Emergency Cyber Helpline: Dial 1930 immediately to report active financial scams.
DRIVESYNC Cyber Assistant
DriveSync Legal & Service Agreement

Terms & Conditions of Service

Please read these Terms and Conditions carefully. By accessing or utilizing the DriveSync Cyber Assistant (DCA) platform, you agree to be legally bound by these terms in accordance with the Information Technology Act, 2000, the Digital Personal Data Protection (DPDP) Act, 2023, and applicable Indian cyber laws.

Last Updated: September 2026•Version: 3.1.0 (DPDP Compliant)

Statutory Regulatory Classification Notice

DriveSync Cyber Assistant (DCA) is a private, defensive cybersecurity threat intelligence platform operated by DriveSync Infotech Private Limited. DCA is NOT a law enforcement agency, police station, or government regulator. Logging an incident on this platform does NOT constitute a statutory First Information Report (FIR) or official bank chargeback. If active financial fraud has occurred in the last 2 hours, dial the National Cyber Helpline at 1930 immediately.

1. Scope of Defensive Services & Disclaimers

The tools provided by DCA (including the UPI ID Risk Scanner, Phishing Link Analyzer, and Fraud Incident Logging wizard) are intended solely as defensive risk mitigation tools.

While our proprietary risk scoring aggregates flagged cyber threat markers to warn users against malicious UPI VPAs and extortion schemes, DriveSync does not guarantee recovery of lost capital or represent insurance indemnity. Users must always verify transaction counterparts prior to sending money.

2. User Accounts, Verification & Authentication

To submit dispute claims and access the citizen dashboard, users may authenticate via Google OAuth or create an Email/Password account.

  • Email Verification: Email registrations require mandatory email confirmation via an encrypted verification link to verify genuine ownership.
  • Account Confidentiality: You are responsible for maintaining the confidentiality of your account credentials and preventing unauthorized access.
  • Prohibition of Fake Registrations: Submitting fake email addresses or impersonating third parties is strictly prohibited.

3. DCA Points Wallet & Cyber Awareness Rewards

To encourage comprehensive incident reporting and cyber safety awareness, DCA awards gamified DCA Points for documented evidence (e.g. UTR numbers, suspect identifiers, chat evidence).

Important Rules Governing DCA Points:

  • DCA Points are non-monetary, educational engagement credits with zero fiat monetary value.
  • Points cannot be converted into cash, traded on secondary markets, or transferred to third parties.
  • DriveSync reserves the right to adjust reward rates, tiers, and milestones at its sole discretion to prevent abuse.

4. Accuracy of Telemetry, Antivirus Scanning & Evidence Integrity

When filing a dispute, you affirm under legal undertaking that all submitted bank details, UTR numbers, suspect phone numbers, and evidence attachments reflect a genuine incident.

  • Antivirus & Malware Scanning: All uploaded files undergo automated ClamAV daemon and heuristic byte-level inspection. Uploading malicious payloads, executables (.exe, .dll, .elf), or infected files is strictly prohibited and will trigger immediate IP bans.
  • Falsification Penalties: Submitting defamatory or intentionally fabricated reports against innocent third parties constitutes a criminal offense under Section 66D of the IT Act, 2000.

5. Account Deletion & Statutory Evidence Preservation

Pursuant to the DPDP Act 2023 and GDPR Article 17, users have the right to request permanent deletion of their user profile and authentication credentials through the stepwise account deletion tool in their profile dashboard.

Statutory Fraud Evidence Preservation:As required by statutory cyber crime evidence preservation laws and Reserve Bank of India (RBI) circulars on cyber fraud investigation, previously submitted dispute reference receipts, UTR transaction records, and suspect indicators remain securely archived in an anonymized state for police and bank nodal officer recovery proceedings.

6. Rate Limiting, API Security & Automated Abuse

To safeguard infrastructure, API endpoints are rate-limited:

  • Fraud Report Submissions: 3 requests per hour per IP.
  • File Antivirus Security Scans: 30 requests per minute per IP.
  • Admin Control Desk: Anti-brute force lockouts enforced on repeated failed passcode attempts.

7. Governing Law & Dispute Jurisdiction

These terms are governed by the laws of India. Any legal dispute or controversy arising out of this agreement shall be subject to the exclusive jurisdiction of the competent courts in Ahmedabad, Gujarat, India.