Privacy Policy

Last updated: 27 September 2026

1. Introduction & scope

This Privacy Policy explains how Aravir Technologies Private Limited ("Aravir", "we", "us" or "our"), the operator of the Vijetha platform ("Vijetha", the "Platform", the "Service"), handles information collected through our website at https://vijetha.org, our web administration console, and our Android and iOS field applications.

Vijetha is a multi-tenant, business-to-business (B2B) voter-management platform used by authorized staff of Indian constituency election campaigns. It is a professional tool for campaign organizations and their authorized personnel; it is not a consumer service and is not directed at, or intended for use by, the general public.

This policy covers two broad categories of information: (a) information about the campaign organizations and the individual staff members who hold accounts and use the Platform, and (b) the electoral and voter data that each campaign uploads into its own isolated tenant workspace. As explained in Section 2, our role differs between these two categories.

By accessing or using the Platform, you acknowledge that you have read and understood this policy. If you do not agree with it, you should not use the Service.

2. Controller and processor roles

The distinction between a "data controller" (the party that determines the purposes and means of processing personal data) and a "data processor" (the party that processes personal data on behalf of, and under the instructions of, a controller) is central to how Vijetha works.

Voter and electoral data — the campaign is the controller

Each campaign organization (a "tenant" or "customer") decides which electoral rolls and voter records to upload, how those records are used within its campaign, and who among its staff may access them. The campaign is therefore the data controller of the voter data in its tenant. Aravir acts solely as a data processor for that voter data, processing it only to provide the Service and only in accordance with the campaign's instructions and our agreement with the campaign. We do not use tenant voter data for our own purposes, do not sell it, and do not share it between tenants.

Account, billing and platform data — Aravir is the controller

For information we collect to create and secure accounts, authenticate users, operate and improve the Platform, process payments, and communicate with customers, Aravir is the data controller and this policy governs that processing directly.

If you are a voter whose data appears in a campaign's tenant and you wish to exercise rights over that data, the campaign that uploaded it is your primary point of contact as the controller. We will assist that campaign in responding to such requests as its processor.

3. Information we collect

Account data

When a campaign is onboarded and its staff are provisioned, we collect and hold, for each user account:

• Name of the account holder;
• Mobile number (used as the primary login identifier and for OTP-based authentication);
• Email address;
• Role and permission level within the campaign (for example administrator, coordinator or field worker);
• Hashed credentials and one-time-password (OTP) authentication data — we do not store passwords or OTP codes in plain text;
• Device binding information used to associate an account with the authorized device(s) from which it may sign in.

Tenant-uploaded electoral and voter data

Campaigns upload electoral roll and voter records into their tenant. Depending on the data the campaign holds and chooses to record, this may include, for each voter:

• Identity and contact: voter name, EPIC number / voter ID, relation name, address, household grouping, age and gender, and phone number (where present);
• Demographic categories: caste and sub-caste, and religion, where the campaign records them against its own reference lists;
• Political and campaign fields: party leaning and its strength, a supporter flag, residence status (for example local / outstation), canvassing (campaigning) status, and voting status on polling day (for example not voted / voted / pledged);
• Field context: canvassing notes recorded by field staff, and a full history of edits made to a record.

Some of these categories — in particular caste, sub-caste, religion, and political leaning — are sensitive. The Platform provides fields to hold them, but the campaign (as controller) decides whether to collect them and is responsible for having a lawful basis to do so and for using them lawfully, including under the Election Commission of India's rules and the Model Code of Conduct. We process all of this data only on the campaign's documented instructions and solely to provide the Service; we never use it for our own purposes, profiling, advertising, or resale. As stated in Section 2, the campaign is the controller of this data.

Offline copies in the field app

To work in areas without connectivity, the field app keeps an offline copy of the subset of voter records assigned to the signed-in worker, plus any updates they make before the device syncs. This offline database is encrypted at rest on the device, protected by an app lock, and is erased when the user signs out or their access is revoked.

