PRIVACY POLICY

1. Overview & Statutory Foundation

Bujisa Technology Private Limited is dedicated to protecting user data and digital privacy. This Privacy Policy clarifies our structural practices regarding the compilation, recording, processing, safety structures, and eventual deletion loops of data collected via the Nityazo platform. Our data protocols are designed in complete conformity with the Information Technology Act, 2000 and the Digital Personal Data Protection (DPDP) Act, 2023.

2. Data Matrix We Collect

We process the minimal data layers necessary to maintain smooth transactional services:

• Identity Vectors: Formal name, active phone numbers, email logs, and structural delivery coordinate text.
• Security Verification: Short-term One-Time Password (OTP) strings and cryptographic sign-in histories.
• Geospatial Data: Live GPS tracking coordinates fetched from user devices to optimise rider routes and allocate regional merchants.
• System Analytics: Device hardware identifiers, internet protocol (IP) nodes, background operating system profiles, and in-app action sequences.
• Financial Metadata: Transaction reference keys and digital clearance tokens generated during payment processing via Razorpay. (We do not store complete raw credit cards or banking passwords.)

3. Core Purpose of Processing

User personal data is utilised strictly for verified operational needs:

• Validating order processing, routing rider fleets, and confirming successful delivery drops.
• Executing automated multi-day dairy subscriptions and managing mid-cycle quantity adjustments.
• Protecting platform servers against malicious bot attacks, financial fraud, and account compromises.
• Transmitting service updates, subscription balance reminders, and promotional marketing broadcasts.

4. DPDP Act 2023 Statutory Rights & Language Access

In compliance with the Digital Personal Data Protection (DPDP) Act, 2023, users hold explicit, enforceable data principal rights:

• The right to request an explicit summary of personal data held within our systems.
• The right to correct inaccurate records or demand absolute systemic deletion of historical profiles.
• The right to withdraw consent for data processing at any point via platform controls or support channels.
• Mandatory Language Options: To fulfil constitutional and statutory language access requirements under the DPDP Act, users may formally request this Privacy Policy, initial consent agreements, or data notices in English as well as any official scheduled regional languages (such as Hindi) by contacting our Grievance Officer.

5. Marketing Communications & Consent Opt-Out

By registering details or finalising purchase funnels on Nityazo, users provide express consent to receive transactional notifications, delivery telemetry, and marketing updates. These broadcasts utilise WhatsApp channels, SMS protocols, automated push banners, and targeted emails. Users retain the unhindered right to withdraw marketing consent at any point by configuring app-level settings or engaging the opt-out prompts embedded within received messages.

6. DPDP Nomination Architecture

Under the DPDP Act framework, data principals have the right to formally nominate an alternate individual to manage or exercise their data privacy privileges in the event of their death or medical/mental incapacity. All formal nomination requests, updates, or revocations must be routed directly to our designated Grievance Officer for identity validation and institutional archiving.

7. Data Retention & Erasure Frameworks

The platform retains personal records only for the duration necessary to satisfy ongoing service operations or meet mandatory regulatory, accounting, tax, and company law retention obligations. Once a user triggers an explicit account deletion request via hr@nityazo.com, all personal data fields are permanently purged or anonymised, except where statutory Indian retention frameworks override the deletion request.

8. Privacy Grievance Architecture & Response Windows

For data corrections, privacy breaches, nomination logs, or language access requests, users may contact our executive office directly: