Privacy Policy

1. Who We Are

The UP Bhulekh Form Filler extension is operated by Sugam Digital, a software service provider based in India. You can contact us at sugamedutech@gmail.com or via WhatsApp at wa.me/message/M5YXQYBPCYOXH1.

2. Information We Collect

When you use the extension and sign in with your Google account, we collect the following information:

• Google account details: your email address, display name, profile picture, and a unique Google account identifier (Google sub / user ID). This is provided by Google's OAuth 2.0 service when you sign in.
• Usage data: the number of land parcel form submissions you complete through the extension (owner entries processed). This is used to track your purchased credit balance.
• Billing & payment records: coupon codes you redeem, the package each code corresponds to, and the credits added to your account. Payment transactions themselves are processed externally via UPI and are not stored by us beyond the order reference you provide.
• Audit log: any manual balance adjustments made by an administrator on your account (e.g. refunds or corrections), including a reason and timestamp.

We do not collect the content of any forms you fill on upbhulekh.gov.in, land parcel ownership data, Aadhaar numbers, or any other sensitive government document content. The extension processes this data locally in your browser and does not transmit it to our servers.

3. How We Use Your Information

• Authentication: your Google account details allow you to sign in securely without needing a separate password. We verify your identity using Google's token verification infrastructure.
• Billing enforcement: usage events are recorded to deduct credits from your balance accurately. The Firestore database enforces this atomically so your balance is always consistent.
• Customer support: your email address may be used to respond to support requests or to notify you of significant changes to your account or this service.
• Service improvement: aggregate, non-identifiable usage counts (total submissions, total users) are used to monitor service health. No individual usage patterns are profiled or sold.

4. Legal Basis for Processing

We process your personal data on the basis of contractual necessity — it is required to provide the automation service you purchased — and legitimate interest in maintaining accurate billing records and preventing fraud.

5. Data Storage and Security

Your data is stored in Google Cloud Firestore, hosted in the asia-south2 (New Delhi) region. All data is encrypted at rest and in transit. Access to your data is restricted to authenticated Cloud Functions using the Firebase Admin SDK; direct client access to the database is blocked by Firestore security rules.

Your Google ID token (used to authenticate API calls) is stored locally in your browser's Chrome extension storage and is never transmitted to third parties other than Google (for verification) and our own Cloud Functions.

6. Third-Party Services

• Google Identity Services (GIS): handles sign-in via OAuth 2.0. Your interaction with the sign-in flow is governed by Google's Privacy Policy.
• Google Firebase / Cloud Functions: our backend infrastructure. Data is stored in Google Cloud. See Firebase Privacy.
• UPI Payment Gateway: payments are made directly via your UPI app to our UPI VPA. We do not handle card numbers or bank credentials. Payment confirmation is provided by you sharing an order reference over WhatsApp.

We do not sell, rent, or share your personal information with any other third parties for marketing or advertising purposes.

7. Data Retention

We retain your account data (email, name, credit balance, usage history) for as long as your account is active or as needed to provide the service. Usage events and redemption records are kept indefinitely for billing audit purposes.

If you wish to have your account and all associated data deleted, please contact us at sugamedutech@gmail.com. We will process deletion requests within 30 days.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (your name and email are kept in sync with your Google account automatically).
• Delete your account and associated data by contacting us.
• Withdraw consent at any time by uninstalling the extension and requesting account deletion.

To exercise any of these rights, contact us at sugamedutech@gmail.com.

9. Children's Privacy

This extension is intended for use by adults and professionals for land record administration purposes. We do not knowingly collect information from children under 18. If you believe a child's information has been submitted to us, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the extension after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

For questions, data requests, or concerns about this privacy policy:

• Email: sugamedutech@gmail.com
• WhatsApp: wa.me/message/M5YXQYBPCYOXH1