Privacy Policy

We collect information necessary to provide our multifaceted services effectively: - **Personal Identification Details:** Name, email address, contact telephone/mobile number, company name, designation, and physical address. - **Business & Financial Information:** GSTIN, PAN, business registration certificates, bank account details, and merchant KYC documents for payment gateway and fuel credit services. - **Transaction & Payment Data (RI Pay):** Transaction IDs, payment amounts, timestamp, UPI IDs, payment mode, and settlement records (Note: Card numbers are processed via certified PCI-DSS compliant banking channels and never stored as plain text). - **Fleet & Energy Usage Telemetry:** Fuel dispensing logs, vehicle numbers, driver IDs, fuel volume, station locations, and RFID/Fleet card transaction timestamps. - **Technical & Browsing Data:** IP addresses, browser types, operating systems, referring URLs, device identifiers, and site usage analytics collected via cookies.

Your information is utilized for legitimate business purposes including: - Delivering, provisioning, and customizing software applications, cloud systems, and dashboards. - Facilitating seamless payment processing, merchant settlement, refunds, and chargeback management via RI Pay. - Managing fuel distribution logistics, fleet card transactions, and mini fuel pump operational monitoring. - Verifying identities, conducting merchant onboarding risk assessments, and complying with anti-money laundering (AML) and RBI regulations. - Providing round-the-clock technical support, system maintenance, and responding to inquiries. - Sending transactional updates, invoices, security alerts, and service announcements.

We respect your privacy and do not sell, rent, or trade your personal information. Information is only shared under strictly controlled conditions: - **Banking & Payment Partners:** With partner banks, NPCI, card networks, and payment aggregators strictly to execute financial transactions and compliance audits. - **Service Providers & Cloud Hosts:** With trusted infrastructure partners (cloud servers, SMS gateways, database hosts) operating under strict non-disclosure agreements (NDAs). - **Legal & Regulatory Obligations:** When mandated by applicable Indian laws, judicial orders, law enforcement requests, or regulatory bodies (e.g., RBI, GST departments). - **Corporate Restructuring:** In the event of a merger, acquisition, or asset transfer, where the acquiring entity will be bound by this Privacy Policy.

We implement enterprise-grade security measures to safeguard your information: - 256-bit SSL/TLS encryption for all data in transit across web portals and APIs. - Multi-factor authentication (MFA) and role-based access control (RBAC) for internal systems. - Regular vulnerability assessments, penetration tests, and automated threat monitoring. - Strict data backup and disaster recovery protocols to prevent data loss.

Our digital platforms use essential, functional, and analytical cookies to improve session handling, remember user preferences, and analyze website performance. You have the ability to accept or decline cookies through your browser settings, though declining certain cookies may limit some interactive features.

Users have the right to request access to their stored personal data, request correction of inaccurate details, or withdraw consent for non-essential communication. We retain transaction and KYC records for the duration mandated by applicable statutory and financial regulations in India.

We use the WhatsApp Business Platform (Cloud API) and other Meta Platforms services to communicate with customers, send transactional notifications, and provide support. - **What we collect via WhatsApp:** Your WhatsApp phone number, display name, the content of messages you send us, message timestamps and delivery status, and any files or media you share with us. - **How we use it:** To respond to your enquiries, send order/booking/payment confirmations, service alerts, OTPs, and support messages that you have opted in to receive. We do not send marketing messages without your explicit consent, and you may opt out at any time by replying "STOP". - **Meta's role:** Messages are transmitted through Meta's infrastructure and are subject to WhatsApp's Privacy Policy and Meta's Platform Terms in addition to this policy. We do not sell WhatsApp data or use it for advertising. - **Retention:** WhatsApp conversation data is retained only as long as needed to provide the service or as required by law, after which it is deleted or anonymised.

You may request deletion of the personal data we hold about you, including data collected through WhatsApp, Facebook or other Meta platforms, at any time. - **How to request:** Send an email to privacy@riddhess.com with the subject "Data Deletion Request", or send a WhatsApp message to +91 7047558229 stating "Delete my data", from the phone number or account you want removed. - **What happens next:** We will verify your identity, acknowledge your request within 48 hours, and delete or anonymise your personal data within 30 days. You will receive a confirmation once the deletion is complete. - **Exceptions:** Records that we are legally required to retain (for example, payment, tax and KYC records under Indian financial regulations) will be kept only for the mandated period and then deleted. - Full step-by-step instructions are available on our dedicated page: https://riddhess.com/data-deletion/

In accordance with the Information Technology Act 2000 and rules made thereunder, for any queries, grievances, or privacy-related requests, please contact our Grievance Officer: - **Company:** Riddhess Infotech & Agro Pvt. Ltd. - **Office Address:** Prafullanagar, Habra, North 24 Parganas, West Bengal – 743268 - **Phone:** 03216-313906 | **WhatsApp:** +91 7047558229 - **Email:** privacy@riddhess.com / support@riddhess.com