1. Who We Are & Scope of this Policy
Gaddi Paper Wale (“we”, “our”, or “us”) operates the Gaddi Paper Wale mobile application (Android package: com.gaddipaperwale.app) and the associated web portal accessible at https://gaddipaperwale.in.
We provide digital vehicle document tracking, proactive expiration reminders, RTO service journey management, and client records management for transport cyber cafés, transport businesses, commercial fleet operators (goods carriers, trucks, buses, tempos, pickups), and private vehicle owners.
2. Information We Collect
To track document expiries, notify you prior to lapses, and facilitate recurring RTO paperwork (Fitness Certificates, Road Tax, Motor Insurance, PUCC, State/National Permits), we collect the following categories of data:
A. Account & Identity Information
- Personal Identifiers: Full name, verified mobile phone number (OTP-verified), email address, and firm/transport company name (if applicable).
- Authentication Credentials: Securely salted and hashed PINs or passwords. For users signing in via Google Sign-In, we receive your verified Google account email and basic public profile token via Google Identity Services.
- Role Designation: User role assignment (Customer or Admin) to grant proper access control.
B. Vehicle & Fleet Information
- Vehicle Identifiers: Vehicle registration number (e.g., PB10HD8769), chassis number, engine number, vehicle class (Goods Carrier, Heavy Goods Vehicle, Pickup Van, Car, Tempo, Bus, Tractor, Trailer, etc.), fuel type (Diesel, Petrol, CNG, Electric), and registration date.
- Owner Name as per RC: Registered owner name to verify document alignment.
- Operational Status: Active, Sold, Inactive, or Blacklisted status.
C. Regulatory Documents & Expiry Records
- Recurring Expiry Documents: Issue dates, validity dates, and expiry dates for Fitness Certificate, Road Tax, Commercial/Private Motor Insurance, PUCC (Pollution Under Control Certificate), and Permit / National Permit (NP Permit).
- Static Documents & Uploads: Digital photographs or PDF scans of Registration Certificates (RC), Fitness certificates, Road Tax payment receipts, Insurance policies, PUCC certificates, Seller/Purchase Affidavits, and No Objection Certificates (NOC).
- KYC Documents (Shop Admin Managed): Supporting proof documents including Aadhaar Card, PAN Card, and GST Registration Certificates uploaded for transport agency records.
D. Service Transactions & Payment Records
- Service History: Records of services executed (Fitness Inspection slot bookings, Tax payments, Insurance renewals, Virtual RC checks, Challan status).
- Payment Information: Service fee amounts, government fees, society fees, payment mode (Cash, UPI, Cheque, Online, NEFT), receipt application numbers, and e-fee receipt PDFs. (Note: We do not store credit/debit card numbers or bank account PINs.)
E. Communication & Follow-up Logs
- Follow-up Call Notes: Admin-logged notes regarding document renewal discussions (“Called customer on date, requested callback next week”), outcome categories, and scheduled follow-up dates.
- Notification Delivery Logs: Timestamps of push notifications and WhatsApp reminders dispatched.
F. Technical & Device Data
- Device Tokens: Firebase Cloud Messaging (FCM) registration tokens used exclusively to route push notification alerts to your specific device.
- System Diagnostics: IP address, operating system version, network status, app version, and crash diagnostic logs to ensure platform stability.
3. Android Device Permissions & Why We Need Them
In accordance with Google Play Developer Policies, we declare all permissions requested by the Gaddi Paper Wale Android application, their exact purpose, and scope:
| Permission | Technical Identifier | Purpose & Exact Usage |
|---|---|---|
| Camera Access | android.permission.CAMERA |
Admin Document Scanning: Used exclusively when authorized shop administrators choose to capture live photos of physical vehicle paperwork (RC, Fitness Certificate, Road Tax receipts, Insurance slips) for upload into the customer's cloud vault.
Camera is never accessed in the background or without the user explicitly initiating an image capture. |
| Internet Access | android.permission.INTERNET | Data Synchronization: Required to securely connect the app to our encrypted cloud backend API, sync vehicle records, download document PDFs, retrieve real-time expiry statuses, and perform authenticated login. |
| Network State | android.permission.ACCESS_NETWORK_STATE | Offline Tolerance: Enables the app to check active internet connectivity, gracefully switch to locally cached fleet data (via local Room database), and notify users if offline. |
| Phone Dialing | Intent.ACTION_DIAL |
One-Tap “Call Shop”: Triggers the phone's native phone dialer with the shop's support phone number pre-filled when the customer taps the call button.
Does not automatically make calls without user confirmation and does not require dangerous CALL_PHONE permissions. |
4. How We Use Your Information
We process your personal and vehicle data strictly for the following operational and legitimate business purposes:
- Proactive Expiration Tracking: Running background schedulers to calculate remaining validity days for Fitness, Road Tax, Insurance, PUCC, and Permits.
- Sending Timely Reminders: Alerting vehicle owners and fleet managers at 30 days, 15 days, 7 days, 1 day, and on the day of expiry via Push Notifications and WhatsApp messages so vehicles never operate unlawfully.
