Privacy Policy

Effective Date: 2026-03-14 | Last Updated: 2026-03-14

1. Company Identification

Visible Chain Technologies Private Limited (DUNS: 767598484) operates the Visible Chain mobile application, a street vendor-customer coordination platform available at VisibleChain.com.

In this Privacy Policy, "we," "us," and "our" refer to Visible Chain Technologies Private Limited, and "you" and "your" refer to users of the Visible Chain application.

2. Information We Collect

a. Phone Number

We collect your mobile phone number for OTP-based authentication. This is the primary method of verifying your identity when you create an account or sign in.

b. Vendor GPS Location

If you register as a vendor, we collect your real-time GPS location to enable live location broadcast to nearby customers. Location data is collected while the vendor actively broadcasts their availability through the app.

c. Customer Locality Information

If you register as a customer, we collect your locality information to match you with nearby vendors and display relevant vendor availability in your area.

d. Profile Information

We collect your name and other profile details you provide when setting up your account.

e. Transaction Data

We collect data related to coin purchases, coin usage, and payment transactions processed through our payment partners. This includes transaction amounts, timestamps, and payment confirmation details.

f. Usage Data

We automatically collect information about how you interact with the app, including:

• App interaction data (screens viewed, features used, actions taken)
• Device information (device model, operating system version, unique device identifiers)
• Log data (access times, error logs, referring pages)

g. Ratings and Reviews

We collect ratings and reviews that you submit about vendors or the service, which may be displayed publicly within the app.

h. Communications

We collect any messages or communications you send to us through in-app support, email, or other channels.

i. Voice Broadcasts

If you register as a vendor, you may use your device's microphone to record short voice broadcast messages for your customers. These audio recordings are uploaded to our servers and delivered to customers who follow your channel. Voice recordings are retained for [PLACEHOLDER: Number of days location data is retained] days and then automatically deleted.

3. How We Use Your Information

• Phone Number: To authenticate your identity via OTP, send transactional notifications, and communicate important account-related information.
• Vendor GPS Location: To enable real-time location broadcast so customers can find nearby vendors, and to facilitate vendor-customer coordination.
• Customer Locality: To display relevant vendors in your area and personalise your experience based on your neighbourhood.
• Profile Information: To identify you within the app and provide a personalised experience.
• Transaction Data: To process coin purchases, manage your coin balance, facilitate payments through our payment partners, and maintain financial records as required by law.
• Usage Data: To improve app performance, diagnose technical issues, understand usage patterns, and enhance user experience.
• Ratings and Reviews: To maintain service quality, provide feedback to vendors, and help customers make informed choices.
• Communications: To respond to your inquiries, resolve support requests, and improve our services.
• Voice Broadcasts: To enable vendors to send audio announcements (such as arrival alerts or product availability) to customers who follow their channel.

4. Third-Party Services

We share your information with the following third-party service providers, strictly for the purposes described below:

a. SMS Gateway

We use [PLACEHOLDER: SMS gateway provider name] to deliver OTP messages to your phone number for authentication purposes. Your phone number is shared with this provider solely for SMS delivery.

b. Payment Processors

We use Razorpay and PayU to process coin purchase payments. When you make a payment, your transaction details are processed by these providers in accordance with their respective privacy policies. We do not store your full payment instrument details (such as card numbers or UPI PINs) on our servers.

c. Analytics

We use [PLACEHOLDER: Analytics SDK name] to collect anonymised usage data to understand how the app is used and to improve our services.

d. Cloud Infrastructure

Our app data is hosted on [PLACEHOLDER: Cloud hosting provider]. All data stored on our cloud infrastructure is subject to the security measures described in this policy.

We require all third-party service providers to process your data only as instructed by us and in compliance with applicable data protection laws.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, with role-based access controls in place.
• Audit Trail: We maintain logs of data access and modifications to detect and respond to unauthorised activity.
• Security Log Retention: Security logs are retained for a minimum of 365 days (1 year) in accordance with the Digital Personal Data Protection Rules, 2025.

While we take reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information.

6. Data Retention and Deletion

Retention Periods

• Location Data: Vendor GPS location data is retained for [PLACEHOLDER: Number of days location data is retained] days after collection.
• Transaction Data: Financial transaction records are retained for 365 days (1 year) to comply with applicable financial record-keeping requirements.
• Security Logs: Retained for 365 days (1 year) as required under the Digital Personal Data Protection Rules, 2025.
• Account Data After Deletion: After you request account deletion, we may retain certain data for up to 90 days to fulfil legal obligations and resolve disputes.

How to Delete Your Account

You can request deletion of your account and associated data through either of the following methods:

• In-App: Navigate to Open the Visible Chain app > Go to Settings > Tap Account > Tap Delete Account > Confirm deletion and follow the on-screen instructions.
• Web: Visit VisibleChain.com/account-deletion/ and submit a deletion request.
• Email: Send a deletion request to delete@VisibleChain.com.

Account deletion requests are processed within 30 days. Upon deletion, your personal data will be erased except where retention is required by law.

7. Your Rights Under the Digital Personal Data Protection Act, 2023

Consent

By using the Visible Chain app, you consent to the collection and processing of your personal data as described in this Privacy Policy. You may withdraw your consent at any time, subject to the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act). Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights:

• Right to Access: You have the right to obtain a summary of your personal data being processed and the processing activities undertaken with that data.
• Right to Correction: You have the right to request correction of inaccurate or misleading personal data, and completion of incomplete personal data.
• Right to Erasure: You have the right to request erasure of your personal data that is no longer necessary for the purpose for which it was collected.
• Right to Withdraw Consent: You have the right to withdraw your consent for data processing at any time. You can do this through in-app settings or by contacting us.
• Right to Grievance Redressal: You have the right to register a grievance with our Grievance Officer regarding any data processing concerns.
• Right to Nominate: You have the right to nominate another individual to exercise your rights in the event of your death or incapacity.

Response Timeline

We will respond to your requests within 90 days of receipt, as stipulated under the DPDP Act, 2023.

Data Protection Board

If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India established under the DPDP Act, 2023.

8. Children's Data

The Visible Chain app is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18 years of age.

We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.

If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete such data promptly. If you believe that a child under 18 has provided us with personal data, please contact us at support@VisibleChain.com.

9. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data processing:

10. Device Permissions

The Visible Chain app requests the following device permissions:

• Location (Coarse): To show vendors nearby places and enable live location broadcast to customers.
• Microphone: To allow vendors to record voice broadcast messages for their customers. The microphone is only accessed when you actively choose to record a voice broadcast. We do not access the microphone in the background.
• Internet: To sync data, send and receive messages, and communicate with our servers.
• Vibration: To provide haptic feedback for notifications and alerts.

11. Data Safety Alignment

This Privacy Policy is aligned with the data safety declarations submitted to the Google Play Store. The information disclosed in our Google Play Data Safety section accurately reflects the data collection, usage, and sharing practices described in this policy.

If you notice any discrepancy between this Privacy Policy and our Google Play Data Safety declarations, please contact us so we can address it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify you through the app or via the contact information you have provided.

We encourage you to review this Privacy Policy periodically. Your continued use of the Visible Chain app after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: support@VisibleChain.com
• Website: VisibleChain.com
• Company: Visible Chain Technologies Private Limited
• Registered Address: [PLACEHOLDER: Add registered office address]