Privacy Policy

ChallanSathi is an independent Indian service that helps users look up and settle traffic challans on their vehicles. For the purpose of the DPDP Act, ChallanSathi is the Data Fiduciary for the personal data described in this Policy.

We collect the following categories of personal data:

• Identity & contact: mobile number, name (if provided), email (if provided).
• Vehicle information: registration number (RC), challan numbers and related data returned by authorised challan databases.
• Payment information: handled by Razorpay; we receive the payment ID, order ID, amount, and status, but not your card / UPI / netbanking credentials.
• Technical information: IP address, browser type, device type, OS, time-stamps, and pages visited.
• Communication records: any messages you send to our support, grievance or business teams.

We use your personal data to:

• Provide and operate the Services (lookup, payment, settlement).
• Authenticate you via OTP and maintain your session.
• Communicate with you about your cases, including SMS updates.
• Process payments through our payment partner.
• Comply with applicable law and respond to lawful requests.
• Detect, prevent and address fraud, abuse and security incidents.
• Improve and personalise the Platform.

Under the DPDP Act, we process your personal data on the basis of:

• Your consent, which you give when you submit your phone number, OTP, or vehicle registration.
• Performance of the contract between you and ChallanSathi for the Services you have requested.
• Legitimate uses recognised under Section 7 of the DPDP Act, including compliance with judgments, prevention of fraud, and responding to public-interest matters.

We share personal data only with the following categories of recipients:

• Payment processor — Razorpay Software Pvt. Ltd., for processing your payments.
• SMS / OTP provider — Fast2SMS, for delivering transactional SMS to you (only when OTP delivery is enabled).
• Authorised challan-data providers — to look up challan records against your vehicle.
• Government authorities, RTOs and courts — to settle the challan on your behalf.
• Empanelled lawyers — for court challans, the advocate representing you may receive case-relevant data.
• Cloud, analytics and security service providers — operating under contractual confidentiality obligations.
• Any other party — pursuant to a lawful order, government request, or to enforce our Terms.

We do not sell your personal data to advertisers.

We use essential cookies to maintain your session (e.g. the cs_session cookie used to remember your OTP-verified state). We may also use first-party analytics to understand how the Platform is used. You may control cookies via your browser settings; disabling essential cookies will impair functionality.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including the duration of the contract, applicable tax and accounting record retention requirements (typically 8 years under Indian law), and to comply with our legal obligations. After this period, data is anonymised or securely deleted.

We maintain reasonable security practices and procedures as required under Rule 8 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Measures include encryption in transit (HTTPS), secure session tokens, restricted access, and periodic review of our security posture. No system is 100% secure; please use the Platform with appropriate care.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your personal data, subject to legal exceptions.
• Nominate another individual to exercise these rights in the event of your death or incapacity.
• Withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal, and may impair our ability to provide the Services.
• Lodge a grievance — see Section 12 below.

To exercise these rights, write to info@challansathi.in. We will respond within the statutory timelines.

The Platform is not intended for use by children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, please contact us and we will delete it promptly.

We may update this Policy from time to time. The updated version will be posted on this page with the “Effective” date. Material changes will be communicated through the Platform or via SMS where appropriate.

For any privacy questions, write to info@challansathi.in or see our Contact page.