Privacy Policy

1. Who is responsible for your data

Goswami Vagishkumar Networking LLP, Dwarkadhish Mandir, Nicho Bhatvado, Mehsana, Gujarat, operates the GVN portal and is the Data Fiduciary for the personal data described here. In this notice "we" means GVN and "you" means the person whose data it is.

2. Personal data we collect

• Contact and Account details: email address, mobile number, password (stored only in a protected, hashed form), and sign-in records such as time, device and IP address.
• Business details: legal and operating business names, establishment date, GSTIN or trade-licence number, business category, State and District.
• Evidence documents: your business registration document and, for Growth and Leadership plans, turnover figures and audited statements or a CA certificate.
• Payment details: payer name, payment method, bank or UPI reference, payment date, amount, and the payment proof file you upload. We do not collect card numbers or bank passwords.
• Membership records: Member ID, plan, Group, District, activation and renewal dates, receipts, and a history of decisions about your Application and Membership.
• What you create in the portal: profile details, Business Leads, Opportunities and responses, job postings, CVs and job applications, guidance requests, meeting attendance and notes.
• Security data: anti-bot check results and technical logs used to keep the portal safe.
• Requests to add a State, District or business category: your name, mobile number, email address and message, used only to reply to you.

3. Why we use it

• To check your eligibility and let your District review, clarify, approve or reject your Application.
• To verify payments, activate and renew your Membership, and issue receipts.
• To run the features of your plan: Member Directory, Business Leads, Opportunities, jobs, guidance, meetings and notifications.
• To send you service emails and in-portal notifications about your Application, Membership and activity.
• To keep the portal secure, prevent fraud and misuse, and investigate problems.
• To prepare totals and reports for District, State and National office bearers that do not name individual Members.
• To meet legal, tax and accounting duties and respond to lawful requests.

We use your data only for these purposes. We do not sell it, and we do not use it for advertising.

4. Your consent and how to withdraw it

We process your data on the basis of the consent you give when you tick the consent box on the application form, and, where the law allows, for legitimate uses such as meeting a legal duty.

You may withdraw consent at any time by writing to [Grievance Officer email]. Withdrawing is as easy as giving consent. It does not affect processing already done. Because membership cannot work without this data, withdrawing consent will end your Application or Membership, and we will then stop using your data except where the law requires us to keep it.

5. Who can see your data

• Your District's President and appointed office bearers see your Application, evidence and payment proof so they can review and verify them.
• Other active Members see only your basic profile, business name, State and District in the Member Directory. They do not see your Group, contact details, turnover or documents.
• Business Leads, Opportunity responses, job applications and guidance requests are visible only to the people involved and the office bearers responsible for them.
• State and National office bearers see totals and reports, not your private records, unless a documented task needs more.
• System administrators can access data only to operate, support and secure the portal.

6. Service providers

We use trusted providers who process data only on our instructions and under contract:

• Supabase: database, sign-in and file storage.
• Hostinger: hosting of the portal.
• Resend: sending service emails.
• Cloudflare Turnstile: checking that forms are sent by a person and not a bot.

Some providers may store or process data outside India. Any such transfer follows the rules made under the DPDP Act, 2023. [Storage locations to be confirmed by GVN.]

7. How long we keep it

• Unconfirmed application requests and their documents: kept only until the 24-hour confirmation link expires, then deleted.
• Requests to add a State, District or business category are not stored in the portal; GVN deletes the email once the request is handled.
• Rejected or withdrawn Applications: kept for a limited period for review and dispute handling, then deleted.
• Membership data: kept while you are a Member and for a limited period after it ends.
• Payment and receipt records: kept for as long as tax and accounting law requires.
• Access history (your sign-ins and password changes): successful sign-ins and password changes are kept for 12 months and failed sign-in attempts for 90 days, then deleted automatically. Other security logs are kept for at least the period the law requires, then deleted.
• [Exact retention periods to be confirmed by GVN.]

When data is no longer needed for its purpose and no law requires us to keep it, we delete it.

8. How we protect it

We use encrypted connections, hashed passwords, role-based access, database access rules, virus scanning of uploaded files, rate limits and audit records. Access is limited to people who need it for their role. If a personal data breach happens, we will inform the Data Protection Board of India and affected people as the law requires.

9. Cookies

The portal uses only essential cookies to keep you signed in and to protect forms from abuse. We do not use advertising or tracking cookies.

10. Your rights

Under the DPDP Act, 2023 you have the right to:

• get a summary of your personal data we hold, how we use it, and who we have shared it with;
• ask us to correct, complete or update your data (you can change many details yourself in the portal);
• ask us to erase data we no longer need, subject to legal duties to keep it;
• withdraw your consent, as explained in section 4;
• have your complaints handled by our Grievance Officer;
• nominate a person to exercise these rights for you in case of death or incapacity.

To use a right, write to our Grievance Officer. We may need to confirm your identity first, and we will reply within the time the law sets.

11. Grievance Officer and complaints

Grievance Officer: [Grievance Officer name], [Grievance Officer email], Dwarkadhish Mandir, Nicho Bhatvado, Mehsana, Gujarat. General questions: the support contact on gvnfamily.com.

If you are not satisfied with our reply, you may complain to the Data Protection Board of India after first using our grievance process.

12. Children

The portal is only for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us data, please tell us and we will delete it.

13. Your duties

The DPDP Act asks you to give true information, not to impersonate anyone, and not to file false or frivolous complaints. Please share another person's data (for example in a Business Lead) only when you have a right to do so.

14. Changes to this policy

We will update this policy when our practices or the law change. The version date at the top will change, and we will tell Members about important changes in the portal or by email.