People Welfare Scheme ("PWS", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our direct-selling platform, mobile application, and website (collectively, the "Platform"). This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India.
1. Information We Collect
When you register and use our Platform, we collect the following personal data:
- Identity Data: Full name (as per PAN), date of birth, PAN number
- Contact Data: Phone number, shipping address (line 1, line 2, city, state, pincode)
- Financial Data: UPI ID, UPI verified name (via penny-drop), commission transaction history
- Referral Data: Referrer username, downline tree structure, invite link usage
- Device Data: Device type, operating system, app version, IP address
- Usage Data: Login timestamps, pages viewed, actions taken on the Platform
2. Purpose of Data Collection
We process your personal data for the following purposes:
- Registration & Identity Verification: To verify your age (18+), identity, and eligibility
- Product Delivery: To ship your physical product to the correct address
- Commission Payouts: To verify your UPI ID and process commission payments
- Tax Compliance: To collect PAN for TDS withholding under Section 194H of the Income Tax Act when cumulative commissions exceed ₹15,000
- Fraud Prevention: To detect and prevent fraudulent registrations, multiple accounts, and unauthorized access
- Communication: To send transaction confirmations, credential delivery, shipping updates, and policy changes via SMS
- Legal Compliance: To meet requirements under DPDPA 2023, Consumer Protection (Direct Selling) Rules 2021, and applicable tax laws
3. Legal Basis for Processing
Under the DPDPA 2023, we process your data based on:
- Consent: You provide explicit consent during registration by checking the Privacy Policy checkbox
- Contractual Necessity: Processing required to deliver the product and services you purchased
- Legal Obligation: Tax reporting (TDS), direct selling compliance, and anti-money laundering obligations
4. Data Sharing
We share your personal data only with the following categories of recipients, and only to the extent necessary:
- Payment Gateway (Razorpay/Cashfree): UPI ID and transaction details for payment processing and payouts
- Shipping Partner (Shiprocket/Delhivery): Name, phone, and shipping address for product delivery
- SMS Provider (AWS SNS/Twilio): Phone number for credential and notification delivery
- Cloud Infrastructure (AWS): All data is stored on AWS servers with encryption at rest
- Tax Authorities: PAN, commission data for TDS filing (Form 26Q) as required by law
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
5. Data Storage & Security
- All data is stored on Amazon Web Services (AWS) infrastructure within India
- Data is encrypted at rest (AES-256) and in transit (TLS 1.2+)
- PAN numbers are stored in hashed format and accessible only to authorized admin roles
- PIN credentials are stored as salted hashes — we cannot see or recover your PIN
- Admin access requires 2FA (TOTP) with immutable audit logging
- API endpoints are protected by rate limiting, WAF, and webhook signature verification
6. Data Retention
- Active accounts: Data retained for the lifetime of the account plus 5 years post-deactivation
- Transaction records: Retained for 8 years as required by Indian tax law
- Admin audit logs: Retained for minimum 5 years (immutable)
- Deleted accounts: Personal data anonymized within 90 days of deletion request, except data required for legal compliance
7. Your Rights (Under DPDPA 2023)
As a Data Principal, you have the following rights:
- Right to Access: Request a summary of your personal data held by us
- Right to Correction: Request correction of inaccurate personal data
- Right to Erasure: Request deletion of your personal data (subject to legal retention obligations)
- Right to Withdraw Consent: Withdraw consent at any time; this may result in account deactivation
- Right to Grievance Redressal: File a complaint with our Grievance Officer or the Data Protection Board of India
To exercise any right, email privacy@peoplewelfarescheme.com with your registered phone number and username.
8. Cookies & Tracking
Our Platform uses minimal cookies for session management and security. We do not use third-party advertising trackers. Analytics data (if collected) is anonymized and used solely for improving Platform performance.
9. Children's Privacy
Our Platform is strictly for users aged 18 and above. We do not knowingly collect data from minors. If we discover that a minor has registered, we will immediately deactivate the account and delete all associated personal data.
10. Grievance Officer
In accordance with DPDPA 2023 and the Consumer Protection (Direct Selling) Rules, 2021, our designated Grievance Officer is:
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be published on this page with an updated "Last updated" date. Significant changes will also be communicated via SMS to your registered phone number. Continued use of the Platform after changes constitutes your acceptance.
12. Contact Us
For any privacy-related queries, contact us at: