Privacy Policy.

Data Fiduciary means Clavrit Digital Solutions Private Limited, which determines the purpose and means of processing personal data.

Data Principal means the individual user who registers on the Platform, or any identifiable individual whose personal data (such as clear facial imagery or vehicle ownership indicators) is processed by the Platform.

Personal Data means any data about an individual who is identifiable by or in relation to such data.

A. User Account Information (provided directly)

Mandatory: mobile phone number (used as a unique identifier), full name, and email address. Optional: city, gender, residential or mailing address, date of birth, and profile photograph.

B. Incident & Media Upload Data (per incident)

• Unique user identification token (user_id).
• Original, un-blurred video recordings and still frames captured via the in-app camera.
• A single GPS coordinate captured only at the moment of recording. The Platform does not track location continuously.
• Derived location (city and street address) resolved via geocoding.
• Extracted license-plate strings via AI OCR, vehicle classification types, and your free-text notes.
• System generation timestamps.

C. System Logs & Technical Data

Application request IDs, user_id and job_id; GPS coordinate stamps; and masked phone numbers (only the final four digits are stored, for debugging and integrity validation).

The Platform processes data requiring heightened protection: precise geolocation, un-blurred facial structures within raw video frames, and license-plate identifiers.

The Platform does not generate or store biometric templates, neural facial embeddings, or mathematical facial signatures. Facial imagery is captured strictly for automated detection and tracking, followed by an immediate automated blurring process before any external distribution. License-plate strings are stored purely as raw text; we do not link plates to named individuals, nor execute registry owner lookups.

We process personal data under the lawful basis of explicit, specific, and informed consent provided at account creation and media submission. Purposes are strictly limited to:

• Providing, operating and maintaining the core features of the Platform.
• Running AI computer-vision models (YOLOv11, ByteTrack and associated pipelines) to detect infractions such as helmet non-compliance, triple riding, or improper plates.
• Automatically blurring faces across full-video timelines to mask identities.
• Aggregating results into structured offence evidence files.
• Transmitting completed offence records only to verified channels used by authorized personnel.
• Generating internal administrative and analytical dashboards.

We do not engage in cross-customer learning, nor use uploaded media or personal data to train, fine-tune, or benchmark external models.

All user accounts, databases, object storage and media are hosted on dedicated infrastructure provided by RackMonk. All data centres, backups and disaster-recovery architecture are located strictly within India. No personal data or media leaves the territory of India, nor is it processed in the EU, US, or any foreign jurisdiction.

System activity logs: subject to strict automated 30-day rotation, after which they are permanently purged.

User uploads & media: to maintain integrity for potential legal validation, evidence files and structured records are not subject to automated rolling deletion.

User-initiated deletion: you can initiate a per-report deletion for reports you authored (a soft-delete within the database).

Account closure: on termination, profile indicators are unlinked, though historical data within verified delivery pipelines may persist where required for regulatory verification.

Encryption in transit: all exchanges between app, website, API gateways and processing systems are forced over secure cryptographic channels.

Encryption at rest: underlying storage, including database records and media assets, is encrypted at rest.

Access control: administrative environments sit behind managed reverse-proxy barriers; back-end access is mediated via verified JSON Web Tokens (JWT, HS256) by role.

Right to information: obtain a summary of personal data being processed and the entities it has been shared with.

Right to correction & erasure: correct inaccuracies, complete records, or request erasure of data no longer necessary, subject to statutory retention.

Right to grievance redressal: register grievances about data processing directly with our Grievance Officer.

For any privacy questions, data access requests, or statutory grievances under the DPDP Act, please contact our designated Grievance Officer: