🔒 Your privacy matters to us. SMS Platform collects only what is necessary, uses it solely
for service delivery, and never sells your data to third parties. All data is stored in India on
encrypted infrastructure.
01 Information We Collect
Account Information: Name, email, phone number, organisation name, yard type, and registration number collected at signup.
Operational Data: Vehicle intake records, weighbridge data, inventory entries, compliance documents, and all data you enter while operating the Platform.
Technical Data: IP address, browser type, device information, pages visited, and session duration collected for security monitoring and service improvement.
Payment Data: Billing information processed via RBI-compliant gateways. Raw card numbers are never stored on our servers.
02 How We Use Your Information
- To provide, operate, and maintain the SMS Platform services
- To process transactions and send related billing communications
- To generate compliance reports under MoRTH Vehicle Scrappage Policy 2021
- To send service notifications, security alerts, and account messages
- To improve Platform features using anonymised usage analytics
- To respond to support requests and resolve disputes
- To comply with legal obligations under Indian law
03 Data Sharing & Disclosure
We never sell, trade, or rent your personal information. We may share data with:
- Service Providers: AWS India (hosting), email delivery, and payment processors under strict data processing agreements
- Government Authorities: As required by MoRTH, VAHAN portal integration, or lawful government orders
- Business Transfers: In a merger or acquisition scenario with prior user notification
- With Consent: Any other sharing only with your explicit permission
04 Data Storage & Security
All data is stored on servers in India (AWS ap-south-1 Mumbai). Security measures include:
- AES-256 encryption at rest and TLS 1.3 in transit
- Multi-factor authentication for all administrative access
- Annual third-party penetration testing
- Automated daily backups with 30-day retention
- SOC 2 Type II compliant infrastructure
05 Cookies & Tracking
We use strictly necessary session cookies to maintain your login state. We do not use advertising cookies or third-party tracking pixels.
06 Your Rights
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request account and data deletion (subject to legal retention requirements)
- Portability: Export operational data in CSV/Excel from the Platform at any time
- Objection: Object to processing for specific purposes
To exercise rights, email privacy@sms-platform.in.
07 Data Retention
Account data is retained for the duration of your subscription plus 90 days for recovery, then permanently deleted. Compliance documents may be retained longer as required by law.
08 Children's Privacy
The Platform is not directed at persons under 18. If we become aware a minor has provided data, we delete it promptly.
09 Changes to This Policy
Material changes are communicated via email at least 14 days before taking effect. Continued use indicates acceptance.
10 Grievance Officer
As required under the IT (Reasonable Security Practices) Rules 2011:
Data Protection / Grievance Officer
Scrap Management System
grievance@sms-platform.in
+91 79 XXXX XXXX (Mon–Fri, 10AM–6PM IST)
Ahmedabad, Gujarat – 380001, India
Response within 30 days of receipt
© 2026 Scrap Management System. All rights reserved.