Privacy Policy
1. Introduction
RupeePeople (“we”, “our”, “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you use our asset discovery services, website, WhatsApp channels, and mobile application.
Data Fiduciary: RupeePeople acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Data Principal: You are the Data Principal whose personal data we process.
2. Grievance Officer
In accordance with the DPDP Act, RupeePeople has appointed a Grievance Officer:
- Designation: RupeePeople Grievance Officer
- Email: rupeepeople@gmail.com
- Phone / WhatsApp: +91 80562 21285
We will acknowledge grievances within 72 hours and aim to resolve them within 30 days. Email us with subject line “DPDP Request”.
3. Personal Data We Process
We collect only personal data required for asset discovery. Key categories include identity and contact details, government IDs (Aadhaar/PAN when provided), case documents, financial clues, survey data, OTP records, and anonymised app telemetry (counts only — no SMS text).
4. Mobile App & Authentication
- OTP login: One-time passwords via AWS SNS for authentication only — never for marketing.
- On-device SMS classification: Full message text is not sent to our servers.
- Privacy-safe telemetry: Anonymous aggregate counts only (type, category, has_amount).
- Document vault: Encrypted on your device; optional personal cloud backup.
- Session tokens: JWT tokens with expiry for API authentication.
5. How We Use Your Information
We use personal data strictly for asset discovery — identifying assets, verifying identity, coordinating with institutions, preparing evidence packs, and communicating updates. We never use your data for marketing without explicit opt-in consent.
6. Consent
Under the DPDP Act, consent must be free, specific, informed, and unambiguous. Separate consent may be required for service delivery, after-life discovery, on-device app processing, and marketing. You may withdraw consent by contacting the Grievance Officer; withdrawal may limit ongoing services but does not affect prior lawful processing.
7. Your Rights as Data Principal
- Right to access information about your personal data
- Right to correction of inaccurate data
- Right to erasure (subject to legal retention requirements)
- Right to grievance redressal
- Right to nominate another individual to exercise your rights in event of death or incapacity
Contact rupeepeople@gmail.com (subject: DPDP Request) to exercise these rights.
8. Data Sharing
We do not sell personal data. We may share data with banks, insurers, employers, government portals (EPFO, IEPF, UDGAM, CAMS, KFintech, NSDL, CDSL), and lawyers (with your consent) solely for asset discovery and claim filing.
9. Cross-Border Data Transfers
Some processors may operate outside India:
- Railway — application hosting (United States)
- Neon or Supabase — PostgreSQL database (cloud region per account; contact Grievance Officer for current region)
- AWS SNS — OTP SMS delivery (AWS region per account; SMS to Indian numbers)
- GitHub Pages — website hosting (United States)
- Google Drive — optional user-initiated backup (user’s account jurisdiction)
- WhatsApp (Meta) — client communication (Meta’s policies apply)
Transfers occur only where permitted under the DPDP Act and applicable rules.
10. Retention Schedule
- Active case data: case duration + 3 years
- Closed case documents: 3 years after closure, then deleted
- OTP records: 24 hours after use or expiry
- Telemetry counts: 12 months (aggregated)
- WhatsApp case logs: case duration
11. Data Breach Notification
If a breach likely affects you, we will assess impact, take corrective action, notify the Data Protection Board of India as required, and notify affected Data Principals as required by law. Report suspected breaches to rupeepeople@gmail.com (subject: Data Breach Report).
12. Children’s Data
Services are not directed at under-18s. We do not knowingly collect children’s data without verifiable parental or guardian consent. Minors as legal heirs may be represented by an authorised guardian.
13. WhatsApp & Third-Party Portals
WhatsApp is used for onboarding and updates; Meta’s policies apply separately. We access government portals (EPFO, UDGAM, IEPF, etc.) on your behalf where authorised; each portal has its own privacy policy.
14. Policy Updates
We may update this policy for legal or service changes. Material updates will be posted on rupeepeople.com.
15. Contact
RupeePeople — Data Fiduciary
Email: rupeepeople@gmail.com
Phone / WhatsApp: +91 80562 21285
Website: rupeepeople.com