Privacy Policy & Data Protection Protocols
Last updated: March 1, 2026 • Compliant with Indian IT Act, DPDP Act & Global Standards
1. Information We Collect
We collect personal information necessary to establish identity, verify institutional relationships, and process payments securely:
- Account credentials: Name, email address, telephone number, and hashed authentication records.
- Financial telemetry: Razorpay payment IDs, order numbers, transaction sums, and currency parameters. We never store raw credit card numbers or CVV codes.
- Geospatial coordinates: Regional state, city, and metropolitan cluster data for aggregated analytics.
2. How Information is Used
Your data powers transaction execution, automated invoice generation, customer support resolution, and role-based access verification. Aggregated data is used exclusively to optimize regional server routing and liquidity distribution.
3. Cryptographic Storage & Security
All data in transit is encrypted using TLS 1.3 with forward secrecy. Data at rest in Google Cloud / Firebase Firestore is protected with AES-256 encryption. Access controls are strictly enforced via server-side security rules and audit logs.
4. Third-Party Service Providers
We collaborate with verified infrastructure partners including Google Cloud Platform (database & storage) and Razorpay Software Private Limited (payment settlement). These partners operate under strict contractual data handling compliance standards.
5. Your Data Rights & Deletion Requests
You retain the right to inspect, export, or request the deletion of your account records. To initiate a data export or deletion request, contact our Data Protection Officer at privacy@corone.com.