This Privacy Policy describes how BengalSeva ("we", "our", or "us") collects, stores, protects, and discloses personal information obtained through our official website, progressive web application (PWA), mobile applications, and connected APIs.

1. Information We Collect

We collect information to provide, personalize, and continually improve your experience across our hyperlocal ecosystem:

• Personal Identity Data: Full name, telephone number, email address, password hash, and profile photos.
• Device Geolocation Data: Precise GPS coordinates (latitude and longitude) collected through your browser or device sensors to identify nearby verified merchants, compute delivery distances, calculate RideNow cab/bike taxi fares, and locate doorstep repair technicians.
• Merchant & Driver KYC Documentation: Commercial trade licenses, vehicle registration certificates (RC), driver licenses, insurance files, and bank/UPI account identifiers to facilitate verified partner payouts.
• Financial Transaction Logs: Mode of payment, transaction reference identifiers (UTR / Razorpay / Gateway IDs), billing timestamps, and invoice metadata. Note: We do not store raw credit/debit card numbers or CVVs on our servers.
• Log Files & Device Information: Internet Protocol (IP) addresses, browser type, Internet Service Provider (ISP), referring/exit pages, date/time stamps, and clickstream data.

2. Google AdSense & Third-Party Advertising Cookies

3. How We Use and Process Information

Your data is processed strictly under legitimate contractual and operational necessities:

• To facilitate appointment bookings, doorstep repairs, and parcel fulfillment.
• To compute real-time distance and dispatch nearby RideNow drivers.
• To authenticate and transmit mobile and utility bill payments through certified BBPS/Telecom API switches (Pay2All).
• To detect, investigate, and prevent fraudulent transactions, automated scraping, or unauthorized account access.
• To comply with regulatory disclosures required by law enforcement or tax authorities.

4. Third-Party Service Providers

We share minimal necessary data with trusted third parties bound by strict confidentiality agreements:

• Authorized Payment Gateways: Licensed gateways (Razorpay, Cashfree, PhonePe, PayU) for PCI-DSS compliant checkout processing.
• 3PL Logistics Partners: Courier logistics networks (Shiprocket, Delhivery, Blue Dart) for generating physical shipping labels and AWB tracking codes.
• Telecommunications & BBPS Switches: Licensed API gateways (Pay2All) for processing instant utility recharges.

5. Data Retention, Security & User Rights

We implement SSL 256-bit encryption across all data pathways. As per the Indian Digital Personal Data Protection Act (DPDPA 2023), you have the right to review, update, or request permanent deletion of your account and personal records. You may initiate a deletion request by contacting our Grievance Officer.

6. Children's Online Privacy Protection

Our platform is not directed to individuals under the age of 18. We do not knowingly collect personal identifiable information from children. If we discover that a minor has provided us with personal information, we will delete it immediately.