Privacy Policy

This Privacy Policy ("Policy") describes how Kyzify LLP ("Kyzify," "Company," "we," "us," or "our"), a limited liability partnership registered in India with its registered office at 1003, Finswell Tower, Sakore Nagar, Pune, Maharashtra 411014, India, collects, uses, discloses, retains and protects information in connection with our websites, mobile applications, APIs and related services (collectively, the "Services"), including:

SortMyChallan - a consumer application for searching, paying and tracking traffic challans, including Virtual Court challans;
VahanBuzz - a consumer application for managing vehicle records, insurance, PUCC, FASTag and related information;
Vahan Connect - a business-to-business (B2B) API platform that provides vehicle compliance, ownership, insurance and challan data to our business clients ("API Clients").

This Policy applies to information we collect through the Services and through related communications (email, SMS, WhatsApp, calls). It does not apply to information collected by third parties, including government portals we interface with (such as the Ministry of Road Transport & Highways' Parivahan platform or Virtual Court systems), payment processors, or our API Clients' own use of data obtained through Vahan Connect. We encourage you to review the privacy practices of any such third party separately.

By accessing or using the Services, or by registering for an account, you agree to this Policy and consent to the collection, use, disclosure, retention and protection of your information as described here. If you do not agree, please do not use the Services. If required information is not provided, we may be unable to provide you with some or all of the Services.

This Policy may be updated from time to time in accordance with the "Changes to this Policy" section below.

Eligibility. By using the Services, you represent that you are at least 18 years of age and competent to enter into a binding contract under the Indian Contract Act, 1872. The Services are not directed at, and we do not knowingly collect personal information from, anyone under 18. If we learn that we have collected personal information from a minor without appropriate consent, we will take steps to delete it.

Account and contact information: name, mobile number, email address (optional), and any other details you choose to add to your profile.
Vehicle information: vehicle registration number, chassis/engine number, and any other vehicle identifiers you submit to search for challans, RC details, insurance status, PUCC status or FASTag balance.
Transaction information: challan details, payment amount, payment method, and billing details necessary to process a payment through our payment gateway partner(s) (currently Razorpay). We do not store your full card, UPI or bank account credentials ourselves - these are collected and processed directly by our PCI-DSS-compliant payment gateway partner.
Communications: messages you send us through support channels, feedback, survey responses, and records of calls or chats with our support team (which may be recorded for quality, training and dispute-resolution purposes, as disclosed to you at the time).
Information submitted for grievance redressal or dispute resolution, including correspondence relating to challan disputes, refund requests, or settlement delays.

Device and usage information: IP address, device identifiers, browser type, operating system, app version, crash logs, and interaction data (pages/screens viewed, features used, timestamps, referral source).
Location information, where you have granted permission, to show relevant RTO, city-specific or regional information.
Cookies and similar technologies, used for authentication, preference storage, analytics and security. See "Cookies" below.

Government and regulatory sources: we retrieve vehicle, challan, RC, insurance and PUCC information from publicly accessible or authorised government databases and portals (including Parivahan and Virtual Court systems) to provide the Services. This data is sourced, not created, by us, and its accuracy depends on the originating authority.
Payment partners: confirmation of payment status, transaction IDs and settlement data from our payment gateway partner(s).
Sign-in and communication partners: if you interact with us via OTP-based mobile authentication, we receive verification confirmation from our SMS/authentication provider.

Where our API Client integrates Vahan Connect into their own product, we process vehicle, ownership, insurance and challan data on the API Client's instructions, for their own end-users. In this context, Kyzify acts as a data processor/service provider and the API Client is responsible, as between the API Client and their end-users, for obtaining all necessary consents and providing their own end-users with appropriate notice before submitting data to Vahan Connect. Our handling of such data is additionally governed by the commercial and data processing terms agreed with each API Client, which take precedence over this Policy for that specific data flow.

