Privacy Policy
Last updated: TODO (Aftab): set on counsel review
1. Introduction
TODO (Aftab): who the data controller is (the ELV-Setu operating entity) and the scope of this policy (account holders, their end users, and technicians using the platform).
2. Information we collect
TODO (Aftab): account/contact details, user profile data, asset and complaint records entered by customers, uploaded photos, and technician GPS coordinates captured on service visits.
3. How we use information
TODO (Aftab): to provide the AMC operations service, send AMC/SLA/PM notifications by email, and for account support and billing.
4. Data storage and security
TODO (Aftab): data is stored in Supabase (Postgres) with row-level security enforcing per-account isolation; describe hosting region and backup practices once finalised.
5. Data sharing and third parties
TODO (Aftab): list processors used (email delivery, hosting, payments once enabled) and confirm none of them are given more data than necessary.
6. Data retention
TODO (Aftab): retention periods for audit logs, notifications, and account data after cancellation.
7. Your rights under the DPDP Act, 2023
TODO (Aftab): rights to access, correct, and request erasure of personal data under India's Digital Personal Data Protection Act, and how to exercise them.
8. Location (GPS) data
TODO (Aftab): technician GPS is captured only with explicit consent at the time of a site visit (see users.gps_consent_at) and used solely for visit-proof on service history entries.
9. Cookies and tracking
TODO (Aftab): session cookies used for authentication only; no third-party advertising trackers.
10. Children's privacy
TODO (Aftab): the platform is a B2B business tool not directed at children; standard exclusion language.
11. Changes to this policy
TODO (Aftab): how customers are notified of material changes and the notice period before they take effect.
12. Contact
TODO (Aftab): replace with the real support/privacy contact once SUPPORT_EMAIL is finalised (see lib/constants.ts).