This policy explains what personal data PF Saathi collects, why, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.
1. Consent
When you message us on WhatsApp, book a consultation or share documents, you consent to us processing your personal data for the purposes below. You can withdraw consent at any time by messaging or emailing us; we will stop processing and delete your data as described in section 7, except where the law requires us to keep it. Withdrawing consent may mean we can't continue your case.
2. What we collect
| Type | Examples | Why |
|---|---|---|
| Contact details | Name, mobile/WhatsApp number, email, city | To reply, book consultations and update you |
| PF case details | UAN, PF member IDs, employer names, joining/exit dates, passbook, claim status and rejection reasons | To diagnose and work on your case |
| KYC details (as needed) | Name and date of birth as on Aadhaar/PAN, masked Aadhaar, PAN, bank name and IFSC | To identify mismatches and prepare corrections |
| Death claim details | Death certificate, nominee/legal heir details, relationship proofs | To prepare PF, pension and EDLI claims for the family |
| Payment details | Amount, date, payment reference, GST invoice details | Billing, refunds and tax records |
3. What we never collect
- Passwords or OTPs of any kind — UAN, EPFO, Aadhaar, bank or UPI.
- Full Aadhaar numbers — please share a masked Aadhaar (only last 4 digits visible). If an unmasked copy is ever shared with us by mistake, we delete it and ask for a masked one.
- Card numbers, UPI PINs or net-banking details — payments are handled by our payment provider, not by us.
4. Who we share data with
We share personal data only as needed for your case or our service:
- Your employer(s), when we coordinate corrections or declarations on your behalf, with your go-ahead.
- Service providers who help us operate: Meta (WhatsApp), Razorpay (payments), Cloudflare (website hosting and email), Google (business tools). They process data under their own privacy terms.
- Authorities, only when the law requires it.
We do not sell or rent your data, and we don't use it for anyone else's marketing.
5. How we protect it
Documents are kept in access-controlled accounts with two-factor authentication, shared only with the person handling your case, and never posted publicly.
6. How long we keep it
- Case documents and chat details: until 6 months after your case closes, then deleted.
- Invoices and payment records: as long as tax and GST laws require (currently up to 8 years).
7. Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and how it is used;
- correct or update it;
- delete it (we'll confirm deletion within 15 days, except records the law requires us to keep);
- nominate someone to exercise these rights if you die or become incapacitated;
- resolve a grievance. If you're not satisfied with our response, you can complain to the Data Protection Board of India.
8. Grievance officer and deletion requests
Rishiraj Meena, PF Saathi — email [email protected] with the subject "Data request", or message us on WhatsApp. We respond within 7 working days.
9. Website and cookies
Our website does not use advertising cookies or ask you to create an account. Our hosting provider may log basic technical data (such as IP address and browser type) for security and performance.
10. Changes
We may update this policy and will change the "Last updated" date above when we do.
PF Saathi (Raj Brothers Trading Company), J-602, Plot No-J602, Mahima Panorama, Jagatpura Road, Jagatpura, Jaipur, Rajasthan 302017
Email: [email protected] · WhatsApp: +91 93589 33369 · Mon–Sat, 10am–7pm