Trust, Legal & Compliance Hub

This Privacy Policy describes how Credyou Digital Services Private Limited ("Credyou", "we", "us", or "our"), a company incorporated under the Companies Act 2013 (CIN: U26515DC2026PTC473636), collects, uses, processes, stores, and safeguards your personal data when you use our websites, portals, software applications, Rakshak M2M telematics platforms, and bespoke IT services.

1. Information We Collect

• Account & Identity Data: Full name, corporate email address, authorized phone number, GSTIN, billing address, and KYC documents necessary for telematics and SIM activation.
• Telematics & Vehicle Data: For users of our Rakshak M2M and GPS tracking software, we process vehicle registration numbers, IMEI numbers, ICCID SIM credentials, real-time GPS coordinates, speed, ignition status, and panic alert telemetry.
• Technical & Usage Logs: IP address, device fingerprints, browser telemetry, access timestamps, and session diagnostics for security auditing.

2. Purpose & Legal Basis of Processing

We process personal and telemetry data strictly for lawful business purposes:

• Provisioning SaaS platforms, AIS140 M2M gateways, and CRM licenses.
• Facilitating mandatory regulatory telematics broadcasts to Government State Emergency Monitoring Systems (such as Vahan / 112 ERSS gateways) pursuant to MoRTH guidelines.
• Billing, tax compliance under Indian GST laws, and fraud prevention.

By accessing or utilizing the websites, software, APIs, CRM platforms, Rakshak M2M dashboards, or enterprise development services provided by Credyou Digital Services Pvt. Ltd., you agree to be bound by these Master Terms & Conditions.

1. Account Registration & Enterprise Governance

Enterprise and reseller clients are responsible for maintaining the confidentiality of their portal credentials. Any action executed through authenticated credentials shall be deemed authorized by the account holder.

2. Commercials, Billing & Taxes

All fee quotations are exclusive of applicable Indian Goods and Services Tax (GST) unless explicitly stated otherwise. Recurring subscription fees for SaaS, M2M SIM services, and server hosting are billed in advance per agreed billing cycles.

3. Governing Law & Arbitration

These Terms are governed by and construed in accordance with the substantive laws of India. Any disputes arising out of or in connection with our services shall be subject to the exclusive jurisdiction of the competent courts in New Delhi, India.

All source code, proprietary algorithms, database schemas, trademarks, brand logos (including Credyou, Rakshak M2M, BizTrack RTO CRM), UI designs, and documentation are the exclusive intellectual property of Credyou Digital Services Pvt. Ltd.

• Whitelabel Software Licenses: Whitelabel software licensees are granted a non-exclusive, non-transferable, revocable license to market the software under their custom brand. Decompilation, reverse engineering, or source code exfiltration is strictly prohibited.
• Custom Software Ownership: For bespoke software engineering contracts, ownership of custom application source code transfers to the client upon full receipt of contracted milestone payments, while foundational core libraries remain licensed.

We strive for complete client satisfaction. Our refund and cancellation criteria are outlined below:

• Custom Development Projects: Initial discovery and project advance deposits are non-refundable once project sprint kickoff and architecture blueprints have commenced. Milestone payments are tied to milestone sign-offs.
• Rakshak M2M & SIM Recharges: Government regulatory SIM activation fees and cellular data recharges are provisioned instantly through telecom operators (Airtel / VI / BSNL) and are non-refundable once active.
• Software Subscriptions: Annual SaaS subscriptions may be cancelled within 7 calendar days of initial sign-up if the software fails to meet documented specifications, subject to a nominal server setup deduction.

Approved refunds are processed back to the original source payment method within 7 to 10 business days.

Users and API integrators must ensure ethical, compliant use of our servers and networks. The following activities are strictly prohibited:

• Unlawful vehicle surveillance without authorized vehicle owner or driver consent.
• Injecting malicious scripts, launching Distributed Denial of Service (DDoS) attacks, or vulnerability fuzzing on production API endpoints.
• Transmitting unsolicited bulk communications (spam) or spoofing telemetry packets to state monitoring servers.

When Credyou processes business records, GPS location pings, and customer data on behalf of enterprise partners, Credyou acts as a Data Processor while the client acts as the Data Fiduciary.

