Privacy Policy

Authenticate India Innovations Pvt Ltd and its affiliated entities (“AuthenticateIndia”, “Company”, “we”, “our”, “us”) are committed to protecting privacy, safeguarding personal data, and maintaining transparent processing practices.

This Privacy Policy explains how we collect, use, store, secure, disclose, retain, and otherwise process information when you access or use the AuthenticateIndia website, mobile application, APIs, onboarding systems, dashboards, verification tools, and related services (collectively, the “Platform”).

By registering, accessing, or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Scope of This Policy

This Policy applies to:

• Individual users
• Business / organization users
• Agents / referral partners
• Merchants / enterprise customers
• Website visitors
• API users and authorized representatives

This Policy does not apply to third-party websites, gateways, or services linked from the Platform.

Information We Collect

A. Information You Provide During Registration / Onboarding

Depending on account type and applicable workflow, we may collect:

Individual Users

• Mobile number
• OTP verification status
• Name (where lawfully auto-fetched from authorized verification flow)
• Email address
• City / location details
• Video KYC submissions
• Consent acknowledgements
• Referral code / referrer details (optional)

Organization / Business Users

• Mobile number of authorized person
• OTP verification status
• Name of authorized person
• Company / business details
• Business category
• City / operational location
• Email address
• Video KYC of authorized representative
• Consent acknowledgements
• Referral details (optional)

B. Information Generated Through Platform Use

We may collect:

• Login history
• Device/browser metadata
• IP address
• Timestamps
• Activity logs
• Verification transaction logs
• Billing records
• Support requests
• Security event logs

C. Information from Third Parties

Where lawfully enabled and required for service delivery, we may receive:

• Payment confirmations
• KYC workflow responses
• API service status data
• Anti-fraud signals
• Public or authorized data responses

Important Clarification on Government / Verification Data

AuthenticateIndia follows a data-minimization approach. Unless legally required, contractually necessary, technically essential, or expressly disclosed:

• Full government-source records are not intended for persistent storage.
• Verification transactions may be stored as activity evidence, request logs, reference IDs, timestamps, or status records.
• Results may be processed transiently to complete requested services.

How We Use Information

We may use information for the following lawful purposes:

• User registration and account creation
• Identity / onboarding workflows
• OTP authentication
• Video KYC review
• Service delivery and account management
• Fraud prevention and security monitoring
• Customer support
• Billing, invoicing, and reconciliation
• Audit trail maintenance
• Product improvement and analytics
• Legal compliance and dispute handling
• Communication of important service notices

Legal Basis / Grounds for Processing

Depending on context, processing may be based on:

• User consent
• Performance of contract
• Compliance with legal obligations
• Legitimate business interests such as security, fraud prevention, and service administration
• Authorized instructions from enterprise customers

Where consent is required, users may withdraw consent subject to legal and operational limitations.

Data Protection Principles

AuthenticateIndia aims to process information in accordance with recognized privacy principles, including:

• Lawfulness and fairness
• Purpose limitation
• Data minimization
• Accuracy where relevant
• Storage limitation
• Security and confidentiality
• Accountability

Security Measures

We implement reasonable technical and organizational measures which may include:

• Encryption in transit and at rest
• Restricted role-based access
• Secure authentication controls
• Administrative monitoring & audit logging
• Tamper-resistant controls
• Secure backup procedures
• Incident response processes
• Vendor security reviews

No system is completely immune from risk; however, we continually strengthen controls.

Data Storage & Retention

We retain data only for as long as reasonably necessary for purposes such as:

• Account maintenance
• Security monitoring
• Fraud prevention
• Contractual obligations
• Legal compliance
• Tax and accounting records
• Internal audits
• Dispute resolution

Retention duration may vary by data category. After expiry, data may be deleted, anonymized, archived, or securely restricted, subject to legal obligations.

User Rights & Choices

Subject to applicable law, users may request:

• Access to certain personal information
• Correction of inaccurate information
• Update of profile details where allowed
• Withdrawal of consent (where processing is consent-based)
• Account closure requests
• Clarification regarding processing practices

Some records may be non-editable where required for audit integrity, fraud prevention, compliance, or evidentiary purposes.

Account Data Integrity Controls

To maintain trust, certain onboarding and consent records may be stored in controlled or non-editable formats.

This helps preserve:

• Audit reliability
• Transaction integrity
• Fraud prevention
• Compliance defensibility

Profile updates may be allowed only through approved workflows.

Sharing of Information

We may share limited information only where reasonably necessary with:

• Technology service providers
• Hosting / cloud vendors
• Payment processors
• Verification / KYC partners
• Professional advisors (legal, audit, tax)
• Government / law enforcement where legally required
• Enterprise customers where you are their authorized user

We do not sell personal data to advertisers. if users wants account deletion they can request on this url Delete account as per process. based on deletion request it will be processed.

Cross-Border Processing

Some vendors or infrastructure providers may process data outside your state or country subject to contractual safeguards and applicable law.

Cookies & Similar Technologies

Our website or app may use cookies or similar tools for:

• Login sessions
• Security
• Preferences
• Performance analytics
• Fraud detection

Users may manage browser cookie settings, though some features may be affected.

Communications

We may send:

• OTPs
• Account alerts
• Security notifications
• Billing messages
• Important policy updates
• Service notices

Marketing communications, where applicable, may include opt-out options.

Children’s Privacy

The Platform is not intended for children below the age permitted by applicable law to independently contract or consent. If data of minors is identified without lawful basis, reasonable steps may be taken to remove it.

Third-Party Links

Our Platform may link to third-party websites or tools. We are not responsible for their privacy practices. Users should review their policies separately.

Data Breach / Security Incidents

In the event of a material security incident, AuthenticateIndia may take appropriate remedial measures including containment, investigation, notifications where legally required, and corrective action.

Changes to This Policy

We may revise this Privacy Policy periodically.
Updated versions become effective upon publication or notice through the Platform.
Continued use after updates indicates acknowledgment.

Contact / Privacy Requests

For privacy-related requests or concerns:

Authenticate India Innovations Pvt Ltd
Address: B-4, Miraj Business centre, Opp.Cinemall, Nr.Natubhai Circle,
Vadodara-390007, Gujarat, india
Team@aiipl.org
+91-8238413839
www.aiipl.org
Subject Line: Privacy Request

Consent & Acknowledgment

By registering, submitting information, completing onboarding, or using the Platform, you acknowledge that your information may be processed as described in this Privacy Policy.