Privacy Policy

Last updated: July 2025 | Version 1.0

Ryot Mitra (“we”, “our”, “the Platform”) is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act)and applicable Indian law. This policy explains what data we collect, why, and your rights as a Data Principal.

1. Who We Are (Data Fiduciary)

Ryot Mitra is an agricultural drone booking platform operating in India. We act as the Data Fiduciary under the DPDP Act 2023 for all personal data processed on this platform.

Contact: grievance@ryotmitra.com

2. What Personal Data We Collect

Data	Purpose	Required?
Full name	Account identification	Yes
Phone number	Login, OTP verification, booking contact	Yes
Email address	Notifications (optional)	No
Password (bcrypt hashed)	Account security	Yes
GPS coordinates / village / district	Match farmers with nearby drone pilots	Yes
Farm details (land size, crop type)	Booking service selection	Yes (farmers)
Drone license & operator documents	Pilot verification by admin	Yes (pilots)
Profile photo	Platform identity	No
Booking history	Service delivery and records	Automatic

3. Legal Basis for Processing

We process your personal data based on your explicit consent given at the time of registration, as required under Section 6 of the DPDP Act 2023. You may withdraw consent at any time by deleting your account.

4. How We Use Your Data

To create and manage your account
To connect farmers with verified drone pilots near them
To process and track drone service bookings
To verify drone pilot credentials before approval
To provide real-time weather safety information for bookings
To send booking status updates

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Retention

We retain your personal data for as long as your account is active. Upon account deletion:

Profile data is permanently deleted within 30 days
Booking records may be retained for up to 3 years for legal/tax compliance
Uploaded documents are deleted from our storage within 30 days

6. Data Storage & Security

Data stored on MongoDB Atlas (cloud, India-accessible servers)
Documents stored on Cloudinary (encrypted at rest)
All passwords are bcrypt hashed — never stored in plain text
All connections use HTTPS/TLS encryption
Access controlled via JWT tokens with role-based permissions

7. Your Rights as a Data Principal (DPDP Act 2023)

📄 Right to Access

Request a copy of all personal data we hold about you.

Download My Data →

✏ Right to Correction

Update or correct any inaccurate personal data.

Edit Profile →

🗑 Right to Erasure

Request permanent deletion of your account and personal data.

Delete Account →

📢 Right to Grievance

Raise a complaint about how your data is handled.

File a Grievance →

8. Children's Data

Ryot Mitra is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, contact us at grievance@ryotmitra.com.

9. Changes to This Policy

We will notify registered users of any material changes to this policy via the platform. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact & Grievance Officer

Grievance Officer — Ryot Mitra

Email: grievance@ryotmitra.com

Response time: Within 48 hours of receipt

Resolution time: Within 30 days as per DPDP Act 2023

Submit a Grievance