Privacy Policy

1. Commitment to Citizen Privacy

LabourSeva is committed to protecting the privacy, dignity, and confidential identity of all unorganised workers, beneficiaries, and applicants across Tamil Nadu. This Privacy Policy outlines how personal data is collected, processed, encrypted, and stored in strict accordance with the Digital Personal Data Protection (DPDP) Act, 2023.

2. Data We Collect

We collect only necessary minimum information required to deliver statutory labour welfare benefits:

• Identity Data: Full Name, Date of Birth, Gender, Nominee details.
• Authentication Data: Mobile phone number for OTP-based verification.
• Government Identifiers: Only the last 4 digits of Aadhaar are permanently stored; full 12 digits are used solely for UIDAI e-KYC validation.
• Banking Data: Bank account number, IFSC code, and branch name exclusively for Direct Benefit Transfer (DBT).
• Employment & Trade Proofs: Trade category, union membership or Village Administrative Officer (VAO) work certificate.

3. Encryption & Data Security Architecture

All sensitive Personal Identifiable Information (PII) is encrypted at rest using industry-standard AES-256-GCM encryption with isolated cryptographic key stores. Searchable fields such as phone numbers employ HMAC blind indexing. Documents uploaded to the vault are stored outside public paths and served only via temporary, authenticated tokens expiring within 3 minutes.

4. Masking & Access Control

In accordance with our strict data protection standards, customer identity numbers are masked by default across all staff and verification screens (e.g. XXXX XXXX 4821). Any unmasking or document viewing action by verification officers is recorded in an immutable audit log.

5. Citizen Data Rights

Under the DPDP Act 2023, every registered customer has the right to:

• Access a summary of personal data held and processed by the platform.
• Request correction of inaccurate or outdated profile information.
• Withdraw consent or request profile archiving, subject to statutory audit requirements.
• Lodge a grievance with our Data Protection Officer regarding data handling.