DriveSync Privacy & Data Governance

Privacy Policy & DPDP Governance

This Privacy Policy explains how DriveSync Infotech Private Limited collects, secures, encrypts, and processes personal data and cyber fraud telemetry in full compliance with India's Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and international privacy standards.

Last Updated: September 2026•Version: 3.1.0 (DPDP & GDPR Compliant)

1. Categories of Personal & Telemetry Data We Collect

We collect only the minimum necessary data to authenticate accounts, log dispute claims, and train our defensive cyber risk engines:

A. User Account Credentials

Full name, email address, contact phone number, and Firebase Auth unique identifier (UID) for dispute veracity and nodal officer linkage.

B. Dispute Transaction Telemetry

Disputed transaction amounts, debit banks, incident timestamps, and Unique Transaction Reference (UTR) numbers.

C. Suspect & Entity Identifiers

Reported extortion phone numbers, suspect UPI addresses (VPAs), fraudulent bank accounts, and phishing URLs.

D. Evidence & Security Telemetry

Uploaded screenshots / PDF documents (scanned for malware via ClamAV), client IP addresses for rate limiting, and anonymous funnel performance metrics.

2. Zero-Knowledge Financial Safeguards & Encryption Standards

Zero-Knowledge Financial Guarantee:

DriveSync enforces a strict zero-knowledge architecture. We NEVER collect, store, or request banking passwords, debit card PINs, CVV codes, UPI PINs, or One-Time Passwords (OTPs).

Data Encryption: All database tables in PostgreSQL are encrypted at rest using AES-256 and protected in transit via TLS 1.3 tunnels.
Row-Level Security (RLS): User reports are strictly isolated so that users can only query dispute records belonging to their authenticated UID.
Antivirus Scanning Engine: Uploaded evidence files are parsed for heuristic byte headers and scanned with ClamAV daemons to neutralize malware, web shells, and script injection vectors.

3. Certified Cloud Sub-Processors

DriveSync works with industry-certified cloud sub-processors to deliver enterprise-grade availability and security:

Google Firebase Authentication: Manages real-time authentication tokens, OAuth verification, and account password hashing (Bcrypt/Scrypt).
Supabase Database & Storage: Manages encrypted dispute tables and evidence attachments with enterprise compliance.

4. Cookie Consent & Browser Storage

We utilize essential session tokens and local storage preferences to maintain secure authenticated logins and high-contrast accessibility options. We do not sell user data to advertising networks. For granular information, please consult our dedicated Cookie Policy.

5. Your Rights as a Data Principal (DPDP Act 2023 & GDPR)

Under India's Digital Personal Data Protection Act, you are entitled to the following rights:

Right to Access & Summary:You can review all filed dispute receipts, wallet transactions, and submitted reports in your profile at any time.

Right to Correction & Grievance:You may request updates to erroneous data or contact our Data Grievance Officer directly.

Right to Account Erasure (Right to be Forgotten):You can permanently delete your user login credentials via the stepwise deletion tool in your profile. As mandated by Indian law and banking nodal dispute guidelines, statutory dispute logs and UTR records remain preserved for ongoing law enforcement and recovery proceedings.

6. Data Protection & Grievance Redressal Officer

In accordance with Rule 3(11) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act 2023, the details of our Grievance Officer are:

Grievance Redressal Officer: DriveSync Compliance Cell

DriveSync Infotech Private Limited

Corporate Office: i-HUB, Ahmedabad, Gujarat, India

Email: support@drivesyncinfotech.com

Emergency Cyber Fraud Helpline: Dial 1930

← Return to Main Platform