Privacy Policy

1. Who We Are

QuickMitra is a digital register for e-Mitra kiosk operators: it records the work you do for your customers, what they paid and what they still owe. This policy explains what data we hold, why, and the choices you have.

Under India's Digital Personal Data Protection Act, 2023, each kiosk operator decides why and how their customers' data is recorded, so the operator is the Data Fiduciary for it. QuickMitra stores and processes that data only to run the Service for the operator, as their Data Processor. For your own account data (as an operator or staff member), we are the Data Fiduciary.

2. What We Collect

• Your account: your mobile number, your name and, if you choose Google sign-in, your Google account's email address.
• Your e-Mitra: its name, address and kiosk code, and who works there (owner and staff).
• Records you enter: customer names, mobile numbers and relation names, the work done, amounts, payments, dues, expenses and any files you upload. Sensitive details such as Aadhaar numbers are shown masked (XXXX XXXX 1234) everywhere except to the owner on the edit form.
• Your plan: the plan you chose, amounts, dates and Razorpay's reference numbers. We never see or store your UPI, card or bank details.
• Technical data: basic logs (time, page, error) kept to keep the Service secure and working. Logs never contain OTPs, cookies or full mobile numbers.

3. How We Use It

• To run the Service: show your records, print receipts, keep dues correct and let staff work under the owner's control.
• To log you in with OTPs on WhatsApp or with Google, and keep your session secure.
• To bill your plan, and to answer you when you contact Customer care.

We do not sell your data or your customers' data, and we never use your customers' details to contact or market to them.

4. Who We Share It With

Only the service providers we need to run QuickMitra, each for its own part:

• Cloud hosting and database providers, which store the Service's data.
• AOC Portal, which delivers login OTPs on WhatsApp (your mobile number and the code).
• Google, if you choose to sign in with Google.
• Razorpay, which processes plan payments (your mobile number and the amount; you give your UPI details to Razorpay directly).

We may also disclose data where the law requires it.

5. How Long We Keep It

We keep your records for as long as your account is active, including after a plan ends: your data is never deleted because a plan ended, and you can always view and print it. When you ask us to delete your account (Settings → Customer care), we delete it as described in our Terms of Service. A history of changes is kept for security and may be held for a limited period after deletion, or longer where the law requires it.

6. How We Protect It

• Login only with a one-time password or Google, and secure, httpOnly session cookies.
• Every e-Mitra's data is kept separate; staff see only what the owner allows, and sensitive details are masked.
• Every change is recorded with who made it, and encrypted connections (HTTPS) are used throughout.

7. Your Rights

You can ask to see, correct or delete your personal data, and raise a grievance about how it is handled. If you are a customer of an e-Mitra, please contact that e-Mitra first: they control your records. We will help them answer you.

8. Changes to This Policy

We may update this policy from time to time. We will change the date at the top, and tell you in the app about important changes.