OurFatah — Privacy Policy

1. Information We Collect

We collect personal information directly from you when you register an account, upload verification documents, or commission digital agency projects.

1.1 Certificate Management Data

To facilitate government document processing (such as Income, Domicile, and Caste certificates), we collect:

• Identity Proofs: Aadhaar details, Voter ID, PAN card, or birth certificates.
• Residency Proofs: Address details, electricity/water bills, and ration cards.
• Financial/Income Proofs: Salary slips, Income Tax Returns (ITR), Form 16, or self-declarations.
• Personal Photographs: Passport-size photograph uploads.

1.2 Account & Contact Information

• Full name, primary mobile phone number, email address, and account login credentials.

1.3 Digital Agency Project Data

• Business details, logos, text media, design assets, domain preferences, and credentials provided for web development services.

1.4 Payment & Transaction Metadata

• Razorpay transaction reference numbers, order IDs, payment timestamps, and invoice records. Note: OurFatah does not capture or store debit/credit card numbers or UPI PINs on its servers.

1.5 Technical & System Log Data

• IP address, browser type, device information, operating system details, and session timestamps captured automatically to secure system infrastructure.

2. Lawful Purpose & Usage of Information

Your personal data is collected and processed strictly for legitimate, specified purposes:

• Certificate Processing: Preparing and submitting applications to state revenue portals (e.g., UP e-District) and local Tehsil authorities.
• Service Delivery: Executing web design, custom development, database setups, and digital agency solutions.
• Automated Operational Notifications: Transmitting One-Time Passwords (OTPs), verification codes, application status updates, and invoices via SMS gateways (such as MSG91) and email relays.
• Security & Fraud Prevention: Preventing malicious activity, mitigating SQL injection threats, and auditing dual-portal access logs using PDO database architectures.
• Legal & Regulatory Obligations: Maintaining transactional records as required by tax and administrative laws.

3. Data Sharing & Third-Party Processors

OurFatah **never sells, rents, or commercializes** your personal data. We share data strictly on a need-to-know basis with trusted partners and statutory bodies:

3.1 Government Authorities

Uploaded identity, address, and income proofs are submitted directly to government revenue departments, Tehsildars, and authorized administrative portals for official verification and certificate generation.

3.2 Verified Technology Processors

• Payment Gateways: Transaction details are routed securely via Razorpay under PCI-DSS compliance.
• Communication Partners: Mobile numbers and notification payloads are transmitted via verified SMS partners (such as MSG91) for transactional alert dispatch.
• Hosting Infrastructure: Encrypted data is hosted on secure cloud servers protected by firewall and access-control mechanisms.

3.3 Statutory Disclosures

We may disclose personal data if required by law, court orders, or formal directives from law enforcement agencies.

4. Data Protection & Security Measures

We implement robust technical and organizational security protocols to safeguard your personal information against loss, theft, unauthorized access, or alteration:

• Secure Architecture: Modern PHP/PDO parameterization and prepared statements to defend against database vulnerability risks.
• Encryption in Transit: SSL/TLS encryption for all data transmitted between your browser and our servers.
• Restricted Access Controls: Role-based access policies ensuring only authorized personnel can handle uploaded document files.

5. Data Retention & Erasure

We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected:

• Certificate Documents: Application proofs are stored during the processing phase and archived securely once the certificate is delivered or processed.
• Agency Project Files: Client project assets are retained for the duration of the development contract and transferred or purged upon final settlement.
• Account Logs & Invoices: Transactional metadata and invoice records are preserved in accordance with statutory accounting requirements under Indian law.

6. Your Rights as a Data Principal

Under the DPDP Act, 2023, you hold the following rights regarding your personal data:

• Right to Access: Request a summary of the personal data held about you on OurFatah.
• Right to Correction & Updating: Request the correction of inaccurate or outdated profile information.
• Right to Withdrawal of Consent: Withdraw consent for non-essential processing or promotional communications.
• Grievance Redressal: File complaints or raise queries regarding data handling with our Grievance Officer.

7. Cookies & Tracking Technologies

OurFatah uses essential session cookies to maintain secure user logins, remember dashboard preferences, and support seamless navigation between the Certificate and Digital Agency portals. We do not use intrusive third-party tracking cookies for targeted advertising.

8. External Links

Our website may contain links to government portals (e.g., edistrict.up.gov.in) or third-party payment links. OurFatah is not responsible for the privacy practices or content of external third-party sites once you leave our portal.

9. Grievance Redressal & Contact Details

In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, if you have any questions, concerns, or formal grievances regarding this Privacy Policy, you may contact our designated Grievance Desk: