Privacy Policy

1. Who we are

ShriVasul (ஷ்ரீவசூல்) is a collection management application operated by FUEiNT Technologies, based in Coimbatore, Tamil Nadu, India (“we”, “us”, “our”). We are the data fiduciary responsible for personal data processed through the ShriVasul mobile app and web dashboard (together, the “Service”). This policy explains what we collect, why, how we protect it, and the rights you have.

2. Scope

This policy applies to collection agents, collection heads, administrators, and the businesses (“operators”) that use the Service. Operators are independent businesses responsible for their own customer relationships and for complying with all laws applicable to their activities. Where an operator loads its own customers’ data into the Service, the operator is the data fiduciary for that data and we act as a data processor on its behalf.

3. Information we collect

We collect only what the Service needs to function:

• Account & identity data — name, mobile number, role (agent / head / admin), organisation, and the one-time passwords (OTP) used to sign in.
• Location data — when an agent is on an active route, the app uses device GPS to map the route, provide turn-by-turn navigation, and trigger the geofenced collection prompt when the agent reaches a customer. Location is used for operational features and is not sold or used for advertising.
• Collection & customer records — customer names and contact details, loan and repayment records, amounts collected, payment method (cash / UPI), and notes. This data is entered by operators and their agents.
• Device & technical data — device model, operating system, app version, and diagnostic logs used to keep the Service secure and reliable, including data queued on-device while offline.
• Support communications — messages you send us by email or through support channels.

4. How we use information

• To provide core features: routes, navigation, geofenced collection, reconciliation, and reporting.
• To authenticate users and keep accounts secure.
• To sync offline-captured data reliably and in order once connectivity returns.
• To provide support, fix bugs, and improve performance and reliability.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To comply with applicable legal obligations.

5. Legal basis

We process personal data under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, on the basis of the consent you provide, the performance of the agreement under which we provide the Service, our legitimate operational interests in running and securing the Service, and our legal obligations. Where we rely on consent (for example, location access), you can withdraw it as described below.

6. How we share information

We do not sell personal data. We share it only as needed to run the Service:

• Within your organisation — collection heads and admins can see the data belonging to their own organisation, according to their role.
• Infrastructure providers — we host the Service on Amazon Web Services in the Mumbai (ap-south-1) region and use AWS managed services (including authentication and database services) as data processors under appropriate contractual safeguards.
• Legal & safety — where required by law, or to protect the rights, safety, and security of users and the Service.

7. Data security

Data is encrypted in transit (TLS) and at rest. Each organisation’s data is isolated using database-level row security, so one operator cannot access another’s data. Access is restricted by role, and sign-in is protected by OTP and single-session device binding for agents. No system is perfectly secure, but we work to protect your data using industry-standard measures and to notify affected users and authorities of significant breaches as required by law.

8. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service, then for any additional period required to meet legal, accounting, or reporting obligations. Operators control the retention of the customer and collection records they enter. When data is no longer needed, we delete or anonymise it.

9. Your rights

Subject to applicable law, you have the right to:

• access and obtain a summary of the personal data we hold about you;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your personal data where it is no longer required;
• withdraw consent (such as location access) at any time;
• nominate another person to exercise your rights in the event of death or incapacity; and
• raise a grievance with us and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, email us at privacy@shrivasul.com. If your data was entered by an operator, we may direct your request to that operator as the relevant data fiduciary.

10. Location permissions

Location access is requested only for agents and only to support routing, navigation, and geofenced collection while a route is active. You can disable location access at any time through your device settings; some route features will not work without it. We do not track location when no route is active.

11. Children

The Service is intended for business use by adults and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Cookies on this website

This marketing website uses only what is necessary to serve the pages. It does not use advertising or third-party tracking cookies. The ShriVasul app and dashboard use only the storage required to keep you signed in and to operate offline.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date below and, where appropriate, notify you in the Service. Continued use after an update means you accept the revised policy.

14. Contact us

For any privacy question or to reach our grievance officer, email privacy@shrivasul.com or write to FUEiNT Technologies, Coimbatore, Tamil Nadu, India. We aim to respond to privacy requests within the timelines required by applicable law.