Privacy Policy
1. Who we are and what this covers
Chunav Mitra is an election management service for Urban Local Body and Panchayat elections, built and operated by DG Graphics and Marketing, Nagaur, Rajasthan, India ("we", "us"). This policy explains how personal data is handled when you use the Chunav Mitra Android app, the web app, the owner console, the shared voter-slip links we create, and the fuel-pump desk page. It is written to meet Google Play's User Data policy and the requirements of Indian law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 with its Reasonable Security Practices Rules, 2011.
Chunav Mitra is not affiliated with the Election Commission or any government body, and it is not a voting or election-results service.
2. Whose data it is
- Account data (your name, sign-in email, role, sign-in and device records) is collected by us, and we decide how it is used to run the service. For this we act as the data fiduciary / controller.
- Campaign data (voter lists, the mobile numbers and notes your team records, tasks, visits, surveys, expenses and so on) belongs to the candidate or organisation that subscribes to Chunav Mitra (the "customer"). The customer decides what to record and why, and we process it on the customer's behalf, only to provide the service. Requests about campaign data are best made to the customer first; we will also help directly (section 9).
- The electoral roll is a public record published by the State Election Commission. We load it for the areas a customer has bought so that the customer's team can work from it. We do not create it.
3. What we collect
| Data | What it includes | Where it comes from | Needed or optional |
|---|---|---|---|
| Account and sign-in | Name, email address, role, the wards, booths and modules you may use, optional mobile number | You, or the owner or administrator who created your account | Needed to sign in |
| Sign-in security | One-time sign-in codes (stored hashed, short-lived), session tokens, a device label, IP address, browser or app identifier, time last used | Created when you sign in | Needed; you can see and end your sessions under More → Your devices |
| Electoral roll | Name, relative's name, age, gender, voter ID (EPIC) number, house number, ward, booth (part) and polling station of electors in the customer's purchased area | Official State Election Commission rolls | Part of the service |
| Voter contact and canvass records | Mobile numbers, notes, a colour category showing how an elector is expected to vote (for example supporter or undecided), whether voted, hidden or added electors | The customer's team members | Optional, entered by the customer's team. Colour categories can reveal political opinion, so we treat them as sensitive and show them only inside the customer's own account. |
| Field activity | Visits, surveys and responses, tasks, booth checklists, polling-day turnout and incident records | The customer's team members | Entered by team members |
| Location | Latitude and longitude, attached to a visit or checklist only when you record one and allow location access | Your device, at that moment | Optional. We do not track your location in the background. |
| Files and photos | Receipts, documents, a logo and an advertisement image you choose to upload | You | Optional |
| Campaign operations | Expenses and approvals, inventory, events, training records, announcements, vehicles, drivers (name, phone, licence details), fuel tokens and pump records | The customer's team members | Entered by team members |
| Voter slips | The slip content (elector name, ward, booth, polling station and similar). If you share a slip by link, a picture of it is stored on our server for 45 days so the link opens for the recipient. | Created by you | Only when you create or share a slip |
| Payments | Order and payment identifiers, amounts and status for subscriptions. Card, UPI and bank details are entered with Razorpay, our payment processor, and are never seen or stored by us. | You and Razorpay | Only when you buy |
| Service logs | Request time, address and result, error records and an audit trail of important changes (who changed what, when, from which IP address) | Our servers | Needed for security and accountability |
| Support | What you tell us when you contact us | You | Optional |
We do not collect your contacts, SMS or call history, microphone recordings, advertising ID or precise location in the background, and the app has no advertising or analytics SDKs. When you open the booth map, your device fetches the map library from unpkg.com and map tiles from OpenStreetMap, which can see your IP address as any website would.
Some information on this service is about people who are not our users, for example electors on a roll and the people the customer's team calls on. Section 10 explains their position.
4. Permissions the Android app asks for
- Internet: to talk to our servers.
- Nearby devices (Bluetooth connect and scan): only to find and print voter slips on a Bluetooth thermal printer you choose. The scan is declared as never used to work out your location. On Android 11 and older, Android requires Bluetooth and location permissions for this scan to work; we use them only for the printer.
- Location (when asked): only if you allow it when recording a visit or checklist, as described above.
- Photos and files: only when you choose a file to attach; the app uses the system file picker and does not read your gallery.
- Notifications: in-app announcements and task alerts.
You can withdraw any permission in your phone's Settings → Apps → Chunav Mitra → Permissions. The features that depend on it then stop working; nothing else is affected.
5. Why we use it
- To sign you in and keep your account secure.
- To show a customer's team the roll, lists, tasks, surveys and reports they are permitted to see, and to run the modules the customer has chosen.
- To print and share voter slips, send sign-in codes and notices by email, and take payment for subscriptions.
- To prevent misuse, investigate problems, keep an audit trail, and meet legal obligations.
- To support customers and improve the reliability of the service, using aggregate counts and error logs rather than reading campaign data.
We use personal data only for the purposes above, on the basis of your consent, the contract with the customer, or a legitimate use permitted by law. We do not use it for advertising, we do not build profiles to sell, and we do not make decisions about people by automated means.
6. Who it is shared with
- The customer's own team. Each person sees only what their role, ward, booth and module access allow. A customer cannot see another customer's data.
- Razorpay (payment processing) when you buy a subscription.
- Email delivery. Sign-in codes and notices are sent through the email service we use for the product.
- Our hosting. The service runs on a server operated by DG Graphics and Marketing in India. Backups are kept on our own storage.
- The apps you choose. When you tap WhatsApp, SMS or Share on a slip, the slip text or picture is handed to that app by your phone. What the recipient or that app does with it is outside our control.
- The law. We may disclose data if a court, an authority or the law requires it, or to protect rights, safety and the security of the service.
- If DG Graphics and Marketing is restructured or sold, the service and its data may move to the new owner, bound by this policy.
We do not sell personal data and do not share it for advertising.
7. How long we keep it
- Sign-in codes: removed about a week after they expire. Sign-in sessions: end when they expire or when you or an administrator end them.
- Shared slip links: 45 days, then the stored picture is deleted.
- Campaign data: kept while the customer's subscription is active. When it ends, or when an account is closed, we delete or anonymise the customer's campaign data within 90 days of a request, unless the law requires us to keep it.
- Payment and invoice records: as long as the law requires for tax and accounting (up to 8 years).
- Security audit logs: up to 12 months, longer only if needed for an investigation or a legal claim.
- Backups are overwritten on a rolling cycle, so deleted data disappears from backups within 35 days.
8. How we protect it
- All traffic between the apps and our servers is encrypted in transit (HTTPS).
- Sign-in is by a one-time code to your registered email; there is no password to steal. Sessions are tied to your device and can be ended from More → Your devices.
- Every request is checked on the server against the customer account, role, ward, booth and module permissions. A customer's data is separated from every other customer's.
- Important changes are recorded in an audit trail. Access by our own staff to a customer's data is limited and recorded.
- Sensitive fields such as sign-in codes and session tokens are stored hashed.
No system is perfectly secure. If a breach affects your personal data, we will tell the people and authorities required by law, without undue delay.
9. Your rights and choices
You may ask us to: tell you what data we hold about you; correct it; delete it; stop using it; withdraw a consent you gave; or nominate someone to exercise these rights for you. Under the Digital Personal Data Protection Act you may also complain to the Data Protection Board of India after you have used our grievance process.
- Delete your account and data: use the account and data deletion page, or More → Delete my account in the app, or email us (section 13).
- End your sessions: More → Your devices.
- Customers and owners can remove electors, contacts and team members from their own account, and can ask us for an export or deletion of their campaign data.
- We reply to rights requests within 30 days and to grievances within 15 days. We may need to confirm who you are first, by writing to your registered email.
10. If you are a voter on a roll, or someone a campaign has recorded
If your name is on an electoral roll, it appears in Chunav Mitra because the roll is public. If a campaign team has recorded your mobile number, a note about you, or a colour category, that was entered by the customer, who is responsible for having a proper reason to do so. You can ask the campaign to remove it, or write to us at the address in section 13 with your voter ID number and the ward, and we will remove the contact details, notes and category from the customer's account, or pass your request to the customer and tell you when it is done. We do not contact voters ourselves.
11. Children
Chunav Mitra is for election workers and candidates aged 18 or over and is not directed at children. Electoral rolls list only people aged 18 or over. If you think a child's data has reached us, write to us and we will delete it.
12. Changes to this policy
If we change this policy in a way that matters, we will post the new version here with a new effective date and, where the law requires, tell account holders in the app or by email before it takes effect.
13. Contact and grievance officer
DG Graphics and Marketing
Nagaur, Rajasthan, India
Email: support@dggraphics.in
Phone: +91 86190 70738 or +91 96806 56538
Grievance Officer: DG Graphics and Marketing, at the email address or phone numbers above. Please write "Privacy" in the subject.
हिंदी सारांश
चुनाव मित्र (DG Graphics and Marketing का उत्पाद) उम्मीदवारों और उनकी टीम को वार्ड, बूथ और पंचायत चुनाव अभियान चलाने में मदद करता है। यह सारांश है; पूरी और बाध्यकारी नीति ऊपर अंग्रेज़ी में है।
- हम क्या एकत्र करते हैं: आपका नाम, ईमेल, भूमिका, साइन-इन कोड और डिवाइस की जानकारी; आपकी टीम द्वारा दर्ज मतदाता संपर्क (मोबाइल नंबर), नोट, रंग-श्रेणी, भेंट, सर्वे, खर्च और अन्य अभियान रिकॉर्ड; वैकल्पिक रूप से भेंट दर्ज करते समय स्थान (लोकेशन); भुगतान का केवल ऑर्डर/भुगतान क्रमांक (कार्ड या UPI की जानकारी हम नहीं देखते, वह Razorpay के पास रहती है)।
- डेटा किसका है: खाता-संबंधी डेटा के लिए हम ज़िम्मेदार हैं। अभियान का डेटा उस उम्मीदवार/संस्था का है जिसने सेवा ली है; हम उसकी ओर से उसे केवल सेवा देने के लिए संसाधित करते हैं। मतदाता सूची राज्य निर्वाचन आयोग की सार्वजनिक सूची है।
- हम क्या नहीं करते: डेटा नहीं बेचते, विज्ञापन नहीं दिखाते, विज्ञापन-आईडी या तृतीय-पक्ष एनालिटिक्स का उपयोग नहीं करते, आपके कॉन्टैक्ट, SMS या माइक्रोफ़ोन तक नहीं पहुँचते, और पृष्ठभूमि में आपका स्थान नहीं देखते।
- अनुमतियाँ: इंटरनेट; ब्लूटूथ केवल पर्ची प्रिंटर ढूँढने और छापने के लिए; स्थान केवल तभी जब आप भेंट दर्ज करते समय अनुमति दें; फ़ाइल केवल तब जब आप स्वयं चुनें।
- कितने समय रखते हैं: साइन-इन कोड लगभग एक सप्ताह में हटते हैं; साझा पर्ची लिंक 45 दिन; सदस्यता समाप्त होने या खाता बंद करने के अनुरोध पर अभियान डेटा 90 दिन में हटाया या अनाम किया जाता है (जहाँ क़ानून रखने को कहे वहाँ छोड़कर); भुगतान रिकॉर्ड क़ानून के अनुसार (अधिकतम 8 वर्ष)।
- आपके अधिकार: अपना डेटा जानना, सुधारना, हटवाना, सहमति वापस लेना। खाता और डेटा हटाने के लिए यह पृष्ठ, ऐप में More → Delete my account, या नीचे दिया ईमेल उपयोग करें। हम 30 दिन में उत्तर देते हैं।
- बच्चे: यह सेवा 18 वर्ष या अधिक आयु के लिए है।
- संपर्क / शिकायत अधिकारी: DG Graphics and Marketing, support@dggraphics.in, +91 86190 70738 or +91 96806 56538, Nagaur, Rajasthan, India