Last Updated: February 15, 2025

Our Commitment to RCS Compliance

ATAV Telecom is committed to protecting your privacy and ensuring compliance with RCS (Rich Communication Services) guidelines, Google's RCS Business Messaging policies, and Indian data protection laws including the Digital Personal Data Protection Act, 2023. We follow the highest standards of data protection and transparency.

1. Information We Collect

1.1 RCS Business Messaging Data

When you interact with our RCS business messaging services, we collect:

  • Phone Number: Your mobile number used for RCS messaging - essential for message delivery
  • Message Content: Text, images, and files shared via RCS for service delivery
  • Delivery Status: Read receipts, delivery confirmations, and message status for quality assurance
  • Interaction Data: Message open rates, click-through rates, and response times to improve engagement
  • Device Information: Device type, OS version, and RCS capabilities for compatibility

1.2 Personal Information

  • Contact Details: Name, email address, phone number, business address
  • Account Information: Company name, GST number, billing details
  • Communication Records: Customer support interactions and service requests
  • Technical Data: IP address, browser type, device identifiers, cookies

1.3 GPS Tracking Data

  • Vehicle location data and movement history for fleet management
  • Device IMEI numbers and SIM card details for device identification
  • Speed, route information, and geofencing data for analytics

2. How We Use Your Information

  • RCS Messaging: To deliver rich business messages, verify delivery, and improve message engagement
  • Service Delivery: To provide GPS tracking, digital marketing, and web development services
  • Customer Support: To respond to inquiries and resolve technical issues
  • Compliance: To meet TRAI, RCS, and telecom regulatory requirements
  • Improvement: To analyze usage patterns and enhance our services
  • Billing: To process payments and maintain accurate records
  • Marketing: To send promotional communications only with your explicit consent

3. Retention of Your Personal Data

Data Retention Policy

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Data Type Retention Period Legal Basis
RCS Message Logs 12 months TRAI compliance & dispute resolution
GPS Location Data 6 months Service provision & historical analysis
Customer Support Chat 24 months Quality assurance & training
Billing Information 7 years Tax & legal requirements (Income Tax Act, 1961)
Marketing Preferences Until consent withdrawal User communication preferences
Website Usage Data 26 months Analytics & service improvement
Job Application Data 12 months Recruitment & future opportunities

Once the retention period expires, Personal Data shall be deleted or anonymized for analytical purposes. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the expiration of the retention period.

5. Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices in Pune, India and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Cross-Border Data Transfer

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. We currently process data within India only. If we transfer data internationally in the future, we will ensure:

  • Adequate data protection safeguards are in place
  • Standard Contractual Clauses are executed
  • You are notified of such transfers
  • Compliance with applicable cross-border data transfer regulations

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

6. Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Your Right to Erasure (Right to be Forgotten)

Under the Digital Personal Data Protection Act, 2023 and GDPR principles, you have the right to request deletion of your personal data. We will comply with such requests subject to legal retention requirements.

6.1 Methods to Request Deletion

  • Account Settings: Our Service may give You the ability to delete certain information about You from within the Service.
  • Account Dashboard: You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information.
  • Contact Us: You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.
  • Data Deletion Form: Visit our Data Deletion Policy page for a dedicated deletion request form.

6.2 Exceptions

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so, including:

  • Compliance with tax, accounting, and legal retention requirements
  • Contractual obligations with ongoing services
  • Establishment, exercise, or defense of legal claims
  • Public health interests or archival purposes

7. Disclosure of Your Personal Data

7.1 Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy. You will be notified via email and prominent notice on our website.

7.2 Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency). This includes:

  • Compliance with a valid court order or subpoena
  • Response to lawful requests by government agencies
  • National security requirements
  • Investigation of unlawful activities

7.3 Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

7.4 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, provided they agree to keep this information confidential and comply with data protection laws.

8. Security of Your Personal Data

Our Security Measures

The security of Your Personal Data is important to Us. We implement a variety of security measures to maintain the safety of your personal information:

  • Encryption: SSL/TLS encryption for all data transmission (HTTPS)
  • Access Control: Strict role-based access controls and authentication requirements
  • Regular Audits: Periodic security assessments and vulnerability scanning
  • Secure Storage: Encrypted databases with restricted access
  • Employee Training: Regular data protection and privacy training for all staff
  • Incident Response: Documented procedures for data breach response
  • Backup & Recovery: Regular encrypted backups with secure recovery procedures

No Absolute Security

Remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security. In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by law.

