Privacy Policy
How ChallanDekho collects, uses, stores, and protects your personal data.
1. Introduction
ChallanDekho ("we", "us", "our") operates https://challandekho.com and related apps to help you look up vehicle-related information and complete eligible paid services such as challan settlement.
This Privacy Policy explains what personal data we process, why we process it, how long we keep it, and the rights available to you under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
By using our platform, you acknowledge this Policy. Where consent is required, we will seek it separately in a clear and specific manner.
2. Data we collect
Depending on how you use the platform, we may process the following categories of personal data:
- Identity & contact: mobile number, name (if provided), email (if provided), and OTP verification metadata.
- Vehicle identifiers: registration number (vehicle number), and related lookup inputs you submit for challan, RC, DL, PUC, or similar services.
- Service & order data: search history, garage/vehicle saves, order IDs, challan references, settlement status, and support tickets.
- Payment data: payment status, order/payment references, and gateway identifiers returned by our payment partner (Cashfree). We do not store your full card number, UPI PIN, or net-banking credentials.
- Device & usage: IP address, browser/app type, device identifiers, pages viewed, approximate location derived from IP (not precise GPS unless you later grant it), cookies/SDK signals, and diagnostic logs.
- Communications: messages you send to support, call notes where applicable, and feedback.
3. Sources of data
We collect data directly from you, automatically from your device when you use the platform, and from authorised third parties required to deliver the service — for example government or licensed data partners for vehicle records, and Cashfree for payment processing.
Vehicle, challan, RC, DL, and PUC information shown on the platform may originate from third-party or public authority systems. We display mapped results for your convenience and do not claim ownership of government records.
4. Purpose of processing
We process personal data only for lawful purposes, including:
- Providing lookup, garage, dashboard, and settlement features you request.
- Authenticating users (OTP), securing accounts, and preventing fraud or abuse.
- Creating and fulfilling orders, processing payments via Cashfree, and issuing refunds where applicable.
- Sending transactional notices (OTP, order status, payment/refund updates).
- Customer support, dispute resolution, and service improvement.
- Complying with law, responding to lawful requests, and enforcing our Terms.
- With your consent where required: product updates, reminders, or marketing communications (you may withdraw anytime).
5. Legal basis
Under the DPDP Act, we process personal data based on your consent and/or for uses that are necessary to provide the service you request, honour a contract with you, comply with law, or for other legitimate uses permitted under applicable law.
You may withdraw consent for consent-based processing without affecting the lawfulness of processing before withdrawal. Withdrawal may limit certain optional features.
7. Payments and financial data
Online payments on the platform are processed by Cashfree. When you pay, you may be redirected to or presented with Cashfree Checkout. Cashfree and the issuing bank/UPI app process sensitive payment credentials under their own security and privacy terms.
ChallanDekho receives payment confirmation metadata (such as payment status, order references, and gateway payment IDs) needed to update your order — not your full card PAN, CVV, or UPI PIN.
8. Retention
We retain personal data only for as long as needed for the purposes above, including order history, refunds, dispute handling, audit, and legal retention requirements.
Typical retention: account and order records for the life of the account plus a reasonable period thereafter (generally up to 8 years for financial/tax records where applicable, or shorter where law allows erasure).
When data is no longer required, we delete or anonymise it in line with our retention schedule, except where longer retention is required by law.
9. Security
We use administrative, technical, and organisational measures appropriate to the risk — including encryption in transit (TLS), access controls, least-privilege practices, logging, and vendor due diligence.
No method of transmission or storage is completely secure. Please protect your device and OTP. Never share OTPs with anyone claiming to represent us.
11. Your rights
Subject to applicable law (including the DPDP Act), you may request:
- Access to personal data we hold about you.
- Correction of inaccurate or incomplete data.
- Erasure of data where retention is no longer necessary or consent is withdrawn (subject to legal exceptions).
- Withdrawal of consent for consent-based processing.
- Grievance redressal through our designated contact below.
12. Children
ChallanDekho is intended for users who can form a legally binding contract under Indian law (typically 18 years or older). We do not knowingly collect personal data from children. If you believe a minor has provided data, contact us for deletion.
13. Cross-border transfers
Primary processing is intended in India. If any processing or subprocessors operate outside India, we will do so only as permitted under applicable law and with appropriate safeguards.
14. Changes to this Policy
We may update this Privacy Policy to reflect legal, technical, or business changes. The “Last updated” date will change when we do. Material changes may be notified via the platform, SMS, or email where appropriate.
15. Contact & grievance
For privacy requests or grievances, contact privacy@challandekho.com. For general support, write to support@challandekho.com or call +91 1800 000 0000 (Mon–Sat, 9:00 AM – 7:00 PM IST).
Please include enough detail for us to verify your identity and locate your account or order. We aim to acknowledge grievances promptly and resolve them within timelines required by applicable law.