Privacy Policy & Data Security

1. Information We Collect

To provide transactional media booking, identity verification, and GST tax invoice generation, ABHIAD collects:

• Identity & Contact Details: Full name, authorized email address, verified telephone number, and company designation.
• Corporate & Tax Credentials: Company name, registered billing address, Indian Goods and Services Tax Identification Number (GSTIN), and State Jurisdiction.
• Media Owner KYC & Banking: Permanent Account Number (PAN), corporate registration certificate, bank account number, and IFSC code for electronic payout processing.
• System & Security Telemetry: IP addresses, browser user-agents, session tokens, audit log events, and Proof of Execution geolocation coordinates.

2. Use of Collected Information

We process your personal and commercial data strictly for legitimate operational purposes:

• Facilitating atomic inventory holds and preventing double bookings.
• Verifying cryptographic payment gateway signatures (HMAC-SHA256) through Razorpay.
• Generating statutory GST invoices under SAC 998361 for input tax credit compliance.
• Administering two-factor authentication (TOTP RFC 6238) and account protection.
• Disbursing verified escrow payouts to registered media owners via Indian banking rails (NEFT/RTGS).

3. Payment Gateway & Financial Data Protection

ABHIAD does not store raw payment card numbers, CVVs, or NetBanking credentials on its servers. All payment handling is conducted through RBI-authorized payment aggregators (e.g., Razorpay) adhering to PCI-DSS Level 1 certification. We receive only tokenized payment IDs, signature hashes, and transaction completion statuses for verification.

4. Data Protection & Security Controls

We implement industry-grade security measures across our entire application infrastructure:

• Mandatory HTTPS encryption for all browser-to-server data transmission.
• Bcrypt hashing with high salt rounds for user credentials.
• Encrypted storage of 2FA TOTP secret seeds and emergency recovery codes.
• Strict role-based authorization policies governing private seller KYC documents and billing records.

5. Your Data Rights & Contact Information

Under the Indian Digital Personal Data Protection Act, you have the right to access your stored data, correct inaccuracies, and request account deletion subject to Indian statutory financial retention requirements (e.g., GST audit records must be retained for 6 financial years). For data privacy inquiries, contact our Data Protection Officer at privacy@abhiad.com.