Privacy Policy

Welcome to MARG. We respect your privacy and are committed to protecting your personal information. This policy explains how we collect, use, and safeguard information when you use the MARG app.

By using MARG, you agree to this Privacy Policy. If you do not agree, please do not use the app.

1.1 Information You Provide

When you create an account:

• Mobile phone number (for OTP login)
• Name (optional)

When you use the app:

• Search queries (example: auto rickshaw Varanasi)
• Vendors you view
• Vendors you call (we log when you tap Call)
• Vendors you save as favorites
• Feedback and reviews you submit

When you subscribe:

• Payment information processed by our payment gateway (Razorpay, PhonePe, etc.)
• Transaction history (subscription purchases and renewals)

1.2 Information Collected Automatically

Device information:

• Device type (iPhone, Android phone, tablet)
• Operating system and version
• App version
• Unique device identifier
• IP address

Usage information:

• App opens and screen views
• Features you use
• Time spent in app
• Crash reports and error logs

Location information:

• Approximate location from IP address to show relevant vendors
• GPS location only if you grant permission (for nearby vendors)

2.1 To Provide Our Service

• Create and manage your account (verify phone number with OTP)
• Show relevant vendor listings based on searches and location
• Remember your favorites
• Process your subscription (₹50 every 3 days or manual renewal)
• Send important notifications (subscription expiry, OTP codes)

2.2 To Improve Our Service

• Understand what users search for
• Find popular vendors and improve recommendations
• Identify gaps such as missing vendor categories
• Fix bugs and crashes
• Improve user experience

2.3 To Communicate with You

• Send OTP codes for login verification
• Send subscription reminders
• Respond to support requests
• Send important updates (app, policy, service announcements)

We do NOT

• Send promotional emails or SMS unless you opt in
• Sell your information to advertisers
• Share your number with vendors before you call them

3.1 With Service Providers

We share limited information with trusted third parties:

• Payment processors: Razorpay, PhonePe, Google Pay, Paytm (transaction amount, phone number, payment method)
• SMS gateway for OTP delivery (phone number and OTP message)
• Cloud hosting: Google Firebase, Amazon AWS (encrypted app data)
• Analytics: Google Analytics, Firebase Analytics (anonymous usage data)

Privacy links:Razorpay,PhonePe.

All service providers are bound by confidentiality agreements and cannot use your data for their own purposes.

3.2 With Vendors (Limited)

• When you tap Call, your phone opens the dialer and the vendor sees your number via caller ID.
• We do not share your name or other details with vendors.
• Vendors do not access user data, searches, favorites, or views.

3.3 Legal Requirements

• Court orders, legal processes, or regulatory requests
• Preventing fraud or illegal activity
• Protecting our rights, property, or safety
• Enforcing our Terms of Use

3.4 Business Transfers

If MARG is acquired or merged, your information may transfer to new owners. We will notify you and require them to honor this policy.

4.1 Security Measures

• SSL/TLS encryption for data in transit
• OTP-based login (no passwords stored)
• Encrypted storage for sensitive data
• Regular security audits and testing
• Access controls with monitoring and MFA for staff

Payment Security

• We do not store card numbers, CVV, or banking passwords
• Payment data handled by PCI-DSS certified processors
• We store only transaction IDs and amounts

4.2 Your Role

• Keep your phone secure with a lock
• Do not share OTP codes
• Log out on shared devices
• Report suspicious activity: security@margkgb.com

While we use strong security, no system can be 100% secure.

• Active users: retain data while you use MARG
• Inactive users: may delete accounts after 24 months of inactivity with 30 days notice
• Deleted accounts: personal data deleted within 7 days
• Payment records: kept for 7 years for tax law, anonymized after 1 year
• Expired subscription: account retained but vendor numbers hidden

6.1 Access Your Information

• Settings → My Data
• Or email: privacy@margkgb.com (response within 7 days)

6.2 Correct Your Information

• Update name: Settings → Profile → Edit Name
• Change number: Settings → Change Number (OTP required)
• Transaction history cannot be edited

6.3 Delete Your Information

• Delete account: Settings → Account → Delete My Account (OTP)
• Personal data deleted within 7 days
• See Data Deletion Policy for details

6.4 Opt-Out of Communications

• Subscription reminders are essential and cannot be opted out
• Promotional messages (if any): reply STOP or unsubscribe in email
• Settings → Notifications → Marketing → OFF

6.5 Control Location Access

Android: Settings → Apps → MARG → Permissions → Location → Deny. iPhone: Settings → MARG → Location → Never. You can still select a city manually.

MARG is not intended for children under 13.

• We do not knowingly collect data from children under 13
• Parents can request deletion: privacy@margkgb.com (within 48 hours)
• Users 13-18: parental consent recommended

• Data stored in India and Singapore
• EU users: GDPR rights including portability and objection
• California users: CCPA disclosure and deletion rights

• Essential cookies for sessions and core functionality
• Optional analytics cookies for usage insights
• No ad tracking cookies or social pixels

• Significant changes: notify via email/app and request consent when required
• Minor changes: updated without notice
• Check the Last Updated date at the top
• Previous versions available on request: privacy@margkgb.com

• Email: privacy@margkgb.com
• Phone: 1800-XXX-MARG (Mon-Sat, 9 AM - 6 PM IST)
• Mail: MARG KGB Private Limited, Attention: Privacy Officer, Lucknow, Uttar Pradesh - 226001, India
• Response time: within 7 business days

• Name: [DPO Name]
• Email: dpo@margkgb.com
• Phone: +91-XXXXX-XXXXX

By using MARG, you consent to collection and use of information described in this policy. You can withdraw consent at any time by deleting your account.

• Information Technology Act, 2000 (India)
• Information Technology (Reasonable Security Practices) Rules, 2011 (India)
• Digital Personal Data Protection Act, 2023 (when enacted)
• GDPR (EU) and CCPA (California) where applicable
• Jurisdiction: Courts in Lucknow, Uttar Pradesh, India

Download or print-friendly versions are available upon request.