Privacy Policy

Jan Suvidha Kendra

Last Updated: February 28, 2026

1. Introduction

Jan Suvidha Kendra (“JSK”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring you have a positive experience on our Platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, applications, and services.

2. Information We Collect

Personal Information (Operators):

• Full name (first and last name)
• Email address
• Mobile number with country code
• PIN code and address
• Center name and shop address
• Center code (JSK-XXXX-XXXXXX-XX)
• Center password
• Account credentials (encrypted)

Personal Information (Customers):

• Full name
• Mobile number
• Uploaded document files and metadata
• Purpose of upload (printing/storage)

Technical Information (Auto-collected):

• IP address
• Browser type, version, and language
• Device type and operating system
• Cookies and session identifiers
• Page views, access times, and referral URLs

Usage & Audit Information:

• Login timestamps and IP addresses
• Signup and authentication events
• Actions performed (uploads, downloads, deletions)
• Services accessed and transaction records

3. How We Use Your Information

✓ Account creation, authentication, and identity verification
✓ Center registration and operator management
✓ Secure document upload, storage, and delivery to operators
✓ Email verification and OTP delivery
✓ Center code generation and QR code creation
✓ Service delivery and platform improvement
✓ Audit logging for security and compliance
✓ Fraud detection and prevention
✓ Responding to grievances and support requests
✓ Compliance with legal obligations

4. Document Handling & Auto-Deletion

We take document security seriously:

• Documents uploaded for “Printing” are automatically deleted after 4 hours
• Documents uploaded for “Storage” are automatically deleted after 24 hours
• Files are stored on Cloudinary with secure URLs
• Metadata is stored in Firebase Firestore with server-side access controls
• Operators can manually delete documents before auto-deletion

5. Information Sharing

We do NOT sell your personal information. We may share information with:

• Service Providers: Firebase (Google), Cloudinary, Nodemailer (email delivery) — under strict confidentiality agreements
• JSK Center Operators: Customer name, mobile, and uploaded documents — only for the specific center the customer chose
• Law Enforcement: When required by law, court order, or government request
• Legal Protection: To protect our rights, safety, and property

6. Data Security

We implement industry-standard security measures:

🔒 HTTPS/TLS encryption for all data in transit
🔒 Firebase Authentication with secure token management
🔒 Firestore security rules limiting data access by role
🔒 Server-side Admin SDK for sensitive operations
🔒 Password hashing and encrypted storage
🔒 Audit logging for all authentication events
⚠️ No method of electronic transmission is 100% secure — we strive to protect your data but cannot guarantee absolute security

7. Cookies & Local Storage

We use:

• Essential cookies: For authentication session management
• LocalStorage: To store pending operator signup data for recovery purposes
• Firebase tokens: To maintain authenticated sessions

You can control cookie settings in your browser. Disabling essential cookies may prevent login functionality.

8. Data Retention

• Operator accounts: Retained as long as the account is active. Deleted upon request or after 2 years of inactivity.
• Customer documents: Auto-deleted (4h or 24h). Metadata retained for 90 days for audit purposes.
• Audit logs: Retained for 1 year for security and compliance.
• Transaction records: Retained for 7 years as per Indian tax regulations.

9. Your Rights

Under applicable Indian data protection laws, you have the right to:

✓ Access: Request a copy of your personal data
✓ Correction: Request correction of inaccurate or incomplete data
✓ Deletion: Request deletion of your account and personal data
✓ Portability: Request your data in a structured, machine-readable format
✓ Objection: Object to processing of your data for specific purposes
✓ Withdrawal: Withdraw consent at any time (may affect service access)

To exercise these rights, contact us at privacy@jansuvidha.in or use the Grievance Portal.

10. Third-Party Services

Our Platform integrates with third-party services including Firebase (Google Cloud), Cloudinary (file storage), and Gmail SMTP (email delivery). These services have their own privacy policies. We are not responsible for the privacy practices of third-party services. We encourage you to review their policies.

11. Children's Privacy

The Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly. Parents or guardians who believe their child has provided personal information should contact us immediately.

12. Data Protection Compliance

We comply with applicable Indian data protection regulations including the Information Technology Act, 2000, IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (as applicable). If you have concerns about your data, contact our Data Protection Officer at privacy@jansuvidha.in.

13. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last Updated” date. Significant changes will be notified to registered users via email. Continued use of the Platform after changes constitutes acceptance.

14. Contact Us

Data Protection Officer: privacy@jansuvidha.in

Support Email: support@jansuvidha.in

Helpdesk: 120-2013-301

Grievance Portal: jansuvidha.in/grievance

Address: Jan Suvidha Kendra, India