DPDP Act 2023 Compliant

Privacy Policy

S3KN Software Solutions Pvt. Ltd. — GP MNREGA Platform

Last updated: 01 January 2025  ·  Effective immediately
India's Digital Personal Data Protection Act, 2023

This Privacy Policy complies with the DPDP Act 2023. As a Data Fiduciary, S3KN Software Solutions Pvt. Ltd. processes your personal data only for lawful purposes with your consent or other permissible grounds, protected with appropriate security safeguards.

1
Who We Are (Data Fiduciary)

S3KN Software Solutions Pvt. Ltd.
SY 953/*/P2 107, Sai Park Ring Road, Vijayapur – 586 109, Karnataka, India
Email: admin@gpmnrega.com

For all DPDP Act requests and grievances, email admin@gpmnrega.com with subject "Data Rights Request". We respond within 30 days.

2
Personal Data We Collect

We collect only the minimum data necessary (principle of data minimisation under DPDP Act 2023):

DataPurposeLegal Basis
Name, Email, PhoneAccount creation & communicationConsent / Contract
Panchayat Code, GP Name, Block, District, Vidhan/Lok SabhaGenerating correct reports with regional dataContract
Payment transaction IDSubscription management & receiptsContract / Legal obligation
Login timestamps, IP (hashed)Security & fraud preventionLegitimate use (S.7 DPDP)
Session cookiesKeeping you logged in, CSRF protectionConsent / Contract
We do NOT collect: Aadhaar, biometric data, bank account details, health data, caste, religion, political beliefs, or any Sensitive Personal Data under Indian law.

3
How We Use Your Data

  • Consent (S.6): By registering, you consent to processing your data to provide the GP MNREGA service.
  • Contractual obligation: To fulfil your subscription, generate reports, and send transactional emails.
  • Legal obligation: To maintain financial records under GST and Income Tax Act.
  • Legitimate use (S.7): Security logging and fraud prevention using anonymised data.
We will never use your data for: Unsolicited marketing, profiling, selling to third parties, or any purpose not listed above.

4
When We Share Your Data

  • Payment processor: Name, email, phone shared with our UPI gateway solely to process transactions.
  • Google Cloud Translate: Panchayat/block/constituency names (no personal identifiers) sent to generate Kannada translations.
  • Legal requirements: Disclosure to law enforcement only when required by a valid legal order under Indian law.
We never sell, rent, or trade your personal data to any marketing company, data broker, or third party for commercial purposes.

5
Your Rights Under the DPDP Act, 2023

Right to Access (S.11)
Request summary of your data and processing purposes.
Right to Correction (S.12)
Request correction via account settings or email.
Right to Erasure (S.12)
Request deletion — processed within 30 days.
Right to Withdraw Consent (S.13)
Withdraw consent at any time by closing your account.
Right to Grievance Redressal (S.13)
Complain to us or escalate to the Data Protection Board of India.
Right to Nominate (S.14)
Nominate a person to exercise your rights in case of death or incapacity.

6
Cookies

  • Authentication cookie (.S3KN_AUTH2): HttpOnly, Secure — keeps you logged in. Cannot be read by JavaScript. Expires after 24 hours of inactivity.
  • Anti-forgery token: Prevents CSRF attacks on forms.

We do not use advertising cookies, third-party tracking, or analytics. Disabling cookies will prevent login.

7
Security

  • HTTPS / TLS 1.2+: All data in transit is encrypted.
  • BCrypt password hashing: We cannot read your password.
  • HttpOnly cookies: Auth cookies protected against XSS theft.
  • Data breach notification: Affected users and the Data Protection Board notified as required under DPDP Act 2023 (S.8).

8
Data Retention

  • Account data: Deleted within 30 days of account deletion request.
  • Payment records: Retained 7 years under Income Tax Act and GST law.
  • Server logs: 90 days, no personal data.
  • Contact form submissions: 12 months then deleted.

9
Children's Privacy

GP MNREGA is intended for adult government officials. We do not knowingly collect data from persons under 18, in accordance with Section 9 of the DPDP Act 2023.

10
Changes to This Policy

Material changes will be notified to registered users by email and the "Last updated" date revised. Continued use constitutes acceptance.

?
Questions or Complaints

Email admin@gpmnrega.com with subject "Data Rights Request". If unsatisfied with our response, you may escalate to the Data Protection Board of India under DPDP Act 2023.

Contact Us Terms & Conditions