1. Our Privacy Commitment
At Infrablue Materials Technology Private Limited ("OneAdvice", "we", "our"), protecting the privacy, confidentiality, and integrity of our seekers' and experts' personal information is our foundational priority. This Privacy Policy details our practices regarding the collection, processing, storage, and protection of your data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Information We Collect
We collect and process the following categories of information:
- Identity & Account Details: Name, verified email address, phone number (used solely for OTP authentication), role designation (Seeker or Expert).
- Expert Credential Information: Professional degree certificates, Bar Council enrollment numbers, MCI/NMC medical registration, ICAI membership numbers, government identity proofs (Aadhaar/PAN for tax & KYC compliance).
- Consultation Metadata: Date, start time, duration, billable minutes, category of inquiry, and server timestamps.
- Pre-Chat Intake Details: Details submitted prior to consultation (e.g. astrological birth coordinates including date, time, and place of birth, or summary facts of a legal query).
- Financial Transaction Records: Wallet balance, Razorpay payment order IDs, bank account details for expert payout disbursements (processed via tokenized PCI-DSS compliant banking rails). We never store raw debit/credit card numbers or CVVs. Razorpay Privacy Policy: Learn how Razorpay protects your payment and personal information (View Razorpay Privacy).
3. Consultation Voice & Chat Privacy
OneAdvice prioritizes user confidentiality:
- Audio Calls (WebRTC): Direct peer-to-peer VoIP signaling. OneAdvice does NOT record, listen to, or store the audio content of live calls unless explicitly mandated under a court order or statutory criminal investigation.
- Real-Time Chat: Messages exchanged during active consultations are stored in encrypted form to enable consultation history access for both parties. Transcripts are never sold or used for third-party commercial marketing.
- Contact Privacy: We employ in-app calling and messaging so that neither party ever sees the other party's personal phone number or private email address.
4. Document Security & Credential Vault
Expert identity documents, licenses, and credentials uploaded during onboarding are stored in an isolated, encrypted private vault. Access is restricted to authorized compliance officers and protected against Insecure Direct Object References (IDOR). All downloads enforce strict authentication, Content Security Policy sandboxing, and MIME validation.
5. Cookies & Analytics
We use essential cookies strictly necessary for authentication (CSRF tokens and session identifiers). Analytical tracking (via Google Analytics 4) operates under strict IP anonymization without transmitting Personally Identifiable Information (PII). See our complete Cookie Policy for details.
6. Data Retention & Your Rights
In accordance with DPDPA 2023, you have the right to request access to your personal data, request correction of inaccurate data, or request permanent deletion/erasure of your account and personal records. Data retention complies with statutory tax and financial ledger requirements under Indian law (minimum 7 years for financial billing records).
7. Grievance Officer & Contact
For any privacy inquiries or to exercise your rights, please reach out to our designated Data Protection & Grievance Officer at [email protected] or visit our Grievance Redressal Desk.