Privacy Policy

Effective Date: 2026-08-13 | Last Updated: 2026-08-13

1. Company Identification

Visible Chain Technologies Private Limited (DUNS: 767598484) operates the Ghanti+ mobile application, a street peddler-customer coordination platform available at Ghanti+.

In this Privacy Policy, "we," "us," and "our" refer to Visible Chain Technologies Private Limited, and "you" and "your" refer to users of the Ghanti+ application.

2. Information We Collect

a. Phone Number

We collect your mobile phone number for OTP-based authentication. This is the primary method of verifying your identity when you create an account or sign in.

b. Peddler GPS Location

If you register as a peddler, we collect your real-time GPS location to enable live location broadcast to nearby customers. Location data is collected while the peddler actively broadcasts their availability through the app.

c. Customer Locality Information

If you register as a customer, we collect your locality information to match you with nearby peddlers and display relevant peddler availability in your area.

d. Profile Information

We collect your name and other profile details you provide when setting up your account.

e. Usage Data

We automatically collect information about how you interact with the app, including:

• App interaction data (screens viewed, features used, actions taken)
• Device information (device model, operating system version, unique device identifiers)
• Log data (access times, error logs, referring pages)

f. Communications

We collect any messages or communications you send to us through in-app support, email, or other means.

g. Voice Broadcasts

If you register as a peddler, you may use your device's microphone to record short voice broadcast messages for your customers. These audio recordings are uploaded to our servers and delivered to the customers who follow you. Recordings are kept for as long as your account is active, and are removed when you delete the recording or your account.

3. How We Use Your Information

• Phone Number: To authenticate your identity via OTP, send transactional notifications, and communicate important account-related information.
• Peddler GPS Location: To enable real-time location broadcast so customers can find nearby peddlers, and to facilitate peddler-customer coordination.
• Customer Locality: To display relevant peddlers in your area and personalise your experience based on your neighbourhood.
• Profile Information: To identify you within the app and provide a personalised experience.
• Usage Data: To improve app performance, diagnose technical issues, understand usage patterns, and enhance user experience.
• Communications: To respond to your inquiries, resolve support requests, and improve our services.
• Voice Broadcasts: To enable peddlers to send audio announcements (such as arrival alerts or product availability) to the customers who follow them.

4. Third-Party Services

We share your information with the following third-party service providers, strictly for the purposes described below:

a. SMS Gateway

We use MSG91 to deliver OTP messages to your phone number for authentication purposes. Your phone number is shared with this provider solely for SMS delivery.

b. Cloud Infrastructure

Our app data is hosted on CloudPe. All data stored on our cloud infrastructure is subject to the security measures described in this policy.

We require all third-party service providers to process your data only as instructed by us and in compliance with applicable data protection laws.

We do not use any third-party analytics or advertising SDK. Usage analytics are collected first-party, on our own infrastructure, and are never sold or shared with advertisers. We do not integrate a payment processor, because the App is free to use.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, with role-based access controls in place.
• Audit Trail: We maintain logs of data access and modifications to detect and respond to unauthorised activity.
• Security Log Retention: Security logs are retained for a minimum of 365 days (1 year) in accordance with the Digital Personal Data Protection Rules, 2025.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.

6. Data Retention and Deletion

Retention Periods

• Location Data: Peddler GPS location data is retained for 30 days after collection.
• Usage Data: App interaction and device data is retained for 180 days, after which it is moved to an archive used only for aggregate reporting.
• Security Logs: Retained for 365 days (1 year) as required under the Digital Personal Data Protection Rules, 2025.
• Account Data After Deletion: After you request account deletion, we may retain certain data for up to 90 days to fulfil legal obligations and resolve disputes.

How to Delete Your Account

You can request deletion of your account and associated data through either of the following methods:

• In-App: Navigate to Open the Ghanti+ app > Go to Settings > Tap Account > Tap Delete Account > Confirm deletion and follow the on-screen instructions.
• Web: Visit Ghanti+/account-deletion/ and submit a deletion request.
• Email: Send a deletion request to [UPDATE: delete@ghantiplus.com].

Account deletion requests are processed within 30 days. Upon deletion, your personal data will be erased except where retention is required by law.

7. Your Rights Under the Digital Personal Data Protection Act, 2023

Consent

By using the Ghanti+ app, you consent to the collection and processing of your personal data as described in this Privacy Policy. You may withdraw your consent at any time, subject to the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act). Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights:

• Right to Access: You have the right to obtain a summary of your personal data being processed and the processing activities undertaken with that data.
• Right to Correction: You have the right to request correction of inaccurate or misleading personal data, and completion of incomplete personal data.
• Right to Erasure: You have the right to request erasure of your personal data that is no longer necessary for the purpose for which it was collected.
• Right to Withdraw Consent: You have the right to withdraw your consent for data processing at any time. You can do this through in-app settings or by contacting us.
• Right to Grievance Redressal: You have the right to register a grievance with our Grievance Officer regarding any data processing concerns.
• Right to Nominate: You have the right to nominate another individual to exercise your rights in the event of your death or incapacity.

Response Timeline

We will respond to your requests within 90 days of receipt, as stipulated under the DPDP Act, 2023.

Data Protection Board

If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India established under the DPDP Act, 2023.

8. Children's Data

The Ghanti+ app is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18 years of age.

We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete such data promptly. If you believe that a child under 18 has provided us with personal data, please contact us at [UPDATE: support@ghantiplus.com].

9. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data processing:

10. Device Permissions

The Ghanti+ app requests the following device permissions:

• Location (Coarse): To show peddlers nearby places and enable live location broadcast to customers.
• Microphone: To allow peddlers to record voice broadcast messages for their customers. The microphone is only accessed when you actively choose to record a voice broadcast. We do not access the microphone in the background.
• Internet: To sync data, send and receive messages, and communicate with our servers.
• Vibration: To provide haptic feedback for notifications and alerts.

11. Data Safety Alignment

This Privacy Policy is aligned with the data safety declarations submitted to the Google Play Store. The information disclosed in our Google Play Data Safety section accurately reflects the data collection, usage, and sharing practices described in this policy.

If you notice any discrepancy between this Privacy Policy and our Google Play Data Safety declarations, please contact us so we can address it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you through the app or via the contact information you have provided.

We encourage you to review this Privacy Policy periodically. Your continued use of the Ghanti+ app after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: [UPDATE: support@ghantiplus.com]
• Website: Ghanti+
• Company: Visible Chain Technologies Private Limited
• Registered Address: [UPDATE: Add registered office address]