Privacy Policy

Data fiduciary status, collection, Aadhaar protection, location tracking, security, sharing, DPDP rights and retention under Section 12.

Retailix Private Limited · CIN: U47912AP2026PTC125586 · Effective August 2026

Applies to all platforms

Applicable Laws

DPDP Act 2023 | IT Act 2000 | Aadhaar Act 2016 | UIDAI Guidelines.

Data Fiduciary

Retailix Private Limited (CIN: U47912AP2026PTC125586), operating as Rozipe, is the Data Fiduciary under the Digital Personal Data Protection Act 2023, responsible for all personal data processed through the Rozipe platform.

Data Collected

Category	Data Points	Unskilled Worker	Skilled Worker	Recruiter
Identity	Name, photo, Aadhaar, PAN	YES	YES	YES
Contact	Mobile, email, address	YES	YES	YES
Financial	Bank account, IFSC, UPI	YES	NO	YES
Health	Blood group, emergency contact	YES	NO	NO
Professional	Category, skills, experience	YES	YES	YES
Location (GPS)	Active shift only	YES	NO	NO
Attendance	OTP logs, timestamps	YES	NO	NO
Resume / CV	Professional document	NO	YES	NO
Company	GST, registration, rep details	NO	NO	YES

Aadhaar Data Protection

Aadhaar numbers stored in masked format only: XXXX XXXX 1234
Full number encrypted with AES-256 bit encryption in secure database
No Rozipe employee may view an unmasked Aadhaar number
Aadhaar used only for identity verification — no other purpose
Never shared with any third party except as required by law or court order

Location Data — Unskilled Workers Only

GPS tracking active ONLY during a confirmed active shift
Tracking stops automatically upon OTP check-out
Location history retained for 90 days for dispute resolution — then permanently deleted
Explicit consent obtained at app installation — worker may not be tracked without consent

Data Security

All data: AES-256 bit encryption at rest and in transit
Financial data: PCI-DSS compliant storage and processing
Regular third-party security audits
Role-based access controls — employees access only what their role requires
Data breach: All affected users informed within 72 hours

User Rights Under DPDP Act 2023

Right to Access: View all personal data stored about you
Right to Correction: Request correction of inaccurate data
Right to Erasure: Request deletion upon account closure
Right to Grievance: File complaint through in-app support
Right to Know: Be informed of how and with whom your data is shared

Data Retention

Data Type	Retention Period	Post-Retention Action
Active account data	Account duration + 2 years	Anonymized or deleted
OTP & attendance records	3 years	Permanently deleted
Payment & financial records	7 years	Permanently deleted
GPS location history	90 days	Permanently deleted
KYC documents	Account duration + 5 years	Securely deleted
Skilled worker resume / profile	Account duration + 1 year	Permanently deleted
Closed account data	2 years post-closure	Permanently deleted