Privacy Policy

This policy explains how Raahi, operated by [registered company name] (the “Data Fiduciary”), handles your personal data, and your rights under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). It covers both casual browsing and our assisted-filing service.

1. Browsing the Platform

You can read visa and country information without an account. We use privacy-friendly, aggregate analytics to understand which pages are useful. Visa and country data is fetched on our servers, so your browser is not exposed to those third-party sources.

2. Data we process for assisted filing

If you use assisted filing, we process the personal data you provide to prepare and lodge your application, which may include: your name, date of birth, contact details, address, passport details, photograph, occupation, travel details, and any documents or co-applicant details you add.

Purpose and lawful basis

We process this data only to deliver the service you asked for — reviewing, completing, and filing your visa application — on the basis of the consent you give at checkout. We do not sell your data or use it for advertising.

3. How we protect it

• Your application details are encrypted (AES-256-GCM) before they are stored, so the database alone never reveals them.
• They are decrypted only just-in-time, by the specialist assigned to file your case, and only to lodge it on the official channel.
• Payment is handled by our PCI-DSS-compliant processor (Razorpay); we do not store your card details.

4. Retention and deletion

We keep your application data only as long as needed to file your case. Once your application is filed with the authority, the encrypted details are automatically purged. Case metadata (destination, dates, payment record) may be retained for legal, tax, and accounting obligations. You can request erasure earlier at any point before filing.

5. Sharing and cross-border transfer

To file your visa, we necessarily submit your data to the destination country’s embassy/consulate or its authorised visa centre (e.g. VFS Global), which may be outside India. By using assisted filing you consent to this transfer, which is intrinsic to the service. We also share the minimum necessary data with our payment processor. We do not otherwise disclose your data except where required by law.

6. Your rights under the DPDP Act

• Access — a summary of the personal data we hold about you and how it is processed.
• Correction and completion of inaccurate or incomplete data.
• Erasure of your data when the purpose is served or you withdraw consent.
• Withdraw consent at any time (this may prevent us from continuing to file your case).
• Grievance redressal and the right to nominate another person to exercise your rights.

To exercise any of these, contact our Grievance Officer (see the Grievance Redressal page) or email grievance@raahi.app.

7. Children’s data

We process a minor’s data (for example, a child co-applicant) only with the consent of a parent or lawful guardian, as required by the DPDP Act.

8. Grievance Officer

In line with the DPDP Act and the Information Technology Rules, our Grievance Officer is [Grievance Officer name], reachable at grievance@raahi.app. If unsatisfied, you may complain to the Data Protection Board of India.

9. Contact

[registered company name]. General queries: support@raahi.app.