backup.
- Session tokens: JWT tokens with expiry for API authentication.
5. How We Use Your Information
We use personal data strictly for asset discovery — identifying assets, verifying identity, coordinating with institutions, preparing evidence packs, and communicating updates. We never use your data for marketing without explicit opt-in consent.
6. Consent
Under the DPDP Act, consent must be free, specific, informed, and unambiguous. Separate consent may be required for service delivery, after-life discovery, on-device app processing, and marketing. You may withdraw consent by contacting the Grievance Officer; withdrawal may limit ongoing services but does not affect prior lawful processing.
7. Your Rights as Data Principal
- Right to access information about your personal data
- Right to correction of inaccurate data
- Right to erasure (subject to legal retention requirements)
- Right to grievance redressal
- Right to nominate another individual to exercise your rights in event of death or incapacity
Contact support@rupeepeople.com (subject: DPDP Request) to exercise these rights.
8. Data Sharing
We do not sell personal data. We may share data with banks, insurers, employers, government portals (EPFO, IEPF, UDGAM, CAMS, KFintech, NSDL, CDSL), and lawyers (with your consent) solely for asset discovery and claim filing.
9. Cross-Border Data Transfers
Some processors may operate outside India:
- Railway — application hosting (United States)
- Neon or Supabase — PostgreSQL database (cloud region per account; contact Grievance Officer for current region)
- AWS SNS — OTP SMS delivery (AWS region per account; SMS to Indian numbers)
- GitHub Pages — website hosting (United States)
- Google Drive — optional user-initiated backup (user’s account jurisdiction)
- WhatsApp (Meta) — client communication (Meta’s policies apply)
Transfers occur only where permitted under the DPDP Act and applicable rules.
10. Retention Schedule
- Active case data: case duration + 3 years
- Closed case documents: 3 years after closure, then deleted
- OTP records: 24 hours after use or expiry
- Telemetry counts: 12 months (aggregated)
- WhatsApp case logs: case duration
11. Data Breach Notification
If a breach likely affects you, we will assess impact, take corrective action, notify the Data Protection Board of India as required, and notify affected Data Principals as required by law. Report suspected breaches to support@rupeepeople.com (subject: Data Breach Report).
12. Children’s Data
Services are not directed at under-18s. We do not knowingly collect children’s data without verifiable parental or guardian consent. Minors as legal heirs may be represented by an authorised guardian.
13. WhatsApp & Third-Party Portals
WhatsApp is used for onboarding and updates; Meta’s policies apply separately. We access government portals (EPFO, UDGAM, IEPF, etc.) on your behalf where authorised; each portal has its own privacy policy.
14. Policy Updates
We may update this policy for legal or service changes. Material updates will be posted on rupeepeople.com.
15. Corporate Disclosures & Statutory Inquiries
RUPEEPEOPLE PRIVATE LIMITED — Data Fiduciary
CIN: U70200TN2026PTC194904 · SPICe+ Part B SRN: AC4315468
Registered Office: Plot No -41, VTK First Street, Vasanthapuram, Katpadi, Vellore - 632007, Tamil Nadu, India
Official Emails: info@rupeepeople.com · support@rupeepeople.com
Phone / WhatsApp: +91 80562 21285
Website: https://www.rupeepeople.com