9. Children's Privacy

Protecting Children's Data

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us immediately.

If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers promptly.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

9.1 Parental Rights

Parents or legal guardians have the right to:

  • Review personal information collected from their child
  • Request deletion of their child's personal information
  • Refuse further collection or use of their child's information
  • Provide or withdraw consent on behalf of their child

10. Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services. This includes:

  • Social media platforms (Facebook, Twitter, LinkedIn, Instagram)
  • Payment processors and banking partners
  • Google Maps and other embedded services
  • WhatsApp and RCS platforms

Your interactions with these third-party services are governed by their respective privacy policies.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on Our Service and store certain information. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookies Policy.

11.1 Types of Cookies We Use

  • Essential Cookies: Required for website functionality
  • Analytics Cookies: To understand how visitors interact with our website
  • Marketing Cookies: To personalize advertisements (with consent)
  • Preference Cookies: To remember your settings and preferences

12. RCS-Specific Privacy Protections

12.1 Opt-In Requirements

We only send RCS messages to users who have explicitly opted in to receive communications. Each opt-in is documented and timestamped for compliance with TRAI regulations and Google's RCS Business Messaging Policy.

12.2 Message Transparency

All RCS messages clearly identify ATAV Telecom as the sender and include opt-out instructions. Our messages never impersonate other brands or entities. Each message includes:

  • Verified sender name and logo
  • Clear identification of commercial intent
  • Reply STOP instructions for opt-out
  • Help/Support contact information

12.3 End-to-End Encryption

RCS messages are encrypted during transmission using Google's Jibe platform security protocols. We do not store message content beyond the retention period specified above. Read receipts and typing indicators are only enabled with your explicit consent.

12.4 RCS Compliance Records

We maintain detailed records of all RCS communications including:

  • Consent records with timestamps and IP addresses
  • Message delivery logs for 12 months
  • Opt-out requests with immediate processing
  • Customer support interactions via RCS

13. Your Rights Under Data Protection Laws

Under Indian data protection law (Digital Personal Data Protection Act, 2023) and RCS guidelines, you have the following rights:

Right Description How to Exercise
Right to Access Request copies of your personal data Email info@atavtelecom.in
Right to Rectification Correct inaccurate or incomplete data Account settings or email us
Right to Erasure Request deletion of your personal data Data Deletion Policy page
Right to Restrict Processing Limit how we use your data Contact Grievance Officer
Right to Data Portability Receive your data in structured format Request via email
Right to Object Object to processing for marketing Reply STOP or opt-out form
Right to Withdraw Consent Withdraw previously given consent Update preferences or contact us

You also have the right to file a complaint with the Data Protection Authority or TRAI if you believe your rights have been violated.

14. Changes to this Privacy Policy

Policy Updates

We may update Our Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational requirements. We will notify You of any material changes by:

  • Posting the new Privacy Policy on this page with an updated "Last updated" date
  • Sending an email notification to registered users (if you have provided your email)
  • Displaying a prominent notice on Our Service prior to the change becoming effective
  • For significant changes, seeking renewed consent where required by law

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.

Grievance Officer

As per Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and RCS compliance requirements under the Digital Personal Data Protection Act, 2023:

Name: Mr. Majhar Mulani

Email: info@atavtelecom.in

Phone: +91 7757090344

Response Time: Within 48 hours (business days)

Address: Space 31, Khadi Machine Chowk, Kondhwa, Pune - 411048

For any complaints, grievances, or inquiries regarding your personal data, RCS messaging, or this Privacy Policy, please contact our Grievance Officer. All complaints will be acknowledged within 24 hours and resolved within 30 days as per applicable laws.

RCS & TRAI Compliance Statement

ATAV Telecom is fully compliant with Google's RCS Business Messaging Policy, TRAI Telecom Commercial Communications Customer Preference Regulations, 2018, and the Digital Personal Data Protection Act, 2023. We maintain strict adherence to all consent, transparency, and data protection requirements.

Terms & Conditions Data Deletion Policy Cookies Policy