Privacy Policy & Data Protection — TeluguAdds

1. The TeluguAdds Privacy Commitment

At TeluguAdds.com, a digital product engineered and operated by NETFRANEX MARKETING PRIVATE LIMITED (CIN: U73100TS2025PTC197887, Registered Office: H No 9-856, YSR Colony, Bollaram, R.C. Puram, Medak, Telangana – 502325, India, hereinafter referred to as Company, Platform, Data Fiduciary, We, Us, or Our), protecting the privacy, confidentiality, and digital security of our business subscribers, consumers, territory franchise partners, and visitors is an unwavering institutional commitment. This comprehensive Privacy Policy & Data Protection Charter describes in complete detail the personal and commercial data we collect, the lawful grounds upon which we process it, the technical protocols deployed to protect it, and the legal rights guaranteed to you.

This policy is drafted in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act (DPDPA), 2023, and international data protection benchmarks.

2. The Specific Categories of Data We Collect

TeluguAdds collects data through multiple voluntary and automated interaction channels:

A. Information Provided Voluntarily by You:

• Account Identity Data: Full legal name, preferred business name, mobile phone number, WhatsApp contact, verified email address, and encrypted portal access passwords.
• Commercial Listing Data: Legal entity status, registered trade name, physical office/storefront address, city, district, PIN code, GPS coordinates, operating hours, trade licenses (GSTIN, Udyam MSME number, Shop & Establishment Act registration), product catalogs, price ranges, service menus, and photographs.
• Smart Digital Card Assets: Professional headshots, company logos, social media URLs (Facebook, Instagram, LinkedIn, YouTube, X), designation, and professional biography.
• Consumer Inquiries & Leads: Name, phone number, and detailed service requirement descriptions submitted when contacting a merchant through directory inquiry forms.
• Support & Correspondence: Communication transcripts, support tickets, grievance notices, and feedback records.

B. Information Collected Automatically:

• Technical & Telemetry Data: IP address, browser user-agent, operating system version, device model, referral URLs, and session timestamps.
• Usage Metrics: Search queries executed, profile pages viewed, digital visiting cards accessed, click-to-call taps, and click-to-WhatsApp conversions.
• Cookies & Security Tokens: Encrypted session identifiers and CSRF prevention tokens necessary for platform operation.

3. Lawful Grounds & Purposes of Data Processing

We process your personal and commercial information exclusively for legitimate, defined, and lawful purposes:

1. Directory Publication & Hyper-Local Discovery: Publishing your verified storefront address, phone number, catalog items, and operating hours so consumers can find, verify, and patronize your business.
2. Digital Card Provisioning: Generating dynamic smart visiting cards accessible via personalized URLs (e.g., /card/your-name) for rapid contact sharing.
3. Direct Lead Routing: Instantly delivering quotation requests and customer phone inquiries straight to the merchant\'s dashboard and mobile device with zero middlemen interference.
4. Billing & Subscription Administration: Managing membership billing terms, generating official computer-generated GST invoices, and calculating territory franchise referral commissions.
5. Fraud Detection & Security Defense: Detecting bot attacks, brute-force login attempts, unauthorized impersonation, and fraudulent listings.
6. Legal & Regulatory Compliance: Satisfying statutory requirements under the Information Technology Act, 2000, tax regulations, and lawful orders from competent judicial and cybercrime authorities.

4. Data Sharing, Disclosure & Third-Party Transfers

TELUGUADDS STRICTLY DOES NOT SELL, RENT, OR MONETIZE YOUR PERSONAL DATA TO THIRD-PARTY BROKERS OR TELEMARKETERS.

Data sharing occurs solely within strict operational boundaries:

• Public Search Engine Indexing: Information you publish on your public business profile (storefront address, trade phone number, business description, catalog photos) is purposefully rendered discoverable to web search engines (Google, Bing) and AI search tools.
• Authorized Territory Franchise Managers: Your regional territory franchise partner receives access to verify and support your account in their designated district.
• Essential Service Providers: Trusted cloud infrastructure hosting providers, payment gateways (e.g., Razorpay Software Private Limited), SMS/WhatsApp notification gateways, and transactional email providers operating under strict confidentiality and Data Processing Agreements (DPAs).
• Legal & Law Enforcement Mandates: Where compelled by an official order under the laws of India, such as a formal notice under Section 91 of the Code of Criminal Procedure, 1973, or cyber security reporting obligations under CERT-In directives.

Payment Processing & Cardholder Data Protection (RBI & PCI-DSS Compliance):

When you execute an online payment on TeluguAdds, your transaction is processed directly through RBI-authorized payment aggregators (including Razorpay Software Private Limited). Crucial Security Disclosure: TeluguAdds and NETFRANEX MARKETING PRIVATE LIMITED DO NOT collect, capture, store, or record any sensitive cardholder or authentication data (such as full 16-digit credit/debit card numbers, CVV security codes, card expiry dates, UPI PINs, or net banking passwords) on our servers. All financial transmissions are conducted over encrypted 256-bit TLS connections and handled exclusively within PCI-DSS Level 1 certified banking environments in full adherence to Reserve Bank of India (RBI) Card-on-File (CoF) tokenization regulations.

5. Data Security, Cryptography & Retention

TeluguAdds implements rigorous technical and organizational security controls:

• Encryption in Transit: 256-bit TLS/SSL encryption for all HTTP communications;
• Encryption at Rest: Cryptographic one-way hashing (Bcrypt / Argon2) for all account passwords;
• Session Security: HttpOnly, Secure, SameSite session cookies preventing cross-site scripting (XSS);
• Firewall Protection: Automated rate limiting, cross-site request forgery (CSRF) tokens, and continuous DDoS mitigation.

We retain your data for the duration of your active business account. Upon account deletion or profile cancellation, public listings are removed within forty-eight (48) business hours. Specific accounting records and invoices are archived for statutory periods mandated under Indian corporate and tax laws.

6. Your Rights as a Data Principal

You maintain complete statutory rights over your personal data:

• Right of Access & Correction: Review and update your business profile, phone numbers, and catalog items anytime via your business dashboard;
• Right to Deletion: Request the de-indexing and deletion of personal profile records by writing to our compliance desk;
• Right to Opt-Out: Unsubscribe from marketing notifications with one click using the unsubscribe link embedded in every email.

7. Designated Grievance Officer & Compliance Desk

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:

Grievance & Compliance Officer: Legal & Compliance Department — NETFRANEX MARKETING PRIVATE LIMITED
Registered Office: H No 9-856, YSR Colony, Bollaram, R.C. Puram, Medak, Telangana – 502325, India.
Corporate Hub: Plot No. 42, Hitech City Main Road, Madhapur, Hyderabad, Telangana – 500081, India.
Email: grievance@teluguadds.com / privacy@teluguadds.com
Helpline: +91 99999 00000
All grievances are officially logged, acknowledged within 24 hours, and resolved within 15 business days.