1. Eligibility Clause

The Services offered by Virtual Afsar are intended solely for individuals who are 18 years of age or older. By accessing or using the Platform, you confirm that you meet this requirement.

If you are under 18, you are not permitted to register, access, or use our Services.

• We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected such data, it will be promptly deleted.
• Parents or legal guardians who believe their child has provided personal data without consent should contact our Grievance Officer for resolution.

2. User Rights (DPDP-Compliant)

In line with the Digital Personal Data Protection Act, 2023 and other applicable laws, users of the Virtual Afsar platform are entitled to exercise the following rights:

• Right to Access: You have the right to request confirmation of whether we are processing your personal data and to obtain a copy of such data.
• Right to Correction: You may request corrections or updates to any inaccurate, incomplete, or outdated personal information we hold.
• Right to Erasure: You may request deletion of your personal data in specific circumstances, such as withdrawal of consent or where retention is no longer necessary.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw such consent at any time, without affecting prior lawful processing.

How to Exercise These Rights: To exercise any of these rights, you may submit a request to our Grievance Officer using the contact details provided in Section 4.

3. Consent Mechanism

Your use of the Virtual Afsar platform constitutes your acknowledgment that you have read, understood, and agreed to our Privacy Policy and Terms & Conditions, both of which are prominently displayed on our app and website.

• Implied Consent: We rely on implied consent, meaning that by continuing to use the Platform, you consent to our collection, processing, and storage of your personal data in accordance with this Policy.
• Withdrawal of Consent: You may withdraw your implied consent at any time by ceasing to use the Platform or by contacting our Grievance Officer to request deletion of your personal data.
• Impact of Withdrawal: Please note that withdrawal of consent may affect your ability to access or use certain features of the Platform.

4. Grievance Redressal

We are committed to addressing user concerns in a transparent and timely manner. In accordance with applicable law, we have appointed a Grievance Officer to handle all complaints, queries, or requests related to personal data.

All grievances will be acknowledged within the timeframes prescribed by applicable law, and efforts will be made to resolve them promptly.

5. Data Security Measures

We adopt reasonable and industry-standard security practices to safeguard your personal data against unauthorized access, disclosure, alteration, or destruction.

Our security framework includes but is not limited to:

• Encryption: All data is encrypted during transmission and storage.
• Access Controls: Role-based access ensures that only authorized personnel may handle personal data.
• Audits & Monitoring: We conduct periodic security audits and maintain monitoring systems to detect vulnerabilities.
• Multi-Factor Authentication (MFA): Used where applicable to provide an additional layer of account security.

Note: While we strive to use best-in-class safeguards, no system can guarantee absolute security. Users are encouraged to protect their login credentials and notify us immediately of any unauthorized account use.

6. Third-Party Data Sharing

We respect your privacy and do not sell or rent your personal data. However, in certain limited circumstances, we may share information with trusted third parties for lawful purposes, including:

• Service Providers: Such as cloud hosting providers, analytics platforms, or payment processors, strictly for operational purposes.
• Legal Authorities: Where disclosure is required by law, court order, or government request.
• Research or Academic Partners: Where data is anonymized or aggregated for statistical or research purposes.

All third parties are bound by contractual obligations to:

• Process your data only for authorized purposes.
• Maintain the same level of protection as we apply.
• Prohibit onward disclosure without authorization.

7. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as mandated by applicable law.

• User-Initiated Deletion: Users can permanently delete their account and associated data at any time directly through the app's settings. This process is immediate, irreversible, and results in the removal of all data from our active systems.
• Grievance Officer Requests: Alternatively, users may request deletion through the Grievance Officer. Such verified requests are processed within 15 working days, unless legal obligations require retention for a longer period.
• Backups: Please note that residual data may persist in backup archives for a limited period but will not be used for any active processing.

8. Cross-Border Data Transfers

We may transfer or store your personal data outside India, including to jurisdictions where our servers, affiliates, or third-party service providers are located.

In such cases:

• Transfers will comply with Indian data protection laws.
• Adequate safeguards such as encryption and contractual obligations will be implemented to ensure that your data is protected to standards comparable to those in India.

By continuing to use our Services, you expressly consent to such transfers, where applicable.

9. Policy Updates and Notifications

This Privacy Policy may be revised from time to time to reflect changes in our practices, legal requirements, or operational needs.

When updates occur:

• We will notify users through in-app notifications, banners, or email (where applicable).
• The "Last Updated" date at the top of this Policy will be revised.
• Continued use of the Platform after any such update shall constitute your acknowledgment and acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically to remain informed about how we handle your personal data.

Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Grievance Officer as mentioned in Section 4.