Technical and usage data

• Device information (such as device model, operating system version and app version);
• IP address;
• Application and usage logs, including sign-in events, feature usage and error diagnostics used to operate, secure and troubleshoot the Service;
• Approximate location — only in the field application, and only when the user grants location permission. Approximate location is used to support field-work verification (for example, to corroborate that canvassing activity was recorded in the relevant area). Location permission is optional: it can be declined when first requested or revoked at any time in the device settings, and the core field-work functions of the app remain usable without it. We do not collect precise/continuous background location.

4. How we use information

We use the information described above to:

• Create, provision, authenticate and secure user accounts, including OTP login and device binding;
• Provide the Platform's features to each campaign, including storing, organizing and displaying the voter data the campaign has uploaded to its tenant;
• Maintain tenant isolation and enforce role-based access within each campaign;
• Process subscription payments and manage billing;
• Send transactional communications, such as OTP messages, service notices, and responses to support requests;
• Operate, monitor, maintain, secure and improve the Service, including diagnosing faults and preventing abuse and fraud;
• Support field-work verification where the user has granted location permission;
• Comply with applicable law and enforce our Terms of Service.

We do not sell personal data, and we do not use tenant voter data for advertising or for any purpose other than providing the Service to the campaign that controls it.

5. Legal bases & consent

We process personal data where we have a lawful basis to do so, including: performance of our contract with the campaign customer (to provide the Service the customer has subscribed to); the campaign customer's documented instructions in respect of voter data it controls; our legitimate interests in operating, securing and improving the Platform in a manner not overridden by users' rights; compliance with legal obligations; and consent where consent is the appropriate basis (for example, the optional location permission in the field app, which is requested through the operating system and can be declined or withdrawn).

Where a campaign uploads voter data to its tenant, the campaign is responsible, as controller, for ensuring it has a valid lawful basis and any required permissions for that data and its intended use. See our Terms of Service for the customer's obligations regarding the lawfulness of uploaded data.

6. Sharing & sub-processors

We do not sell personal data and we do not share it except as described here. We engage a limited number of trusted third-party service providers ("sub-processors") to help us deliver the Service. Each is used only for the stated purpose and is required to protect the information it handles:

• Razorpay — payment processing for subscription payments (card, UPI and netbanking). See Section 7.
• MSG91 — delivery of transactional SMS, specifically the one-time passwords (OTPs) used for login.
• Zoho (Zoho Mail, India datacenter) — delivery of transactional email, such as service notices and support correspondence.
• Cloud hosting infrastructure — the Platform and its data are hosted on cloud infrastructure located in and served from India.

We may also disclose information where required to do so by law, by a valid order of a court or competent authority, or where reasonably necessary to protect the rights, property or safety of Aravir, our customers or others, or to investigate and prevent fraud or abuse. If Aravir is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy continuing to protect it.

7. Payment data

Subscription payments are processed by our payment gateway, Razorpay. When you make a payment, your card, UPI or netbanking details are collected and processed directly by Razorpay under its own terms and privacy policy. Vijetha does not store full card numbers or complete card details on its systems. We retain only limited transaction records — such as an invoice reference, the amount, the payment status and a masked/partial identifier returned by the gateway — as needed to manage billing, provide receipts, handle refunds and meet our accounting and legal obligations.

8. Data retention

We retain account and billing data for the duration of the customer's subscription and for a reasonable period afterwards, as needed to provide the Service, resolve disputes, process refunds, and meet our legal, tax and accounting obligations.

Tenant-uploaded voter data is retained for as long as the campaign maintains its tenant. Because the campaign is the controller of that data, it may request deletion of specific records or of its tenant data at any time, and such data is deleted on request or following termination of the customer's subscription, subject to any short operational period required to complete the deletion and to any narrow legal-retention obligations. See Section 11 for how to request deletion.