- Secure Document Cloud Vault (“Drive”): Providing instant, 24/7 access to digital copies of vehicle papers and receipts on mobile devices.
- RTO Service Workflow Tracking: Providing live stage-by-stage status updates for inspection appointments, tax payments, and paperwork renewals.
- Admin Operations: Enabling authorized cyber-café operators to manage clients, log customer communication notes, and record fee receipts.
- Security & Fraud Prevention: Authenticating logins, preventing unauthorized access, and maintaining audit logs.
5. Automated Expiry Reminders (Push & WhatsApp)
Timely reminders are the core feature of Gaddi Paper Wale. Because commercial vehicle operators and drivers may not always open mobile apps every day, we provide reminders through two primary channels:
- Mobile Push Notifications: Delivered via Firebase Cloud Messaging (FCM) directly to your Android device with deep-links to the expiring vehicle record.
- WhatsApp Business Notifications: Sent via official Meta WhatsApp Business Solution Provider (MSG91) to your verified primary mobile number. Notifications follow pre-approved Meta message templates detailing vehicle registration number, document type, and days remaining.
Opt-Out: You may toggle push notification preferences in your Android device system settings at any time. For WhatsApp messages, you can reply “STOP” or request your shop administrator to adjust your communication preferences.
6. Third-Party Service Providers & SDKs
We partner with vetted, industry-standard third-party infrastructure providers to support platform functionality:
- Google Firebase (Google LLC): Used for Firebase Authentication (phone OTP & Google Sign-In) and Firebase Cloud Messaging (FCM) for push notifications. Firebase Privacy Policy.
- MSG91 / Meta Platforms, Inc.: Used for transmitting automated WhatsApp transactional reminders. WhatsApp Privacy Policy.
- Cloud Database & Storage Providers: Encrypted PostgreSQL databases and cloud object storage with time-limited signed access URLs.
- Vercel, Inc.: Web hosting provider for public web services and admin panel interfaces.
Each provider is bound by contractual terms to process data only as instructed by us and under strict confidentiality standards.
7. Data Storage, Security & Isolation
We implement multi-layered administrative, technical, and physical security measures to safeguard vehicle documents and customer records:
- Encryption in Transit: All communications between the mobile application, web panel, and backend servers use Transport Layer Security (TLS 1.3 / HTTPS) with 256-bit encryption.
- Encryption at Rest: Database records and uploaded document files are encrypted at rest using industry-standard AES-256 encryption.
- Role-Based Access Control (RBAC): Strict tenant and role isolation ensures that a customer can strictly access only their own vehicles, documents, and receipts. Shop administrators have access solely to the customer accounts they manage.
- Document Protection: Uploaded PDF and image files (e.g. Aadhaar, PAN, RC copies) are stored in private cloud buckets and accessed strictly via authenticated, short-lived signed URLs.
8. Data Retention & User Account Deletion Policy
We retain your information for as long as your account remains active or as required to fulfill vehicle tracking services and comply with statutory RTO record-keeping obligations.
How to Request Account & Data Deletion
In full compliance with Google Play Store User Data Policies and Indian Digital Personal Data Protection laws, any user has the right to request permanent deletion of their account, personal details, and fleet records at any time.
Option 1 (In-App): Navigate to Settings > Profile > Request Account Deletion.
Option 2 (Direct Email): Send an email from your registered email address or quoting your registered mobile phone number to support@gaddipaperwale.in with the subject line “Account Deletion Request - Gaddi Paper Wale”.
Processing Timeframe: Upon identity verification, your account, personal data, vehicle entries, and uploaded files will be permanently deleted or irreversibly anonymized from our live servers within 30 calendar days, except where retention is legally mandated by Indian transport or tax authorities.
9. User Rights under Indian DPDP Act, 2023
Under the Digital Personal Data Protection Act (DPDPA), 2023 and the Information Technology Act, 2000 of India, you possess the following rights:
- Right to Access: Review summary information of personal data being processed.
- Right to Correction: Request correction of inaccurate, outdated, or incomplete vehicle or profile information.
- Right to Erasure: Request the deletion of personal data no longer necessary for the purpose it was gathered.
- Right of Grievance Redressal: Avail of expeditious redressal of any privacy complaints.
10. Children's Privacy
Our services and application are strictly designed for commercial transport businesses, cyber-café operators, and licensed vehicle owners aged 18 and older. We do not knowingly solicit or collect information from children under the age of 13. If we discover that a minor under 13 has submitted personal data, we will immediately delete that information.
11. Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect modifications in our features, statutory guidelines, or Google Play policies. Any updates will be published at this canonical URL (https://gaddipaperwale.in/privacy-policy) with an updated “Effective Date”. Continued use of the mobile app or web platform following any update indicates acceptance of the revised terms.
12. Grievance Officer & Contact Information
If you have questions, feedback, or grievances regarding this Privacy Policy or your data handling in Gaddi Paper Wale, please reach out to our designated Privacy & Grievance Officer: