Privacy policy

1Who we are

Calecute Technologies (OPC) Private Limited is the data fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023.

• CIN U62013KL2026OPC105471
• Registered office: 11/698A, Poolakadavu, Marikkunnu (PO), Kozhikode 673012, Kerala, India
• Contact: info@calecutech.com, or WhatsApp on the number below

2What personal data we collect

When you sign in. We use Google Sign-In. Google gives us your email address, your name and a stable account identifier. We request no other permission from your Google account, and we never receive your Google password.

When you apply. Six fields, and nothing else: your name, mobile number, district, panchayat or municipality, ward, and your occupation.

Optional information. You may also tell us your education, previous experience, hours available per day, whether you have a vehicle, your computer literacy and the kinds of people you can reach. Every one of these can be left blank, and skipping them does not affect your application.

When you set up payouts. Your PAN, and your bank account details or UPI ID. These are requested only at that point, never at signup.

Technical information. A truncated form of your IP address (the network range, not the address itself) and a hashed device identifier, used to detect people creating many accounts.

We do not collect your date of birth, your address, a photograph, or any uploaded document. We do not ask for a registration fee, a deposit or any payment at any stage.

3Why we use it, and on what basis

We process your data to assess your application, issue your agent code, record which customers you referred, calculate and pay your commission, meet our obligations under Indian tax law, and contact you about the programme.

The basis for processing is the consent you give when you register, and the performance of the commission arrangement between us. Where we are required by law to keep or disclose data — tax records, for example — the basis is that legal obligation.

We do not sell your data. We do not use it for advertising, and we do not build profiles of you for any purpose other than assessing your application.

4Who we share it with

• Administrators of the programme. Staff responsible for your district, and authorised company staff. Other agents cannot see your details.
• The Income Tax Department. Your PAN and the TDS deducted, as required for our returns under Section 194H.
• Our bank. The details needed to pay you.
• Our service providers. Hosting and database providers who process data on our instructions and may not use it for their own purposes.
• Where the law requires it, or to establish or defend a legal claim.

Access is enforced by the database itself, not only by the application: an administrator assigned to one district cannot retrieve records from another, and a request that asks for them returns nothing rather than being refused.

5How long we keep it

• Applications that are not approved: 12 months from the date you applied, after which the record is deleted.
• Active agent records: for as long as you are an agent, and for eight financial years afterwards.
• Commission and tax records: eight financial years, as Indian tax law requires. These are kept even after an account is closed.
• Usage measurements: 24 months. They contain nothing that identifies you.

6How we protect it

Your PAN and bank account number are encrypted at rest using AES-256-GCM. Your PAN is displayed only as a mask such as XXXXX1234F — to you, to administrators, and in every export. No part of this system returns a full PAN, and it never appears in logs, error reports or internal audit records.

Duplicate accounts are detected using a one-way keyed fingerprint of the PAN, so that check never decrypts anything. Data is transmitted over TLS. Access by administrators is restricted by role and by district, and every administrative action is written to an audit log that cannot be edited or deleted by anyone.

7Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

• Obtain a copy of the personal data we hold about you
• Have inaccurate data corrected or incomplete data completed
• Have your data erased
• Nominate someone to exercise these rights if you cannot
• Withdraw your consent at any time
• Complain to us, and then to the Data Protection Board of India

Your dashboard does the first three without needing to contact anyone: it shows everything held about you, lets you correct it, and lets you request erasure.

When you ask us to erase your data we remove the details that identify you. Commission and tax records are retained for the statutory period described in section 5, because the law requires us to hold them.

8Cookies and measurement

We set no advertising cookies and use no third-party trackers. The only cookies are the ones that keep you signed in, which are removed when you sign out.

We count how far people get through the signup form so that we can fix the parts that lose them. Those counts carry no name, email address, mobile number or account identifier, and cannot be linked back to you.

9Children

This programme is not open to anyone under 18, and we do not knowingly collect the personal data of children. If you believe a child has registered, contact us and we will remove the account.

10Changes to this policy

If we change this policy we will publish the revised version here with a new date. Where a change materially affects how your data is used, we will tell you before it takes effect.

11Contact and complaints

Write to us at info@calecutech.com, or message us on WhatsApp. We aim to respond within seven working days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.