Privacy Policy

📜 1. Introduction & Applicability — Kanoon Ka Palan

Ye Privacy Policy Information Technology Act 2000, IT (Reasonable Security Practices & Procedures) Rules 2011, IT (Intermediary Guidelines) Rules 2021 aur Digital Personal Data Protection Act, 2023 (DPDP Act 2023) ke anuroop hai. Ye policy acsva9ccciim5.com, artistcsva9m.com, admin.acsva9ccciim5.com aur hamare Public/Advocate/Management Panels par lagu hai.

Data Fiduciary: Artist CSV A9 Capital Pvt Ltd, Greater Noida, UP. Data Principal: Aap (Citizen, Advocate, Undertrial, Victim, Witness).

📋 2. Definitions — DPDP Act 2023 Ke Anusar

• Personal Data: Email, phone, naam, advocate enrollment, IP, device ID — jo aapko pehchane
• Sensitive Data: Caste, biometrics, criminal record, health, financial — sirf explicit consent se (DPDP Sec 7)
• Data Fiduciary: Justice Nexus Hub — jo purpose & means decide karta hai
• Data Processor: Cloud, SMS gateway, payment gateway — sirf hamare nirdesh par
• Consent Manager: Aap apni consent kabhi bhi withdraw kar sakte hain — DPDP Sec 6(4)

🔍 3. Information We Collect — Minimal, Necessary, Proportional

Principle of Data Minimisation — DPDP Sec 5(c) — jitna zaroori hai utna hi.

• Account Data (Public/Advocate): Naam, email, mobile, Bar Council No., district, case type
• Case Interaction: 24 Ecosystems me dekhe gaye bullets, 72 functions, 360 legal sections, 13 steps journey logs — Layer 3 full data delivery ke liye
• Communication Data: Contact form, jail written advocacy, receipt system, support tickets
• Technical Data: IP, browser, device fingerprint, login timestamp — chain of custody & BSA Sec 63 hash verification ke liye
• Payment Data (if any): Sirf UPI ref / order ID — card/bank details store nahi karte, PCI-DSS gateway par redirect
• Hum biometric, Aadhaar, caste, religion bina explicit written consent ke collect nahi karte — Art 21, Art 25 compliance

🎯 4. Purpose & Legal Basis — Kyun Use Karte Hain

• Justice delivery: Zero FIR/e-FIR Sec 173 BNSS, case diary, hearing updates, forensic support
• Legal compliance: BNS 2023, BNSS 2023 Sec 173/175/190-204/208-262/374-401, BSA Sec 39-50 & 63, Constitution Art 14/19/21/39A
• Legitimate use: Public/Advocate/Management panel security, fraud prevention, audit — DPDP Sec 7(b)
• The Justice Consultancy model: पक्की रसीद, लिखित कार्य, जेल में भी सूचना — transparent advocacy
• Grievance redressal, victim compensation Sec 357A BNSS, witness protection Sec 387 BNSS
• Consent basis: DPDP Sec 6 — aapki free, specific, informed consent. Consent withdraw = service band, data delete (legal retention ko chhodkar)

🤝 5. Data Sharing — No Sale, No Fear Business

Hum data bechte nahi. Share sirf in cases me:

• Judicial Authorities: Supreme Court, High Court, District/Sub-District Court ke adesh par — BNSS Sec 94/95 warrant
• Law Enforcement: Sec 69A IT Act, Sec 91 BNSS notice, ya DLSA/NALSA legal aid request par
• Service Providers: Cloud (AWS/Indian DC), SMS, email — Data Processing Agreement & DPDP Sec 8 obligations ke saath
• Advocate-Client: Sirf aapki explicit consent se concerned advocate ko — Bar Council of India Rules 2023
• Cross-border transfer nahi karte — data Bharat me hi store (DPDP Sec 16 — Govt notified restriction ka palan)

🔐 6. Data Security — Zero Corruption Architecture

Reasonable Security Practices — IT Rules 2011 Rule 8 & DPDP Sec 8(4)(5):

• AES-256 at rest, TLS 1.3 in transit, HSTS, WAF, DDoS protection
• Hash verification (SHA-256) for digital evidence — BSA 2023 Sec 63 compliant
• Role-based access: Public ≠ Advocate ≠ Management — 24x72x360 matrix control
• Logs at admin.acsva9ccciim5.com with Cache-Control: no-cache, no-store, must-revalidate + Pragma: no-cache
• Data breach notification to Data Protection Board & affected Principals within 72 hrs — DPDP Sec 8(6)
• Annual security audit & Police Accountability (PCA) / HR Cell oversight

⏳ 7. Data Retention — Jitna Kanoon Kahe

• Active case: Case closure + 3 years (Limitation Act & BNS appeal period Sec 374-401)
• Closed inquiry / contact: 180 days ke baad anonymize
• Legal hold: Agar court case / investigation chal raha hai — Sec 91 BNSS notice tak retain
• Logs: 1 year — IT Act Sec 67C & CERT-In guidelines
• Retention ke baad secure deletion / anonymization — DPDP Sec 8(7)

⚖ 8. Your Rights — Art 21 & DPDP Act 2023 Sec 11-14

• Right to Access (Sec 11): Aapka kaunsa data hai — 15 din me copy
• Right to Correction & Erasure (Sec 12): Galat data sudharo, bekar data delete — legal retention ko chhodkar
• Right to Grievance Redressal (Sec 13): DPO ko likho, 72 hrs me jawab, na mile to Data Protection Board of India me appeal
• Right to Nominate (Sec 14): Incapacity/death par nominee decide karega
• Right to Withdraw Consent (Sec 6(4)): Email: privacy@acsva9ccciim5.com — withdraw ke baad service affect ho sakti hai
• Witness Protection Sec 397 BNSS ke tahat anonymity ka adhikar

👶 9. Children & Juvenile — JJ Act 2015, POCSO, DPDP Sec 9

18 se kam umra ke bachchon ka data verifiable parental consent ke bina process nahi karte. Juvenile Justice Ecosystem #19 me child-friendly procedure, Child Welfare Committee (CWC) guidelines ka palan. POCSO Sec 33(7) — victim identity disclose nahi.

🍪 10. Cookies & Tracking — No Advertisement Profiling

• Essential cookies: Login, session, CSRF, security — DPDP Sec 7(a) legitimate use
• No third-party ad trackers, no behavioural profiling for ads — Zero Fear Business
• Analytics: Self-hosted, anonymized, 24 ecosystems usage samajhne ke liye — opt-out available

🔄 11. Policy Update & Grievance Officer — IT Rules 2021 Rule 3(1)

Policy badlegi to 21 din pehle email + website banner se suchna. Last updated: 21 Aug 2026.

Grievance Officer (IT Rules 2021): Chandra Shekhar Verma, Artist CSV A9 Capital Pvt Ltd, Greater Noida, UP — Email: support@acsva9ccciim5.com, Phone: +91-73176-57658 (10 AM - 7 PM IST). 1 month me resolution, na ho to Data Protection Board.