We use the information described above to:

Provide the Services: look up vehicle, RC, insurance, PUCC and FASTag information; identify and display challans; process payments; generate and deliver receipts; track settlement status with the relevant government authority; and provide Vahan Connect API responses to API Clients.
Operate and secure the platform: authenticate accounts, prevent fraud and abuse, detect and investigate suspicious activity, maintain audit logs, and diagnose technical issues.
Communicate with you: send transactional updates (payment confirmation, settlement status, refund notices), respond to support queries, and - where you have opted in - send promotional or informational communications, which you may opt out of at any time (except administrative, legal or service-related messages, which are necessary for the Services).
Improve the Services: analyse usage patterns and aggregate/de-identified data to improve features, reliability and user experience.
Comply with law: meet tax, regulatory, payment-industry and legal record-keeping obligations, and respond to lawful requests from courts, regulators and law enforcement.
Enforce our rights: investigate and address breaches of our Terms of Service, protect the rights, property and safety of Kyzify, our users and the public, and pursue or defend legal claims.

We do not use your personal information to make any automated decision that produces a legal or similarly significant effect on you without an opportunity for human review.

We may share information:

With our payment gateway partner(s) (currently Razorpay) to process payments and refunds.
With government authorities and portals to the extent necessary to verify, look up or settle a challan, RC, insurance or PUCC record on your behalf.
Between Kyzify's own products (SortMyChallan, VahanBuzz and Vahan Connect), where necessary to provide an integrated experience - for example, VahanBuzz redirecting a pending challan to SortMyChallan for payment.
With API Clients, for data submitted or requested through Vahan Connect, strictly for the purpose of fulfilling that API Client's integration.
With service providers and vendors who perform functions on our behalf (cloud hosting, SMS/OTP delivery, customer support tooling, analytics), under confidentiality and data-protection obligations.
For legal reasons, where we believe in good faith that disclosure is required to comply with applicable law, regulation, legal process, or government request, or to protect the rights, property or safety of Kyzify, our users, or others.
In connection with a business transaction, such as a merger, acquisition, financing, reorganisation or sale of assets, where personal information may be among the transferred assets, subject to this Policy or a successor policy of substantially similar effect.
With your consent, for any other purpose we disclose to you at the time of collection.

We do not sell your personal information to third parties for their independent marketing purposes.

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Services are used. You can control cookies through your browser or device settings; disabling cookies may limit some functionality of the Services.

Your information is stored on servers located in India and/or with third-party service providers under contract with us. We retain personal information for as long as necessary to provide the Services, comply with our legal, tax and regulatory obligations (including payment and settlement record-keeping requirements), resolve disputes, and enforce our agreements. When information is no longer required for these purposes, we take reasonable steps to delete or anonymise it, subject to backup retention cycles and any legal hold.

We implement reasonable technical, administrative and physical safeguards designed to protect your information against unauthorised access, alteration, disclosure or destruction, consistent with applicable law and industry practice, including:

Encryption of data in transit;
Access controls restricting internal access to personal information on a need-to-know basis;
An append-only audit log for settlement and payment-status actions;
Use of PCI-DSS-compliant payment processing partners, so that we do not store full payment card or bank credentials.

No system can be guaranteed 100% secure. You are responsible for keeping your account credentials (including OTP codes) confidential, and for any activity conducted using credentials associated with your account where such activity results from your failure to safeguard them.

Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may have the right to:

Access the personal information we hold about you;
Correct inaccurate or incomplete information;
Withdraw consent for processing you previously consented to, where consent is the basis for that processing, without affecting the lawfulness of processing carried out before withdrawal;
Request deletion of your account and associated personal information, subject to our legal, regulatory and record-keeping obligations and the limitations below;
Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity, where applicable law provides for this;
Lodge a grievance with our Grievance Officer (see "Contact Us" below), and, if unresolved, with the Data Protection Board of India or other competent authority.

Limitations. These rights may be limited where your request is manifestly unfounded or excessive, where fulfilling the request would adversely affect the rights of another person, or where the information relates to an existing or anticipated legal proceeding, fraud investigation, or statutory retention requirement.

