Privacy Policy

ERTO KONNECT LLP is a limited liability partnership registered in India, operating the website https://rtokonnect.in and the RTO Konnect WhatsApp-based B2B platform (together, the “Platform”). For the purposes of the DPDP Act, ERTO KONNECT LLP is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.

• Registered / Head Office: Office No E 201, Jaimala Business Court, Above Hyundai Showroom, Nandini Takle Nagar, Manjri Bk, Pune, Maharashtra 412307, India
• Branch Office: Attrey Society, Bangalow No 4 (Shriyash), Gokhale Nagar Road, Opp Hotel Sapna, Pune 411061, India
• Email: contact@rtokonnect.in
• Phone / WhatsApp: +91 99700 90690

RTO Konnect is a private entity. We are not a government department and are not affiliated with the Ministry of Road Transport & Highways, any Regional Transport Office (RTO), or any other government authority.

This Policy applies to personal data processed in connection with:

• our website, forms, and appointment-booking services;
• our consumer services — vehicle ownership transfer, RC-related services, driving licence assistance, insurance facilitation, choice number booking, vehicle loans and refinance facilitation, and buying/selling assistance for used vehicles;
• our B2B platform for registered dealers, DSAs, and NBFCs, including dealer onboarding (KYC), the prepaid wallet, and vehicle verification reports delivered over WhatsApp; and
• our communications with you by phone, WhatsApp, SMS, or email.

By using the Platform or submitting your personal data to us, you confirm that you have read and understood this Policy. Where the law requires consent, we will seek it in the manner described in Section 6.

(a) Data you provide to us:

• Identity data — name, date of birth, gender, photograph, signature;
• Contact data — phone number, WhatsApp number, email address, postal address;
• Government identifiers and documents — Aadhaar (voluntarily provided), PAN, driving licence, vehicle Registration Certificate (RC), insurance policy documents, Shop Act / Udyam registration, GST certificate, and other documents required to process the service you have engaged us for;
• Vehicle data — registration number, chassis/engine number, ownership and hypothecation details;
• Financial data — payment references, UPI transaction identifiers, wallet top-up history (we do not store your card numbers, UPI PINs, or banking passwords);
• Business data (B2B) — dealership name, proprietor/partner details, team member contact numbers.

(b) Data collected automatically:

• device and browser information, IP address, approximate location derived from IP;
• usage data such as pages visited, links clicked, and time spent on the Platform;
• cookies and similar technologies (see Section 12).

(c) Data from other sources:

• vehicle and compliance records retrieved, at your request or with your consent, from official, statutory, government-maintained, or government-authorised databases and their authorised service providers (for example, records relating to registration, challans, theft flags, blacklist status, and NOC status);
• information from insurers, lenders, and other partners with whom you ask us to facilitate a service.

We process your personal data for the following purposes:

• to provide the services you request, including preparing, filing, and tracking RTO applications on your behalf;
• to verify your identity and complete KYC required for dealer onboarding on the B2B platform;
• to retrieve vehicle verification reports that you or your organisation request;
• to communicate with you about your orders, appointments, and service status, including over WhatsApp;
• to process payments, maintain wallet ledgers, and issue receipts and invoices;
• to comply with legal obligations, respond to lawful requests from government authorities, and establish or defend legal claims;
• to maintain the security of the Platform, prevent fraud and misuse, and audit B2B usage;
• to improve our services and, with your consent where required, send you service updates and offers.

We process personal data on the basis of (a) your consent under Section 6 of the DPDP Act; and (b) certain legitimate uses recognised under Section 7 of the DPDP Act, including processing of data you have voluntarily provided for a specified purpose, compliance with law and court orders, and responding to medical or safety emergencies.

• Where we rely on consent, we will request it through a clear affirmative action, accompanied by a notice describing the personal data sought, the purpose of processing, how you may exercise your rights, and how to complain to the Data Protection Board of India.
• Your consent is limited to the specified purpose. We will not use documents submitted for one service (for example, an ownership transfer) for any unrelated purpose without fresh consent.
• You may withdraw consent at any time by writing to contact@rtokonnect.in. Withdrawal does not affect the lawfulness of processing already carried out, and may mean we are unable to complete a service in progress. Where an application has already been filed with an RTO or other authority, records already submitted to that authority are governed by that authority's rules.
• Aadhaar, where requested, is collected on a voluntary basis solely for identity verification connected with the service you engage, in accordance with applicable law. You may offer an alternative officially valid document instead.

