We collect the following categories of information when you register and use ihandel:

We do not collect your location, contacts, photos, or any other device data beyond what is listed above. We do not require access to your SMS inbox.

We use your information solely for the following purposes. We will never use your data in a way not listed here without first obtaining your explicit consent:

• Processing and completing your prepaid recharge transactions with the selected operator
• Sending transaction confirmations, receipts, and important service notifications
• Providing customer support and resolving transaction disputes or refund requests
• Detecting, preventing, and investigating fraud or unauthorized account activity
• Improving app performance, reliability, and user experience through anonymized analytics
• Complying with applicable Indian legal, regulatory, and tax obligations

We do not use your data for advertising, behavioral profiling, or any form of targeted marketing. We do not sell, rent, or license your personal information to any third party for commercial purposes.

ihandel shares your personal data only with the strictly limited categories of recipients described below, and only as necessary to deliver our service:

• Telecom operators — the mobile number and plan details required to process and activate your recharge
• Payment processors — payment transaction data shared with our PCI-DSS Level 1 certified payment gateway partners solely to process your payment
• Cloud infrastructure — data is stored on secure servers physically located in India, compliant with applicable data localization requirements under Indian law
• Fraud prevention — anonymized risk signals may be shared with industry fraud detection consortia to protect all users
• Legal authorities — where required by applicable law, court order, or a lawful request from a government body with jurisdiction over ihandel

We require all third-party processors to maintain appropriate security standards and to use your data only for the specific purpose for which it was shared. We do not permit our processors to use your data for their own marketing or analytics.

We implement a comprehensive set of technical and organizational security measures to protect your personal data:

• 256-bit AES encryption for all personal data and transaction records stored at rest
• TLS 1.3 encryption for all data transmitted between your device and our servers
• Regular third-party security audits and annual penetration testing by certified security firms
• Role-based access controls — only authorized personnel with a demonstrated need can access personal data
• Payment data is processed exclusively by our PCI-DSS certified gateway partners; raw card numbers are never stored on ihandel servers
• Multi-factor authentication for all administrative access to production systems
• Automated monitoring and alerting for suspicious access patterns or anomalies

In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant authorities within 72 hours of becoming aware, in accordance with applicable law.

We retain different categories of data for different periods, based on operational needs and legal obligations:

• Account information is retained for as long as your account remains active
• Transaction records and payment receipts are retained for 7 years as required by Indian financial regulations (the Income Tax Act and GST regulations)
• Customer support communications are retained for 3 years
• Anonymized usage analytics data is retained indefinitely as it cannot be linked back to you

You may request deletion of your account and personal data at any time by contacting us at privacy@ihandel.app. We will process deletion requests within 30 days, subject to mandatory retention obligations imposed by law.

Under the Digital Personal Data Protection Act (DPDPA) 2023 and other applicable Indian data protection law, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to correction — request correction of inaccurate or incomplete personal data
• Right to erasure — request deletion of your personal data, subject to mandatory legal retention obligations
• Right to withdraw consent — withdraw consent for any optional data processing at any time, without affecting prior lawful processing
• Right to grievance redressal — raise a complaint with our Data Protection Officer or with the relevant data protection authority
• Right to nominate — nominate a person who may exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, contact our Data Protection Officer at privacy@ihandel.app. We will acknowledge your request within 3 business days and respond fully within 30 days.

The ihandel mobile application does not use advertising cookies, tracking pixels, or third-party marketing SDKs of any kind. Our data practices are limited to:

• Essential session tokens — to keep you securely logged in between sessions; these expire when you log out
• Anonymized crash reports — to identify and fix app stability issues; these contain no personally identifiable information
• Anonymized product analytics — aggregate feature usage data to prioritize improvements; cannot be linked to individual users

We do not perform cross-app tracking, cross-device fingerprinting, or share any identifiers with advertising networks. If you use our website (ihandel.app), we use only essential first-party cookies required for navigation and security — no third-party advertising cookies.

ihandel is intended for users who are 18 years of age or older. Our service involves financial transactions and requires a valid Indian mobile number and payment method — these are not accessible to children under the age of 13.

We do not knowingly collect, use, or store personal information from children under the age of 13. If we become aware that a child under 13 has provided personal information, we will promptly delete that information from our systems and close the associated account.

If you believe we may have inadvertently collected information from a child, please contact us immediately at privacy@ihandel.app.

We may update this Privacy Policy from time to time as our services evolve or as required by law. When we make material changes — changes that affect what data we collect, how we use it, or your rights — we will:

• Send you an in-app notification at least 14 days before the changes take effect
• Email registered users a summary of what has changed
• Update the "last updated" date at the top of this page

For minor, non-material changes (such as formatting corrections or clarifications that do not affect your rights), we may update this policy without advance notice. We encourage you to review this policy periodically.

For any privacy-related questions, requests, or complaints, please contact our Data Protection Officer:

We collect the following categories of information when you register and use ihandel:

We do not collect your location, contacts, photos, or any other device data beyond what is listed above. We do not require access to your SMS inbox.

We use your information solely for the following purposes. We will never use your data in a way not listed here without first obtaining your explicit consent:

• Processing and completing your prepaid recharge transactions with the selected operator
• Sending transaction confirmations, receipts, and important service notifications
• Providing customer support and resolving transaction disputes or refund requests
• Detecting, preventing, and investigating fraud or unauthorized account activity
• Improving app performance, reliability, and user experience through anonymized analytics
• Complying with applicable Indian legal, regulatory, and tax obligations

We do not use your data for advertising, behavioral profiling, or any form of targeted marketing. We do not sell, rent, or license your personal information to any third party for commercial purposes.

ihandel shares your personal data only with the strictly limited categories of recipients described below, and only as necessary to deliver our service:

• Telecom operators — the mobile number and plan details required to process and activate your recharge
• Payment processors — payment transaction data shared with our PCI-DSS Level 1 certified payment gateway partners solely to process your payment
• Cloud infrastructure — data is stored on secure servers physically located in India, compliant with applicable data localization requirements under Indian law
• Fraud prevention — anonymized risk signals may be shared with industry fraud detection consortia to protect all users
• Legal authorities — where required by applicable law, court order, or a lawful request from a government body with jurisdiction over ihandel

We require all third-party processors to maintain appropriate security standards and to use your data only for the specific purpose for which it was shared. We do not permit our processors to use your data for their own marketing or analytics.

We implement a comprehensive set of technical and organizational security measures to protect your personal data:

• 256-bit AES encryption for all personal data and transaction records stored at rest
• TLS 1.3 encryption for all data transmitted between your device and our servers
• Regular third-party security audits and annual penetration testing by certified security firms
• Role-based access controls — only authorized personnel with a demonstrated need can access personal data
• Payment data is processed exclusively by our PCI-DSS certified gateway partners; raw card numbers are never stored on ihandel servers
• Multi-factor authentication for all administrative access to production systems
• Automated monitoring and alerting for suspicious access patterns or anomalies

In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant authorities within 72 hours of becoming aware, in accordance with applicable law.

We retain different categories of data for different periods, based on operational needs and legal obligations:

• Account information is retained for as long as your account remains active
• Transaction records and payment receipts are retained for 7 years as required by Indian financial regulations (the Income Tax Act and GST regulations)
• Customer support communications are retained for 3 years
• Anonymized usage analytics data is retained indefinitely as it cannot be linked back to you

You may request deletion of your account and personal data at any time by contacting us at privacy@ihandel.app. We will process deletion requests within 30 days, subject to mandatory retention obligations imposed by law.

Under the Digital Personal Data Protection Act (DPDPA) 2023 and other applicable Indian data protection law, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to correction — request correction of inaccurate or incomplete personal data
• Right to erasure — request deletion of your personal data, subject to mandatory legal retention obligations
• Right to withdraw consent — withdraw consent for any optional data processing at any time, without affecting prior lawful processing
• Right to grievance redressal — raise a complaint with our Data Protection Officer or with the relevant data protection authority
• Right to nominate — nominate a person who may exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, contact our Data Protection Officer at privacy@ihandel.app. We will acknowledge your request within 3 business days and respond fully within 30 days.

The ihandel mobile application does not use advertising cookies, tracking pixels, or third-party marketing SDKs of any kind. Our data practices are limited to:

• Essential session tokens — to keep you securely logged in between sessions; these expire when you log out
• Anonymized crash reports — to identify and fix app stability issues; these contain no personally identifiable information
• Anonymized product analytics — aggregate feature usage data to prioritize improvements; cannot be linked to individual users

We do not perform cross-app tracking, cross-device fingerprinting, or share any identifiers with advertising networks. If you use our website (ihandel.app), we use only essential first-party cookies required for navigation and security — no third-party advertising cookies.

ihandel is intended for users who are 18 years of age or older. Our service involves financial transactions and requires a valid Indian mobile number and payment method — these are not accessible to children under the age of 13.

We do not knowingly collect, use, or store personal information from children under the age of 13. If we become aware that a child under 13 has provided personal information, we will promptly delete that information from our systems and close the associated account.

If you believe we may have inadvertently collected information from a child, please contact us immediately at privacy@ihandel.app.

We may update this Privacy Policy from time to time as our services evolve or as required by law. When we make material changes — changes that affect what data we collect, how we use it, or your rights — we will:

• Send you an in-app notification at least 14 days before the changes take effect
• Email registered users a summary of what has changed
• Update the "last updated" date at the top of this page

For minor, non-material changes (such as formatting corrections or clarifications that do not affect your rights), we may update this policy without advance notice. We encourage you to review this policy periodically.

For any privacy-related questions, requests, or complaints, please contact our Data Protection Officer: