Privacy Policy

Aakhri badlaav: 29 September 2026

Ye policy GR Recharge (GR Syber Cafe, website grrecharge.in) par laagu hoti hai. Isme saaf-saaf likha hai ki hum aapki kaun-si jaankari lete hain, kis kaam ke liye, kitne din rakhte hain, kisko dete hain, aur aap uske baare me kya kar sakte hain. Ye Digital Personal Data Protection Act, 2023 (DPDP Act) aur IT Act, 2000 ke hisaab se likhi gayi hai.

Hamara portal B2B hai — account retailer, distributor aur master distributor ke liye hote hain. Aap jab apne customer ka recharge karte hain, to us customer ka number hamare paas sirf recharge poora karne ke liye aata hai.

1. Hum kya jaankari lete hain

(a) Account banate waqt

• Naam, mobile number, email address
• Dukaan / firm ka naam aur pata
• Password (hum use seedha nahi rakhte — uska ek-tarfa hash rakhte hain, jise wapas password me nahi badla ja sakta)
• MPIN (yahi tarika — hash me)

(b) KYC ke waqt (marzi se, par zaroori suvidhaon ke liye)

• PAN — poora number hamare database me encrypted rehta hai; screen par sirf ABCXX1234X jaisa chhupa hua roop dikhta hai
• Aadhaar — poora Aadhaar number hum save nahi karte. Sirf aakhri 4 ank, aur ek ek-tarfa hash (taaki ek Aadhaar par do account na banein). Hash se number wapas nahi nikalta.
• Aadhaar se mila naam, janm tareekh, pata aur photo — encrypted, sirf verification ke record ke liye

(c) Transaction ke waqt

• Jis mobile number / DTH ID ka recharge kiya, amount, operator, tareekh, order ID, operator ka transaction ID
• Wallet ki har entry (kitna aaya, kitna gaya, commission kitna mila)
• Online payment karte waqt gateway se aaya reference (card number, CVV, UPI PIN ya net-banking password hamare paas kabhi nahi aata — wo seedha payment gateway ke paas jaata hai)

(d) Suraksha ke liye apne aap

• IP address, browser / device ki jaankari, login aur zaroori kaamon ka samay (audit log)
• Session cookie — sirf aapko login rakhne ke liye. Hum vigyapan (ads) ya tracking wali cookie istemal nahi karte, aur kisi ad network ko aapka data nahi dete.

2. Kis kaam ke liye

• Aapka account chalane aur recharge poora karne ke liye
• Wallet, commission aur refund ka sahi hisaab rakhne ke liye
• Kanoon ke hisaab se KYC poori karne ke liye
• Dhokha (fraud), galat istemal aur hacking rokne ke liye
• Aapko zaroori khabar dene ke liye — WhatsApp, email ya portal ki notification (recharge ka nateeja, fund approve, ticket ka jawab)
• Aapki shikayat / ticket ka hal nikalne ke liye
• Accounting, GST aur kanooni zarooraton ke liye

Hum aapka data bechte nahi hain, kisi ad company ko nahi dete, aur "data broker" ko nahi dete.

3. Kisko dete hain

Sirf utna, jitna kaam poora karne ke liye zaroori hai:

• Recharge API partner — sirf jis number ka recharge hai wo number, operator aur amount
• Payment gateway — add money ke waqt zaroori jaankari (paisa unke paas jaata hai, hamare paas nahi)
• KYC verification partner — PAN / Aadhaar verify karane ke liye, sirf verification ke waqt
• Message / email bhejne wali service — aapko alert bhejne ke liye
• Hosting — server jahan website chalti hai
• Kanoon — court, police ya kisi sarkari adesh par, jitna kanoon kehta hai

Aapka upar wala (distributor / master distributor) aapki transaction aur commission ki report dekh sakta hai, kyonki business isi tarah chalta hai. Unhe aapka poora mobile number nahi dikhta (chhupa hua dikhta hai) aur aapke customer ka poora number bhi nahi dikhta. KYC ke document sirf admin dekh sakta hai.

4. Kitne din rakhte hain

• Transaction aur wallet ka hisaab — accounting / GST ke niyam ke hisaab se 8 saal tak
• KYC record — account chalne tak, aur band hone ke baad kanoon ke hisaab se zaroori samay tak
• Login / audit log — aam taur par 6 mahine
• Support ticket — hal hone ke baad record ke liye

Zaroorat khatm hone ke baad data hata diya jata hai ya aisa bana diya jata hai jisse kisi ki pehchaan na ho.

5. Suraksha

• Poori website HTTPS (SSL) par
• Password aur MPIN hash me, PAN / pata / photo encrypted
• Login par OTP, paise wale kaam par MPIN
• Database ke har sawaal me "prepared statement" (SQL injection se bachav)
• Admin ke har badlaav ka audit log
• Ek IP / ek account se baar-baar koshish par apne aap rok (rate limit)

Phir bhi internet par koi bhi cheez 100% surakshit nahi hoti. Aapka password aur MPIN sirf aapke paas hai — use kisi ko na batayein, hamare staff ko bhi nahi. Hum aapse kabhi bhi phone par password, MPIN ya OTP nahi poochhte.

6. Aapke adhikar

• Apna data dekhne ka adhikar
• Galat jaankari theek karane ka adhikar
• Data hatane ka adhikar — jitna kanoon (KYC / accounting) hatane deta hai
• Marketing wale message band karane ka adhikar (zaroori transaction wale alert band nahi honge)
• Shikayat le jaane ka adhikar — pehle hamare Grievance Officer ke paas, phir Data Protection Board of India ke paas

In sabke liye Contact page se likhein ya support@grrecharge.in par email karein. Hum aam taur par 30 din ke andar jawab dete hain.

7. Bachche

Ye portal 18 saal se kam umar walo ke liye nahi hai. Hum jaan-boojh kar bachchon ka data nahi lete. Aisa data galti se aa gaya ho to batayein, hum hata denge.

8. Policy badalne par

Is policy me badlaav hone par naya version isi page par aa jayega aur "aakhri badlaav" ki tareekh badal jayegi. Bada badlaav hone par portal ke andar bhi bata denge.

9. Sampark / Grievance Officer