Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information generated when you use our services, and information from third-party partners.

• Account Information: Name, email address, mobile number, postal address, and identity documents (Aadhaar, PAN) required for KYC compliance under Indian telecom regulations.
• Network & Usage Data: IP address, MAC address, session start/stop times, data usage (upload/download), and connection type (PPPoE, Hotspot).
• Payment Information: Transaction IDs, payment gateway references, and billing history. We do not store full card or bank account numbers.
• Support Data: Support tickets, complaint records, and correspondence when you contact our team.
• Device Information: CPE (customer-premises equipment) details, TR-069 management data, and firmware versions for devices on our network.
• Partner Information: Business name, GSTIN, licence numbers, wallet balance, and commission records for resellers and LCOs.

2. How We Use Your Information

We use the collected information for the following purposes:

• Provisioning and managing your internet connection via FreeRADIUS and NAS servers.
• Processing payments, generating invoices, and maintaining billing records.
• Verifying your identity and complying with TRAI, DOT, and other regulatory requirements.
• Providing customer support and resolving technical issues.
• Sending service notifications, renewal reminders, and important account updates.
• Detecting and preventing network abuse, fraud, and unauthorised access.
• Improving our services, portal features, and network infrastructure.
• Managing reseller and LCO partner relationships, commissions, and wallet transactions.

3. Sharing of Information

We do not sell your personal data. We share information only in the following circumstances:

• Service Partners: With authorised resellers or LCOs who manage your subscription on our platform, limited to data necessary to provide the service.
• Payment Gateways: With payment processors (Razorpay, PayTM, PhonePe, CCAvenue) to facilitate transactions. Their own privacy policies apply.
• Regulatory Authorities: With TRAI, DOT, law enforcement, or courts when required by law, court order, or to protect the rights and safety of our users and network.
• Infrastructure Providers: With cloud, hosting, or SMS service providers who process data solely on our behalf under strict confidentiality agreements.

4. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are stored using bcrypt hashing — we never store plain-text passwords.
• All sensitive portal communications are encrypted in transit using TLS/HTTPS.
• RADIUS authentication credentials are protected and segregated from application data.
• Access to customer data within our portal is role-based (Admin, Reseller, LCO, Customer).
• Regular security audits and log monitoring for suspicious activity.

While we take reasonable precautions, no system is completely secure. We encourage you to use strong, unique passwords and to contact us immediately if you suspect any unauthorised access to your account.

5. Data Retention

We retain your data for as long as your account is active or as required to provide services. Specifically:

• Network session logs (RADIUS): Retained for up to 1 year as required by telecom regulations.
• Billing and payment records: Retained for 7 years for tax and accounting compliance.
• Support tickets: Retained for 3 years after closure.
• Inactive accounts: Data may be anonymised or deleted after 2 years of inactivity, subject to regulatory requirements.

6. Cookies & Tracking

Our website and portal use session cookies to maintain your login state. We do not use third-party advertising cookies or behavioural tracking technologies. Cookies are cleared when you log out or close your browser session.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete information via the customer portal or by contacting support.
• Deletion: Request deletion of your data, subject to regulatory retention obligations.
• Portability: Request your data in a structured, machine-readable format where technically feasible.
• Objection: Object to processing of your data for purposes other than service delivery.

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

8. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify registered users of significant changes via email or a prominent notice on our portal. Continued use of our services after any changes constitutes your acceptance of the revised policy.