We share personal data only as needed for the purposes above, with:

• Government authorities — RTOs and transport authorities, to file and process your applications;
• Insurers, banks, and NBFCs — where you ask us to facilitate insurance, loans, or refinance (these entities process your data as independent data fiduciaries under their own policies);
• Data Processors — service providers who process data on our behalf and under our instructions (for example, cloud hosting, WhatsApp Business API providers, payment processors, and document management tools), bound by contractual safeguards;
• Professional advisers and auditors — under confidentiality obligations;
• Law enforcement or courts — where disclosure is required by law or valid legal process;
• A successor entity — in connection with a merger, acquisition, or restructuring, subject to this Policy.

We do not sell your personal data.

Your personal data is primarily stored and processed in India. If any processing occurs outside India (for example, cloud infrastructure of our service providers), it will be carried out in accordance with Section 16 of the DPDP Act and any countries or conditions notified by the Central Government, with appropriate contractual and technical safeguards.

• We retain personal data only for as long as necessary for the purpose it was collected, or as required by law (for example, tax and accounting records).
• KYC documents uploaded for B2B dealer onboarding are retained for verification and compliance; once verification is complete and unless a longer statutory retention applies, they are securely deleted in line with our internal retention schedule.
• When personal data is no longer required, we erase it or irreversibly anonymise it, and cause our Data Processors to do the same.

We implement reasonable security safeguards as required by Section 8(5) of the DPDP Act and applicable IT security standards, including encryption in transit, access controls, role-based access to documents, and logging of B2B queries. No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we review and strengthen our safeguards on an ongoing basis.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in the form and manner prescribed under the DPDP Act and its rules.

Under Chapter III of the DPDP Act, you have the right to:

• Access — obtain a summary of your personal data being processed and the processing activities;
• Correction and erasure — have inaccurate or misleading data corrected, incomplete data completed, and data erased when it is no longer necessary;
• Grievance redressal — a readily available means of registering a grievance with us (see Section 15);
• Nomination — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any right, write to contact@rtokonnect.in with the subject line “Data Principal Request”. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Please note the corresponding duties of Data Principals under Section 15 of the DPDP Act: do not impersonate another person, do not suppress material information, and do not register false or frivolous grievances.

We use cookies and similar technologies that are strictly necessary for the Platform to function, and analytics cookies to understand how the Platform is used. You can control cookies through your browser settings; disabling certain cookies may affect Platform functionality.

Our services are intended for persons aged 18 years and above. We do not knowingly process the personal data of children (persons under 18) and do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, consistent with Section 9 of the DPDP Act. If you believe a child's data has been provided to us, contact us and we will delete it.

The Platform may contain links to third-party websites (for example, government form repositories, insurers, or lenders). We are not responsible for the content or privacy practices of those websites. We encourage you to read their privacy policies.

In accordance with the DPDP Act, the Information Technology Act, 2000 and rules thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, our Grievance Officer's details are:

• Name: [Grievance Officer name to be designated]
• Designation: Grievance Officer, ERTO KONNECT LLP
• Address: Office No E 201, Jaimala Business Court, Above Hyundai Showroom, Nandini Takle Nagar, Manjri Bk, Pune, Maharashtra 412307
• Email: contact@rtokonnect.in
• Phone: +91 99700 90690

We aim to acknowledge grievances within 48 hours and resolve them within the timelines prescribed by applicable law.

We may update this Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be notified on the Platform or by email/WhatsApp. Your continued use of the Platform after changes take effect constitutes acceptance of the revised Policy, except where fresh consent is required by law.

This Policy is governed by the laws of India. Subject to your rights before the Data Protection Board of India and any consumer forum, the courts at Pune, Maharashtra shall have exclusive jurisdiction over disputes arising out of this Policy.