Technical logs are retained only for as long as needed for security, troubleshooting and operational purposes, after which they are deleted or aggregated. We operate automated retention routines that apply, as a guide, the following schedules:

• One-time passwords (OTPs): deleted within 1 day of expiry.
• Rate-limit counters: deleted after 1 day.
• Sync idempotency keys: deleted after 30 days.
• Expired device sessions: deleted 7 days after expiry; operator sessions on expiry.
• Turnout snapshots: deleted after 180 days.
• Raw staged import rows: deleted 90 days after an import completes or fails (the import record — counts and dataset provenance — is retained for the audit trail).
• Account, billing and voter-change history: retained for the subscription term and a reasonable period afterwards for audit, dispute resolution and legal/tax obligations, then deleted or anonymized.

9. Security

We take the protection of information seriously and apply organizational and technical safeguards appropriate to the sensitivity of electoral data, including:

• Encryption of data in transit using TLS;
• OTP-based authentication rather than reusable passwords, with credentials and OTP data stored only in hashed form;
• Role-based access control, so users can access only the data their role permits;
• Tenant isolation, so each campaign's data is logically segregated and not accessible to other tenants;
• Device binding, to restrict account access to authorized devices;
• Access controls, logging and monitoring on our systems.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Customers and users share responsibility for security by keeping their devices secure, protecting their access, and promptly reporting any suspected compromise to hello@vijetha.org.

10. Your rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data (see Section 11);
• Withdraw consent where processing is based on consent (for example, revoking location permission in your device settings);
• Object to or request restriction of certain processing.

To exercise these rights in relation to account and billing data for which Aravir is the controller, contact us at hello@vijetha.org. Where your request concerns voter data held in a campaign's tenant, the campaign is the controller and is your primary point of contact; we will support the campaign in responding as its processor. We may need to verify your identity before acting on a request.

11. Account & data deletion

You can request deletion of your account and its associated data at any time. This section applies to individual users of our app and to campaign customers. For step-by-step instructions, see our dedicated Delete your account page.

How to request deletion: send an email to hello@vijetha.org from the email address or using the mobile number associated with your account, with the subject line "Account Deletion Request", telling us which account (and, for campaign administrators, which tenant) you want deleted. If you signed up through a campaign, you may also ask your campaign administrator to remove your access.

What is deleted: on a verified request we will delete or irreversibly anonymize the personal data associated with the account — including account profile data (name, mobile number, email, role) and authentication data — and, where a campaign requests deletion of its tenant, the voter data held in that tenant.

Process and timeline: we will acknowledge a deletion request and, after verifying it, complete deletion within a reasonable period, ordinarily within thirty (30) days. Backups are purged on our normal backup rotation cycle. We may retain a limited set of records where we are legally required to do so (for example, invoices and transaction records needed for tax and accounting), and we will retain only what is necessary for that purpose. Note that deleting an account does not by itself cancel a paid subscription or trigger a refund; billing matters are addressed in our Refund & Cancellation Policy.

12. Children's data

The Platform is a professional tool intended for use by authorized campaign staff who are adults. It is not directed at children, and we do not knowingly permit the creation of accounts by, or the use of the Service by, anyone under the age of 18. If we become aware that an account has been created by a person under 18, we will take steps to remove it.

13. Data location

The Platform and its data are hosted on cloud infrastructure located in and served from India, and our transactional email is handled through an India-based datacenter. If you access the Service from outside India, you understand that your information will be processed in India in accordance with this policy and applicable Indian law.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect constitutes acceptance of the revised policy.

15. Grievance & contact

If you have any questions, concerns or complaints about this policy or how your information is handled, please contact us at hello@vijetha.org. In accordance with applicable Indian information technology rules, our Grievance Officer is:

Chandrasekhar Reddy Allareddy, Grievance Officer
Aravir Technologies Private Limited
2A, Yashoda Homes, Nellore, Andhra Pradesh 524003, India
Email: hello@vijetha.org  ·  Phone: +91 94406 98444

We will acknowledge and endeavour to resolve grievances within the timelines prescribed by applicable law.

Aravir Technologies Private Limited
Registered office: 2A, Yashoda Homes, Nellore, Andhra Pradesh 524003, India
CIN: U62011AP2026PTC126177
Email: hello@vijetha.org  ·  Phone: +91 94406 98444