PRIVACY POLICY & DATA USAGE GUIDELINES

PRIVACY POLICY & DATA USAGE GUIDELINES
Platform Name: ProMistri
Official Website: https://promistri.co
Compliant with Information Technology Act, 2000 & Bharatiya Nyaya Sanhita (BNS) 2023

1. PRIVACY, DATA DELETION, ACCOUNT RETENTION & 90-DAY AUTOMATED PURGE POLICY
a) Data Usage: Personal data (Name, Phone, GPS Location, KYC) is encrypted and processed strictly for order fulfillment, fraud prevention, and regulatory compliance.
b) Standard Account Deletion & 90-Day Automated Purge: Users can request complete account and personal data deletion at any time via Account Settings -> [Delete My Account] on our website (https://promistri.co) or mobile apps in compliance with Google Play Store, Apple App Store, and web data privacy regulations. Upon initiating an account deletion request, the user's account enters a standard 90-day retention window. During this period, personal data is deactivated, and after exactly 90 days from the date of the request, our automated system will permanently and irreversibly delete all personal data, profile information, and logs associated with the user from our active databases.
c) Dispute, Legal & Statutory Override: Notwithstanding a user's request for complete account deletion and the standard 90-day automated purge, the Platform reserves the legal right to suspend the deletion process and securely retain essential digital logs, transaction histories, KYC records, and device metadata beyond the 90-day period. This specific retention applies strictly in cases where an active financial dispute, safety violation, consumer complaint, fraud investigation, or formal inquiry by law enforcement agencies is registered against the user during or prior to the 90-day window. In such cases, the data shall be safely preserved until the matter or legal dispute is fully resolved and closed, in compliance with applicable cybersecurity and IT rules.

2. DATA SECURITY, CONFIDENTIALITY & USER RESPONSIBILITY
a) Data Security & Confidentiality: We implement robust administrative, technical, and physical security measures (including data encryption) to protect your personal data from unauthorized access, loss, misuse, or disclosure. Your data is kept strictly confidential and is not sold, rented, or traded to unauthorized third parties.
b) User Responsibility & OTP Confidentiality: The Platform utilizes secure mobile number and OTP (One-Time Password) based authentication across our website and applications. You are solely responsible for maintaining the confidentiality of your registered phone number, email address, and any login OTPs. If you voluntarily share your login OTP, phone, or account access with any third party, and they access your account or tamper with your data, you shall be solely responsible for such actions. The Platform, management, and its affiliates shall bear zero liability for unauthorized account access resulting from user negligence or sharing of credentials.
c) Business Transitions & Third-Party Transfers: As our business evolves, we may undergo business transitions such as a merger, acquisition, restructuring, or sale of all or a portion of our assets. In such events, your personal data may be among the transferred assets. If such a business transfer or contract with a third-party entity occurs, we will make reasonable efforts to notify you via email or a prominent notice on our website (https://promistri.co) prior to the transfer of your data.

3. RIGHT TO ACCESS AND REQUEST PERSONAL DATA
a) Users have the right to request a copy of their personal data or obtain information regarding the personal data we hold about them.
b) To submit a data access or export request, the user must send a formal email from their registered email address to our official support or privacy email address (support@promistri.co or privacy@promistri.co).
c) Upon receiving a valid request, the Platform administrative team will verify the user's identity and provide the requested personal data records within 7 (seven) working days, subject to compliance with applicable laws and verification protocols.

4. GRIEVANCE REDRESSAL FOR PRIVACY
In accordance with the Information Technology Act, 2000 and rules made thereunder, if you have any questions, concerns, feedback, or privacy grievances, you may reach out to our designated Grievance Officer:
- Name: Md Manjar (Grievance Officer)
- Official Website: https://promistri.co
- Email: privacy@promistri.co / support@promistri.co