Privacy policy
This policy explains what personal data Charcha collects, why we use it and the choices you have. Passionfrut Technologies Private Limited is the data fiduciary for this data under the Digital Personal Data Protection Act, 2023.
What we collect
| Data | When | Why |
|---|---|---|
| Name, work email, mobile number | Free snapshot, sign up, account page | To send your report, run your account, and contact you about it |
| Password (stored only as a one-way hash) | Sign up | To let you log in securely |
| Company name, website, city and what you sell | Snapshot, sign up, adding a company | To build reports about your business |
| Billing name, GSTIN, billing address and state, invoice email | Before your first payment | To issue GST tax invoices as the law requires |
| Payment references, amounts and status | When you pay | To confirm payments, run renewals and keep accounts |
| Support messages | When you raise a request | To answer you |
| IP address and basic request logs | Every visit | To keep the service secure and prevent abuse of the free snapshot |
We do not collect card numbers, UPI PINs or bank logins. PhonePe handles those. We use one essential cookie to keep you logged in. We do not use advertising cookies or sell personal data.
Consent
We process your personal data on the basis of your consent, which you give when you submit a form, and to meet legal duties such as keeping tax records. You can withdraw consent at any time by writing to us. We will then stop processing, except for records we must keep by law. Withdrawing consent may mean we cannot keep providing the service.
Who we share it with
We share personal data only with service providers who help us run Charcha, and only what each needs:
- PhonePe, to process payments and UPI Autopay mandates.
- Resend, to send emails such as invoices, password resets and support replies.
- Fly.io, which hosts Charcha and its database.
- AI model providers, to produce reports. We send them business details such as company names, websites and the category you work in, not your personal contact details.
We may also disclose data when the law requires it, for example to tax authorities or under a valid order from a court or government body.
Where your data is stored
Charcha’s servers and database are hosted in Singapore. Some of our providers process data in other countries. Where data leaves India, we rely on providers bound by contract to protect it, and we follow any restrictions the Government of India places on such transfers.
How long we keep it
- Account, company and report data: while your account is open. We delete it within 30 days of a request to close your account.
- Invoices, payment records and billing details: for 8 years, as GST law requires.
- Free snapshot details: up to 2 years, unless you ask us to delete them sooner.
- Support messages: up to 3 years after the request is closed.
- Security logs: up to 90 days.
How we protect it
Data is encrypted in transit and the database is stored on an encrypted disk. Passwords are stored as salted hashes. Payment details never reach our servers. Access to customer data is limited to people who need it to run the service.
Your rights
Under the DPDP Act, you can ask us to:
- tell you what personal data we hold about you and who we have shared it with;
- correct or update it (you can change your name and mobile number yourself on the account page);
- erase it, apart from records the law requires us to keep;
- nominate someone to exercise these rights for you if you are unable to.
Write to admin@passionfrut.com from the email linked to your account. We will reply within 30 days.
Grievance officer
If you have a complaint about how we handle personal data, contact our grievance officer, Aditya Agarwal, Director, at admin@passionfrut.com or by post at A 101, Madhu Ganesh Apartment, Mahim Road, Behind SBI Bank, Palghar, Maharashtra 401404, India. We will acknowledge your complaint within 2 working days and aim to resolve it within 15 days. If you are not satisfied, you may approach the Data Protection Board of India.
Children
Charcha is a business service and is not meant for anyone under 18. We do not knowingly collect children’s data.
Changes
If we change this policy in a way that matters, we will email account holders before the change takes effect. See also our terms of service.
Questions about this page? Write to admin@passionfrut.com or see Contact.