1. Scope and Data Fiduciary
This Privacy Policy applies to Classia Connect’s app, website and related services. The final published version should identify the exact legal entity operating the Platform as the data fiduciary / controller and provide the designated contact details.
2. Personal Data We May Collect
Account and identity data
Name, mobile number, email address, profile photo, age or date of birth, address, language, account identifiers and verification information.
Chats, posts and support requests
Messages, attachments, community posts, complaints, requirements, offers, responses, reports and information submitted to customer or grievance support.
S.I.R.-related information
Information the user chooses to enter or upload for profile screening, which may include electoral-roll details, identification information, family or relationship details, addresses and supporting records. Only information necessary for the requested service should be collected.
Business and lead data
Business name, category, location, service area, licences or credentials, lead preferences, interactions, quotations and outcome feedback.
Device and usage data
IP address, device model, operating system, app version, language, logs, crash data, security signals, timestamps and interactions with Platform features.
Location and emergency data
Approximate or precise location only when enabled and needed for a location-based or emergency feature, together with selected emergency contacts and alert status.
Payments and wallet data
Transaction reference, wallet balance, purchase history, refunds and billing details. Full card or bank credentials should normally be handled by the authorised payment partner rather than stored by Classia Connect.
3. How We Use Personal Data
- Create, verify, secure and maintain user accounts.
- Deliver chats, posts, community support, sourcing and business lead features.
- Provide S.I.R. profile assistance and, with consent, facilitate legal referrals.
- Process wallet transactions, payments, refunds, invoices and fraud checks.
- Enable location sharing and emergency alerts requested by the user.
- Moderate content, investigate abuse, prevent fraud and protect users.
- Provide support, resolve grievances and communicate important service updates.
- Analyse performance and improve product reliability, accessibility and relevance.
- Comply with applicable law, lawful orders and legitimate regulatory requirements.
4. Grounds and Notice for Processing
We process personal data for specified lawful purposes based on consent where required, performance of a requested service, legitimate uses recognised by applicable law, safety needs and legal obligations. Consent requests should be clear, specific and capable of withdrawal. Withdrawal does not invalidate processing already lawfully completed and may limit features that require the data.
5. When We May Share Data
- With other users: information you intentionally publish, send or share through the Platform.
- With service providers: cloud hosting, notifications, analytics, maps, identity checks, support and cybersecurity vendors bound by appropriate obligations.
- With payment partners: information required to process payments, wallet transactions, refunds and fraud checks.
- With professionals: lawyers or other service providers selected or requested by you, after appropriate notice and consent.
- For safety and law: when reasonably necessary to protect life, investigate fraud or abuse, comply with lawful process or defend legal rights.
- Business transfer: in a merger, restructuring, financing or transfer, subject to lawful safeguards and notice where required.
We do not sell personal data in the ordinary meaning of selling a database for unrelated advertising. Commercial lead access is limited to the information and purpose disclosed to the person submitting the enquiry.
6. S.I.R. Data and Legal Referrals
S.I.R.-related records may be sensitive in context. We will seek to apply purpose limitation, access controls and minimisation. Information should be used only for profile assistance, requested support, fraud prevention and legal compliance.
Before sharing with a lawyer, the user should be told what data will be shared, with whom and for what purpose. The lawyer may become independently responsible for information handled under the professional engagement.
7. Location and Emergency Features
Precise location is collected only when the user grants device permission and activates a relevant feature. Depending on settings, location may be shared with selected contacts, responding community members or service providers. Location accuracy and delivery depend on the device, network and third-party systems.
Users can revoke location permission in device settings, although this may disable emergency or nearby features. Emergency location records should be retained only as long as needed for safety, investigation or legal requirements.
8. Digital Wallet, Leads and Contributions
Wallet and lead activity may be used to display balance, deduct agreed charges, prevent duplicate billing, resolve disputes and maintain accounting records. A business receiving a lead may access only the information reasonably required to respond to that enquiry and must not use it for unrelated spam or resale.
For community contributions, contributors and recipients may see limited transaction or status information. Public disclosure of donor identity should be optional unless required by law or clearly disclosed.
9. Data Retention and Deletion
We retain data only for as long as necessary for the stated purpose, account operation, safety, dispute resolution, financial records and legal obligations. Different categories may have different retention periods.
Users may request account deletion through the in-app Help Centre. Certain records may be retained where legally required, needed to prevent fraud, resolve disputes or protect rights. Data will then be securely deleted or irreversibly anonymised when no longer required.
10. Security
We use reasonable administrative, technical and organisational safeguards, which may include encryption in transit, access controls, logging, backups, secure development practices and vendor reviews. No system is completely secure, and users should protect devices, passwords and one-time passwords.
Where a personal-data breach requires notification under applicable law, we will follow the legally prescribed process.
11. Your Choices and Rights
Subject to applicable law, users may request access to a summary of personal data and processing, correction, completion, updating, erasure, withdrawal of consent and grievance redressal. Users may also nominate another person to exercise rights in circumstances recognised by law.
Requests may be submitted through the in-app Help Centre. We may verify identity before acting and may refuse or limit a request where law permits, explaining the basis where appropriate.
12. Children’s Privacy
Where a user is a child under applicable Indian law, verified parental or guardian consent and additional protections may be required. The Platform should not knowingly undertake prohibited tracking, behavioural monitoring or targeted advertising directed at children. Age-gating and feature restrictions should be implemented according to the final product design and applicable exemptions.
13. Data Storage and Cross-Border Transfers
Data may be processed through service providers in India or other permitted locations. Cross-border processing will be undertaken subject to applicable Indian restrictions, contracts and safeguards. The final policy should identify material hosting regions where appropriate.
14. Policy Updates, Grievances and Contact
We may revise this policy when services, technology or law change. Material updates will be communicated through the app or website and will show a revised effective date.
Contact address: No. 58, 2nd Cross, Chowdiah Block, R.T. Nagar, Bengaluru – 560032, Karnataka, India.
Privacy / grievance requests: In-app Help Centre. Add the legal entity name, Data Protection / Grievance Officer, dedicated email, telephone (if used) and response timeline before launch.