Account deletion. You may request deletion of your account by contacting us at the details below. Once deletion is processed, we will not be able to restore your account or its associated data. Copies may persist in encrypted backups for a limited period for disaster-recovery and legal-compliance purposes before being purged in the ordinary course.

The Services are not directed to or intended for use by individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us using the details below and we will take steps to delete it.

The Services may link to, or retrieve data from, third-party websites and government portals that we do not control, including Parivahan and Virtual Court systems. We are not responsible for the content, accuracy, availability or privacy practices of these third parties. Any information you provide directly to such third parties is governed by their own privacy policies.

[LAWYER REVIEW REQUIRED]

The vehicle, challan, RC, insurance and PUCC data displayed through the Services is sourced from government and third-party databases, and Kyzify does not guarantee its completeness, accuracy, or timeliness. Where a settlement is delayed beyond our stated service-level timelines due to factors outside our reasonable control (including delays by the relevant government authority), Kyzify's liability is limited to the refund or remediation set out in our Terms of Service, and Kyzify shall not otherwise be liable for indirect, incidental or consequential loss.

To the maximum extent permitted by applicable law, Kyzify's aggregate liability arising out of or relating to the Services shall not exceed the total convenience fees paid by you to Kyzify in the [THREE/SIX] months preceding the claim.
You agree to indemnify and hold Kyzify, its officers, employees and affiliates harmless from claims arising out of your breach of this Policy, our Terms of Service, or applicable law, or your misuse of the Services.

[LAWYER REVIEW REQUIRED]

This Policy is governed by the laws of India. Any dispute arising out of or in connection with this Policy shall first be attempted to be resolved amicably; failing which, it shall be referred to arbitration under the Arbitration and Conciliation Act, 1996, with a sole arbitrator appointed by Kyzify, seated in Pune, Maharashtra, and conducted in English. Subject to the foregoing, the courts at Pune, Maharashtra shall have exclusive jurisdiction.

Where you engage with Kyzify as a business client (rather than an individual consumer) through Vahan Connect, we additionally collect and process:

Business and billing information: company name, GSTIN/PAN, billing contact details, and API usage/credential information.
Integration and usage data: API call volumes, endpoint usage, response times, and error logs, used to administer your account, bill usage, enforce rate limits, and improve platform reliability.

This information is used to onboard and manage your account, provide support, calculate and invoice fees, detect misuse of API credentials, and comply with our legal and contractual obligations. It may be shared with payment processors, auditors, and legal/regulatory authorities as described in Section 3 above. Data processing terms specific to end-user data flowing through your integration are set out in your Master Service Agreement with Kyzify and shall prevail over this Policy to the extent of any conflict for that data.

We may update this Policy from time to time to reflect changes in law, our practices, or the Services. We will post the updated Policy here with a revised "Last updated" date, and where changes are material, we will provide additional notice (such as an in-app notification or email) as required by law. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the Grievance Officer for Kyzify LLP is:

Name: Rakesh Jain
Designation: CFO
Email: support@kyzify.com
Address: Kyzify LLP, 1003, Finswell Tower, Sakore Nagar, Pune, Maharashtra 411014, India
Phone: +91-8112-092009

For any queries relating to this Policy or the processing of your personal information, please write to the Grievance Officer above. We will acknowledge and address your query in accordance with applicable timelines under law.

Privacy Policy

Applicability and Scope

1. Information We Collect

1.1 Information You Provide Directly

1.2 Information Collected Automatically

1.3 Information from Third Parties

1.4 Information Processed on Behalf of Vahan Connect API Clients

2. How We Use Information

4. Cookies and Similar Technologies

5. Data Storage and Retention

6. Data Security

7. Your Rights

8. Children's Data

9. Third-Party Links and Government Portals

10. Disclaimers and Limitation of Liability

11. Governing Law and Dispute Resolution

12. Information Pertaining to Vahan Connect API Clients

13. Changes to This Policy

Contact Us - Grievance Officer