Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") sets forth the principles, protocols, and legal commitments governing the collection, processing, storage, transmission, and protection of personal data by SureMe Multipurpose Pvt. Ltd. (operating under the corporate identity "Reseal" and governing the "Krishi26" platform, hereinafter referred to as "Company", "we", "us", or "our").

This Policy applies to all individuals, representatives, corporate entities, and delegates ("User", "you", or "your") who access or interact with krishi26.com, our digital portals, registration forms, electronic communications, and related online services (collectively, the "Services").

We are committed to operating in full accordance with the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023 (India), international anti-spam standards (CAN-SPAM Act), and cloud communications standards, including Amazon Web Services (AWS) Simple Email Service (SES) Acceptable Use and Sending Policies.

2. Explicit Opt-In and Anti-Spam Policy

The Company enforces a strict, zero-tolerance policy against unsolicited electronic commercial communications ("spam").

3. Information We Collect

In delivering our Services and administering digital interactions, we may collect the following categories of data:

• Personal and Identification Information: Full legal name, professional title, corporate designation, organization or company name, primary email address, telephone/mobile number, and official business address.
• Organizational Profile Data: Enterprise details, operational sector, domain classification, state and city of operation, founding year, website URL, and supporting documentation submitted during professional inquiries or credential applications.
• Transaction and Billing Records: Records of fees paid, service tier selections, invoice numbers, tax identifiers (e.g. GST numbers), and payment confirmation identifiers. All financial payments are processed exclusively through certified, Reserve Bank of India (RBI) authorized, PCI-DSS compliant third-party payment gateways; the Company does not store raw credit/debit card numbers or security CVVs.
• Automated Technical and Usage Telemetry: Internet Protocol (IP) address, operating system, browser specifications, referrer headers, access timestamps, and engagement telemetry (such as email delivery receipts and interaction confirmations required to verify transmission integrity).

4. Purpose of Data Processing

Personal information collected by the Company is processed solely for legitimate operational and administrative purposes, including:

• Reviewing, authenticating, and administering candidate records, registrations, and formal submissions.
• Issuing transactional documentation, tax invoices, credential receipts, and verified operational confirmations.
• Transmitting service notifications, mandatory operational alerts, administrative announcements, and platform updates.
• Responding to inquiries, servicing customer support requests, and managing authorized communications.
• Complying with statutory reporting, taxation, auditing, and corporate regulatory obligations under Indian law.

5. Email Communications & Deliverability Standards

To maintain reliable email deliverability, adhere to AWS SES operational benchmarks, and protect recipient inboxes, our electronic communications conform to the following protocols:

6. Third-Party Cloud Infrastructure & Processors

To guarantee operational availability, data redundancy, and cryptographic security, personal information is processed through enterprise-tier cloud infrastructure providers bound by non-disclosure protocols:

• Cloud Communications Infrastructure: Transactional and operational email transmission is performed via Amazon Web Services (AWS Simple Email Service - SES) under strict infrastructure security and privacy terms.
• Server Hosting & Databases: Certified, enterprise-grade cloud server environments providing 256-bit encryption for data at rest and data in transit.
• Payment Aggregators: Regulated payment processors operating under PCI-DSS Level 1 compliance.

7. Zero Sale or Commercialization of Personal Data

SureMe Multipurpose Pvt. Ltd. does not sell, rent, lease, monetize, license, or trade your personal data, email address, or telephone number to any third-party marketing agency, data broker, telemarketer, or commercial advertiser.

Data is shared strictly with authorized operational vendors and infrastructure partners solely to the extent necessary to perform designated service functions, and never for independent third-party commercial solicitation.

8. Data Subject Rights & Retention Policy

In compliance with the Digital Personal Data Protection Act, 2023, Users are entitled to exercise the following legal rights regarding their personal data:

• Right of Access & Summary: You may request a confirmation and written summary of the personal information the Company maintains concerning you.
• Right to Correction & Updating: You may request the rectification of inaccurate, misleading, or outdated personal information.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your personal records from our active marketing and operational databases, except where continued retention is required under statutory taxation, corporate auditing, or legal defense obligations.

To exercise any of these statutory rights, submit a written communication to our designated Grievance & Compliance desk at [email protected].

9. Information Security Safeguards

The Company enforces industry-standard technical, organizational, and physical safeguards designed to preserve the confidentiality, integrity, and availability of personal information. All digital communications are encrypted in transit via Transport Layer Security (TLS/SSL). Access to database records is restricted on a strictly controlled, role-based need-to-know basis protected by multi-factor authentication (MFA).