Privacy Policy

We collect only what the service you choose needs. Fields that are optional are marked on each form.

Please share identity documents only through the official upload steps in your account or application — not by email or social media — and only the documents a service actually asks for.

We process your personal data on the basis of the consent you give when you submit a form, create an account or request a service, and for legitimate uses permitted by law — for example, to comply with tax and accounting obligations, respond to lawful requests from authorities, or prevent fraud.

You may withdraw consent at any time (see “Your rights” below). Withdrawal does not affect processing already carried out, and we may not be able to continue a service that depends on the data you withdraw consent for.

We will not use your data for promotional messages unless you have agreed to receive them. We do not sell your personal data.

We share personal data only as needed to provide the service:

• Government departments, authorities, banks, insurers and other service providers that the service you request is submitted to — only the details that application needs.
• DC Partners (our agency partners) who help you with an application they created or that is assigned to them. Partners see only the applications linked to them.
• Our authorised staff, on a need-to-know basis, to process applications and provide support.
• Technology service providers who process data on our behalf, listed below.
• Authorities where we are required to by law or legal process.

Some of these providers may store or process data on servers outside India. Where that happens, we rely on the provider’s contractual and security commitments, and we will follow any restrictions the Government of India notifies on transfers to particular countries.

Some pages link to third-party websites (for example credit-card offers from banks or their partners). Those sites have their own privacy policies; we may receive a referral fee when you apply through such a link.

We keep personal data only as long as it is needed for the purpose it was collected for, or as the law requires.

• Account profile: While your account is active, and deleted or anonymised after closure unless the law requires us to keep it.
• Service applications and uploaded documents: For as long as needed to complete the service and handle follow-ups or disputes, then deleted, unless a longer period is required by law.
• Payment and invoice records: As long as required under applicable tax and accounting laws (commonly up to 8 years).
• Enquiries / leads: Until the enquiry is closed plus a reasonable follow-up period.
• Smart Print files: Removed automatically by a scheduled clean-up job after the print job is complete.
• OTP records: OTPs are stored only as one-way hashes and expire within minutes.
• Website visit statistics: Stored without IP addresses; kept in aggregate for reporting.

When data is no longer needed, we delete it or anonymise it.

• All traffic to the site is encrypted with HTTPS.
• Uploaded documents are stored in private storage and opened only through short-lived, access-checked links.
• Access is role-based: customers see their own records, partners see only applications linked to them, and staff access is limited to authorised administrators.
• Passwords, PINs and OTPs are stored only as one-way hashes; OTPs expire within minutes and attempts are limited.
• Sign-in and sensitive actions are rate-limited to slow down misuse.
• Card, UPI and bank details are entered on Razorpay's checkout, not on our servers.

No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by law.

Subject to applicable law, you can ask us to:

• give you a summary of the personal data we hold about you and how we use it, and the parties we have shared it with;
• correct, complete or update inaccurate or incomplete data (you can also edit your profile in your account);
• erase data that is no longer needed, unless we must keep it by law (for example invoices);
• withdraw consent you have given;
• nominate another person to exercise your rights in case of death or incapacity;
• address a grievance about how we handle your data.

To make a request, use the privacy request form on our Contact & Grievance page, or write to support@rnos.in. We may need to verify your identity (usually via your registered mobile number) before acting. We aim to acknowledge requests within 7 days and to resolve them within the time required by law.

Cookies: you can change your cookie choices at any time — Cookie Settings.

If you are not satisfied with our response, you may complain to the Data Protection Board of India once the relevant provisions are in force.

Our services are meant for adults. Where a service is for a child (for example a student olympiad registration or a child’s document), it must be requested by a parent or lawful guardian, who provides consent on the child’s behalf. We do not knowingly use children’s data for tracking, behavioural monitoring or targeted advertising.

For privacy questions, requests or complaints, contact our Grievance Officer:

• Email: support@rnos.in
• Phone / WhatsApp: +91 7007595931 (Monday to Saturday, 10:00 AM – 6:00 PM IST)
• Address: RNOS India Private Limited, Orai, Jalaun, Uttar Pradesh, India

We will update this policy when our practices or the law change, and show the new “last updated” date above. If a change materially affects how we use data you have already given us, we will tell you through the site or WhatsApp before it takes effect.