• Confidentiality: All personnel with access to data are bound by strict non-disclosure agreements.
• Sub-processors: We only utilize certified Tier-3 / Tier-4 data centers physically located within the territory of India (MeitY empaneled cloud providers).
• Data Return & Deletion: Upon contract termination, client data is securely purged from production clusters within 45 days following a secure archive handover.

Credyou commits to high-availability infrastructure for our Rakshak M2M gateways, GPS tracking platforms, and enterprise hosted web portals.

Our security architecture implements multi-layered protections across physical, network, and application layers:

• Data Encryption: TLS 1.3 encryption in transit for all web and API traffic; AES-256 encryption at rest for database clusters and backups.
• Access Controls: Role-Based Access Control (RBAC), multi-factor authentication (MFA) enforcement on administrative consoles, and automated audit logging.
• Vulnerability Management: Continuous automated vulnerability scanning, quarterly third-party penetration testing (VAPT), and rigorous static code analysis prior to deployment.

Credyou Digital Services is fully aligned with the Digital Personal Data Protection (DPDP) Act, 2023 enacted by the Parliament of India. We uphold key statutory principles:

• Consent Architecture: Granular, itemized consent notices available in clear language before processing personal information.
• Data Principal Rights: Indian citizens and users have the right to request access, correction, erasure of personal data, and grievance redressal.
• Local Data Sovereignty: All core databases, server snapshots, and vehicle telematics logs reside on physical cloud clusters within the geographical borders of India.

Our Rakshak M2M connectivity solutions adhere strictly to the guidelines issued by the Department of Telecommunications (DoT), Government of India regarding Machine-to-Machine (M2M) communications and eSIM/SIM provisioning:

• Authorized telecommunications partnership with licensed Telecom Service Providers (TSPs) in India.
• Mandatory KYC and device-SIM mapping to prevent unauthorized SIM diversion or misuse in non-telematics hardware.
• Real-time automated OTA profile management and SIM lifecycle monitoring in compliance with security directives.

The Automotive Industry Standard 140 (AIS-140) standardizes intelligent transport systems and emergency panic response across commercial, public transport, and hazardous goods vehicles in India.

• Dual Server Data Push: Our panels support simultaneous high-frequency telemetry push to both the State Government Monitoring Control Room (such as Vahan / 112 ERSS) and enterprise private dashboards.
• Emergency Panic Button Handling: Instant millisecond SOS packet parsing and automated alert dispatching to law enforcement and group fleet managers.
• Health Packet & Diagnostics: Battery health, tamper alerts, GPS blind spot fallback caching, and ignition trigger verification.

Our engineering ecosystem complies with the Reasonable Security Practices defined under Section 43A of the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

We maintain comprehensive business continuity plans (BCP), geo-redundant database replication, and strict data sanitization procedures before hardware decommissioning.

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act 2023, the designated Grievance Officer details are published below:

We provide dedicated tier-1, tier-2, and engineering technical support for all our enterprise software clients and hardware OEM partners:

• Direct Phone Support: Call us at 011-35886035 for instant billing, portal, or operational assistance.
• WhatsApp Priority Desk: Chat instantly with an engineering specialist at +91 84478 59898.
• Email Support: Send requests to info@credyou.in.

We value the contributions of security researchers and ethical hackers who help us safeguard the Credyou ecosystem. If you believe you have found a security vulnerability in our systems, please practice responsible disclosure:

• Please allow our engineering team at least 72 hours to investigate and validate your findings before any public discussion.
• Do not compromise user accounts, access non-public records without authorization, or disrupt production services.

We provide a structured 3-tier escalation matrix to resolve any operational, billing, or privacy concerns swiftly:

• Level 1 (Support Desk): Contact our standard support team via phone (011-35886035) or email (info@credyou.in). Expected turnaround: 24–48 hours.
• Level 2 (Operations Lead): If unresolved after 48 hours, request escalation to the Operations Manager with your Ticket ID.
• Level 3 (Grievance Officer): For unresolved disputes, legal concerns, or data protection matters, reach out to the Statutory Grievance Officer directly.