Privacy Policy.

Last updated: [date]

BharatUdaan is operated by A2G India (“we”, “us”). We respect your privacy and handle personal data in line with India’s Digital Personal Data Protection Act, 2023 (DPDP Act). This policy explains what we collect, why, and the choices you have.

1. Who we are

A2G India, [registered address]. For privacy questions, contact our Grievance Officer at [email] (see Grievance Redressal).

2. The data we collect

  • From agents: name, mobile number, email; identity verification through Aadhaar/DigiLocker (with your consent); PAN, verified through an authorised verification service and stored encrypted and masked — never in raw form; bank-account details used only to pay you; and your training, certification and activity records.
  • From business prospects: business name, contact person and contact details, and qualification information captured by an agent with consent, plus a confirmation of interest.
  • Automatically: device, app and log information needed to run and secure the service.

3. Why we use it

To verify identity, operate the marketplace, pay commissions, meet tax obligations (including TDS under Section 194H), keep the platform secure, and comply with law. Where the DPDP Act requires it, we process personal data on the basis of your consent, which you can withdraw.

4. Who we share it with

  • OEM suppliers — who see only the agent’s unique ID, never the agent’s name, contact or other personal details.
  • Verification and payment partners — our KYC/verification provider [vendor] and a licensed payment aggregator.
  • Professional advisors and authorities, where required by law. We do not sell personal data.

5. How long we keep it

We keep personal data only as long as needed for the purposes above and as required by law. [Specific retention periods — to be finalised with your CA/legal (open decision)].

6. How we protect it

We use encryption, masking of sensitive identifiers such as PAN, access controls and audit logging. No system is perfectly secure, but we work to protect your data.

7. Your rights

Under the DPDP Act you may ask to access or correct your data, request erasure, and withdraw consent. To exercise these, contact our Grievance Officer (see Grievance Redressal).

8. Cookies

We use limited cookies to run the site; see our Cookie Notice.

9. Changes

We may update this policy and will post the new date above.

Legal review needed: confirm DPDP wording, the lawful-basis statements, retention periods, vendor names, the grievance-officer details, and cross-border/processor terms before publishing.