Privacy Policy

RURINFRA Technologies Private Limited ("RURINFRA", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data through our website rurinfra.com and our products Patri.Live, OneCheck, and OPDesk. It is intended to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable law.

1Who we are

RURINFRA Technologies Private Limited is a company incorporated in India (Gujarat). For the personal data described in this policy, we act as a Data Fiduciary or, where we process data on behalf of an organisation, as a Data Processor (see Scope & our role).

2Scope & our role

This policy covers personal data processed through our website and products. Our role depends on the context:

• Where you deal with RURINFRA directly (for example, contacting us via the website), we are the Data Fiduciary and determine the purposes of processing.
• Where you use a product through an organisation — such as a school, transport operator, fleet owner, or clinic that has engaged us — that organisation is generally the Data Fiduciary and instructs us, and we act as a Data Processor on its behalf. That organisation's own privacy notice also applies to you.

Some products may publish an additional, product-specific privacy notice; where it does, that notice supplements this policy for that product.

3Personal data we collect

Website visitors

• Contact details you choose to share with us (such as name, email, phone, organisation, and your message).
• Technical and log data generated when you visit the site.

Patri.Live · school transport

• Parent/guardian contact details and the child's name and class/route information.
• The registered pick-up / drop-off (home) location used for proximity alerts.
• Live GPS location of the school vehicle during a trip, and derived on-time / arrival status.

OneCheck · fleet operations

• Driver / staff identifiers and the facial image captured for attendance verification.
• Result of Aadhaar-based OTP verification used to confirm identity.
• Geolocation and geo-fence data, fuel receipts, and vehicle / odometer photographs, and related trip and cost data.

OPDesk · practice booking

• Patient name and phone number, and appointment date, time, and status.
• Doctor / clinic and availability information provided by the practice.

4How we use personal data

We use personal data to:

• provide, operate, and maintain the website and products;
• verify attendance and identity, generate alerts, confirmations, and status updates;
• support safety and operational visibility for the relevant organisation and users;
• respond to enquiries and provide customer support;
• maintain security, prevent misuse, and debug/improve the services; and
• comply with legal and regulatory obligations.

We process personal data only for the purposes for which it was collected or a purpose reasonably compatible with it.

5Legal basis & consent

Where required, we process personal data on the basis of your consent, given at or before the time of collection, and for certain legitimate uses permitted under the DPDP Act. You may withdraw your consent at any time by contacting us (see Grievance Officer); withdrawal does not affect processing already carried out, and may limit or prevent your use of a product where the data is essential to it.

6Children's data (Patri.Live)

Patri.Live involves data relating to children. We handle such data with special care and, as required by the DPDP Act, on the basis of verifiable consent of a parent or lawful guardian. We do not undertake tracking or behavioural monitoring of children, or targeted advertising directed at children. Location data is used solely to provide the commute-visibility and proximity-alert features to the authorised parent/guardian and assigned driver.

7Aadhaar & biometric data (OneCheck)

OneCheck may use a facial image and Aadhaar-based OTP verification to confirm the identity of a person marking attendance. This data is processed with consent and used only for identity/attendance verification. We do not use this data for any purpose other than the attendance/verification feature.

8Health-related data (OPDesk)

OPDesk is an appointment-scheduling tool. It processes booking information (name, phone, appointment details) on behalf of the doctor or practice. OPDesk is not a medical-records system and does not collect clinical/diagnostic information. The practice remains responsible for the patient relationship and any clinical records.

9Sharing & disclosure

We do not sell personal data. We may share it:

• with the organisation (school, operator, fleet, or practice) through which you use a product;
• with service providers / sub-processors who help us run the services (such as cloud hosting, messaging/SMS/WhatsApp delivery, and mapping) under appropriate confidentiality and data-protection obligations;
• where required by law, regulation, court order, or to protect rights, safety, and security; and
• in connection with a business transfer (merger, acquisition, or reorganisation), subject to this policy.

10Data retention

We retain personal data only for as long as necessary for the purposes described here, to comply with legal obligations, and — where we act as a Data Processor — in line with the instructions of the relevant organisation.

11Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, and loss. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

12Your rights

Subject to applicable law, you may have the right to:

• access a summary of the personal data we process about you and the processing activity;
• request correction, completion, or updating of inaccurate or incomplete data;
• request erasure of your personal data where it is no longer required;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• readily raise a grievance about our handling of your data.

To exercise any of these, contact our Grievance Officer below. Where we act as a Data Processor, we may direct your request to the relevant organisation (Data Fiduciary).

13Grievance Officer

For any questions, requests, or grievances relating to your personal data or this policy, you may contact:

We aim to acknowledge and respond to grievances within the timelines required by applicable law.

14Cookies & analytics

Our website may use cookies or similar technologies for essential functionality and, if enabled, for analytics.

15Cross-border transfers

Where personal data is processed or stored outside India (for example, by a cloud provider), we take steps to ensure it is handled in accordance with this policy and applicable law.

16Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be notified as required by law.

17Contact us

Questions about this policy or our privacy practices? Email care@rurinfra.com or write to us at the registered office above. See also our Terms of Use and Refund Policy.