Upayog ID ("we," "our," or "the Platform") is committed to protecting the privacy and security of the personal data processed through our Software-as-a-Service (SaaS) platform. This policy outlines our data processing practices in compliance with applicable data protection laws, including the Digital Personal Data Protection (DPDP) Act.
Upayog ID acts strictly as a Data Processor. The Societies, Businesses, and Authorized Field Agents using our platform act as the Data Fiduciaries. They are solely responsible for obtaining explicit, lawful consent from individuals before entering their data into our systems.
To facilitate the generation of Identity Cards and maintain system integrity, we process:
All sensitive information is transmitted via TLS encryption and stored on secure, enterprise-grade cloud databases (Google Firebase). We utilize strictly isolated architecture to separate heavy media files (photographs) from textual databases. Access to full datasets is governed by strict Role-Based Access Control (RBAC), restricted exclusively to verified Master Administrators.
We practice data minimization. Personal data collected for ID generation is retained only as long as necessary to fulfill the print logistics. Master Administrators retain the right to execute global data purges. End-users wishing to exercise their right to data erasure must contact the Society or Field Agent (the Data Fiduciary) who collected their data.
Upayog ID operates a closed-loop system. We do not sell, rent, aggregate, or trade personal data to external marketing agencies, data brokers, or third parties under any circumstances. Data may only be disclosed if explicitly mandated by a binding court order from Law Enforcement Agencies.
If you suspect unauthorized data collection or wish to report a security vulnerability, please contact the Upayog ID Administration team immediately.