SEVAHETU – PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy (“Policy”) governs the collection, use, processing, and disclosure of personal data by Sevahetu (“we”, “our”, “us”) through its mobile application and/or website https://www.sevahetu.com (collectively, the “Platform”).

Sevahetu is a technology-based facilitation platform designed to assist users during emergency situations by connecting them with independent responders and internal coordinators, including support for hospital coordination.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information in accordance with this Privacy Policy.

2. SCOPE OF POLICY

This Policy applies to all users who access or use the Platform and covers all personal data collected in connection with such use.

3. INFORMATION WE COLLECT

We may collect and process the following categories of personal data:

3.1 Identity Information

• Name

3.2 Contact Information

• Mobile number

3.3 Location Data

• Real-time GPS location
• Saved addresses

3.4 Emergency Information

• Nature or type of emergency

3.5 Medical Information

• Information voluntarily provided by the user

3.6 Hospital Preferences

• Selected hospital details

3.7 Technical Data

• IP address
• Device ID
• Application usage logs

3.8 Emergency Contacts

• SOS contact details

Clarification:

Sevahetu does not record or store call recordings.

4. PURPOSE OF DATA PROCESSING

Your personal data is processed for the following purposes:

• Facilitating emergency response and assistance
• Assigning and enabling coordination with nearby responders
• Providing real-time monitoring and support through coordinators
• Assisting with hospital-related coordination and logistics
• Ensuring user safety, fraud prevention, and service optimization

5. DATA SHARING AND DISCLOSURE

5.1 With Responders

Limited and necessary information may be shared with responders, including:

• Pickup location (map-based)
• Basic emergency type
• Temporary or masked contact access (or direct contact during pilot phase)

Responders are not provided with sensitive personal data unless strictly required.

5.2 With Coordinators

Sevahetu coordinators may access and process user data for operational purposes, including:

• Live location tracking
• Emergency context
• Contact access
• Basic user details

Such access is strictly limited to facilitating emergency handling and coordination.

5.3 With Hospitals and Medical Facilities

Where necessary, relevant information may be shared with hospitals or medical facilities, including:

• Basic identification details
• Emergency-related information
• Medical information (if voluntarily provided)

5.4 With Service Providers

We may engage trusted third-party service providers for infrastructure, storage, analytics, communication, and support services. These providers process data only as necessary and under appropriate safeguards.

6. LEGAL BASIS FOR PROCESSING

We process personal data in accordance with applicable laws, including the Digital Personal Data Protection Act, 2023.

Processing is based on:

• Your explicit consent
• The necessity to provide emergency facilitation services
• Compliance with legal and regulatory obligations

7. DATA MINIMIZATION

We collect and process only such data as is necessary for the purposes outlined in this Policy.

8. DATA RETENTION

Personal data is retained only for as long as necessary to fulfill operational, legal, and service-related purposes, unless a longer retention period is required.

9. USER RIGHTS

Subject to applicable laws, you may:

• Withdraw your consent
• Request access to your personal data
• Request correction or deletion of your data

Requests may be submitted through the contact details provided below.

10. DATA SECURITY

We implement reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or misuse.

However, no method of transmission or storage is completely secure, and users acknowledge inherent risks associated with digital systems.

11. NO SALE OF PERSONAL DATA

Sevahetu does not sell, rent, lease, or commercially exploit personal data.

Data sharing is strictly limited to:

• Emergency facilitation
• Coordination services
• Secure storage and infrastructure support

12. THIRD-PARTY INFRASTRUCTURE

We utilize third-party infrastructure and cloud services for storing and processing data. Such providers may operate across multiple locations, and data may be processed outside the user’s immediate jurisdiction, subject to appropriate safeguards.

13. CHILDREN’S PRIVACY

The Platform is intended for users aged 18 years and above. Minors may use the Platform only under the supervision of a parent or legal guardian.

14. CHANGES TO THIS POLICY

We reserve the right to modify or update this Privacy Policy at any time. Continued use of the Platform constitutes acceptance of the updated Policy.

15. GRIEVANCE REDRESSAL

If you have any questions, concerns, or complaints regarding this Policy or data processing practices, you may contact: