1. Who we are
GovtLicense ("we") operates govtlicense.com. For personal data you give us, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy also follows the Information Technology Act, 2000 and its rules.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name and email address, and a password stored only as a secure hash; or, if you use Google or Facebook, your name, email and a unique account ID from that provider | Creating an account | To create and secure your account, and to show a verified contact on checklists you share |
| Username you choose | Completing your profile | To identify your account |
| Mobile number and OTP verification records (when this feature launches) | If you verify your mobile number | To confirm you own the number and to prevent abuse |
| Business name, role, default business type and city | If you add them to your profile | To pre-fill checklists and label the checklists you share |
| Contact form details | When you write to us | To respond to you |
| Basic technical data (browser, device type, pages visited) | When you use the site | Security, fixing problems and improving the service |
3. What we do not collect
We do not ask for Aadhaar numbers, PAN numbers, bank details or copies of your documents. Ticking a document in the checklist only records that you have it; the document never leaves your device.
4. Consent and purpose
We process your personal data on the basis of your consent, given when you create an account or submit a form, and only for the purposes above. You can withdraw consent at any time by deleting your account; this does not affect processing already done.
5. Who we share it with
- Service providers who process data for us under contract: hosting and authentication, SMS delivery for OTPs, and email delivery.
- People you choose to share checklists with. Shared checklists include your name and verified contact details.
- Authorities when required by law or a valid legal order.
We do not sell your personal data or share it for advertising.
6. Where and how long we store it
We store account data on servers located in India. We keep account data while your account is active and delete it within 30 days of account deletion, except where we must keep records longer by law. OTP records are kept for up to 90 days. Contact form messages are kept for up to 2 years.
7. Security
We use encryption in transit, hashed passwords, rate limits on login and OTP requests, and access controls. No system is perfectly secure; if a breach affects your data, we will notify you and the Data Protection Board of India as required by law.
8. Your rights
Under the DPDP Act you can:
- ask for a summary of your personal data and how we process it;
- correct or update your data (most of it directly in My Account);
- ask us to erase your data;
- nominate another person to exercise your rights if you die or become incapacitated;
- raise a grievance with us, and if unresolved, with the Data Protection Board of India.
To exercise these rights, email govtlicense.admin@gmail.com from your registered email or include your registered mobile number.
9. Children
GovtLicense is for adults running or advising businesses. We do not knowingly create accounts for anyone under 18. If you believe a child has created an account, contact us and we will delete it.
10. Cookies and browser storage
We do not use advertising cookies. We store a few items in your browser to make the site work:
| Item | Purpose |
|---|---|
| Login session | Keeps you logged in |
| Last business and city | Re-opens your checklist |
| Text size | Remembers your A-, A, A+ choice |
You can clear these at any time in your browser settings.
11. Changes to this policy
If we change this policy, we will update the date at the top and, for significant changes, notify registered users.
12. Grievance Officer
Grievance Officer, GovtLicense. Email: govtlicense.admin@gmail.com. We acknowledge within 24 hours and aim to resolve within 15 days.