ColdKonnect Tech Solutions Pvt Ltd (“Cold Konnect”, “we”, “us”, “our”) operates the Cold Konnect mobile applications (the “User App” and the “Partner App”) and the website at coldkonnect.com (together, the “Services”). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the IT (Reasonable Security Practices) Rules, 2011.
1. Information we collect
1.1 Information you provide
- Account & identity: mobile number (for OTP login), name, profile photo, language preference, state & district.
- Partner KYC: Aadhaar (last 4 digits stored), PAN, FSSAI / GST certificate, ownership / lease proof, bank account (verified via Razorpay; full account number is never stored in our systems).
- Listings: business name, addresses, photos, chamber/truck details, pricing, capacities.
- Community content: posts, photos, comments, ratings.
- Communications: emails, WhatsApp opt-in, support tickets.
1.2 Information collected automatically
- Device data: device model, OS version, app version, IP, advertising identifiers (for crash analytics only).
- Location: approximate (for nearest-listing discovery) and precise (only on partner devices for GPS tracking, with explicit consent).
- IoT telemetry: temperature, humidity, door state, GPS — collected from devices the partner owns and operates.
- Usage data: screens visited, features used, crash logs — aggregated and pseudonymous.
2. How we use your information
- To create and maintain your account and provide the Services.
- To match users with nearby cold storage, refrigerated trucks, and marketplace vendors.
- To verify partner identity, ownership and compliance documents.
- To process subscription payments via Razorpay.
- To send transactional notifications (push, WhatsApp, SMS, email).
- To detect fraud, abuse, and to enforce our Terms of Service.
- To improve product quality through aggregate analytics — never linked to your name or mobile number.
3. Sharing & disclosure
We do not sell personal data. We share limited data with:
- Service providers — AWS, Razorpay, MSG91, Gupshup, Plant.id, Google Maps Platform, OpenWeatherMap — under strict data processing agreements.
- Partners you contact — when you tap “Call” or “WhatsApp” on a listing, your phone number is shared with that partner via your device dialer / WhatsApp app.
- Legal authorities — when required by law, court order or government request, only to the extent required.
- In a business transfer — successor entity bound by this policy.
4. Data retention
We retain account data for as long as your account is active and for up to 36 months after deactivation to comply with statutory record-keeping. IoT telemetry is retained at full resolution for 90 days and as monthly aggregates indefinitely. Payment and invoice records are kept for 8 years, as required under applicable Indian tax law.
5. Your rights
Under the DPDP Act you have the right to:
- Access your personal data and obtain a copy.
- Correct inaccurate or outdated data.
- Withdraw consent (where processing is consent-based) and have your data erased.
- Nominate a person to exercise your rights on your behalf.
- File a complaint with the Data Protection Board of India.
To exercise any right, email info@coldkonnect.com. We will respond within 30 days.
6. Security
All data in transit is protected with TLS 1.2+. Sensitive data at rest is encrypted with AES-256. We follow ISO 27001 controls, conduct quarterly internal audits, and run a responsible disclosure programme. Report vulnerabilities to info@coldkonnect.com.
7. Children
Our Services are not intended for individuals under 18. We do not knowingly process personal data of minors. If you believe a minor has provided us data, contact us and we will delete it.
8. Cross-border transfers
Personal data is processed and stored in AWS data centres located in Mumbai (ap-south-1) and Hyderabad (ap-south-2). We do not transfer personal data outside India except to processors notified by the Government of India under the DPDP Act.
9. Changes to this policy
We will notify you of material changes via the app, email, or WhatsApp at least 14 days before the change takes effect. Continued use of the Services after a change indicates acceptance.
10. Contact
Data Protection Officer
ColdKonnect Tech Solutions Pvt Ltd
Hyderabad, Telangana, India
Email: info@coldkonnect.com