Privacy Policy

This Privacy Policy describes how CRMRS Recovery Software ("we", "us", "our") and its authorised partner agencies collect, use, store, and disclose information through the CRMRS field-agent mobile applications — the agency-branded builds of the CRMRS Recovery platform (collectively, the "App").

The App is a closed business-to-business (B2B) tool intended solely for use by recovery agents who have been pre-authorised by a CRMRS partner agency. It is not a consumer service and is not available for self-registration by the general public. By using the App, you confirm that you are an authorised representative of the agency that issued your account.

1. Who We Are & Who Controls Your Data

CRMRS Recovery Software provides the software platform. The data controller of your personal information is the partner agency that authorised your account, on whose behalf we process data as a technical service provider.

2. Information We Collect

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information We Do Not Collect

• We do not collect contact lists, SMS messages, call logs, or microphone audio.
• We do not collect biometric data beyond the photographs you voluntarily upload.
• We do not track you across other apps or websites.
• We do not display advertisements.

3. How We Use Your Information

• Account management — create and maintain your agent profile, verify your identity through KYC, and authenticate logins.
• Operational use — assign vehicles to recover, display loanee/financier contact details, and record completed recoveries.
• Communication — enable tap-to-call functionality to the loanee or your head office directly from the app.
• Security & fraud prevention — detect unauthorised sign-in attempts via device-binding and admin-controlled blacklisting.
• Compliance & record-keeping — retain transaction logs to meet legal and contractual obligations of the partner agency.

4. Location Data

The App requests precise (GPS) location permission to geo-tag vehicle recovery activities and to allow your agency to track your live location while you are on an active assignment. Location data is collected only while the App is in active use and is transmitted to your partner agency's secure server. You can revoke location permission at any time via your device's Android settings; doing so will prevent certain App features (e.g., live tracking) from working.

5. Data Storage & Security

• All data is transmitted over HTTPS (TLS 1.2+) and stored on secure servers in India.
• Each partner agency's data is stored in a logically isolated database (one database per agency).
• Server access is restricted to authorised personnel and requires multi-factor authentication.
• Cached operational data on your device is wiped on logout or agency switch.
• Sensitive credentials are never stored in plain text.

6. Data Sharing & Disclosure

We do not sell, rent, or share your personal information with third parties for marketing. Disclosures are limited to:

• Your partner agency — the agency that authorised your account is the data controller and has full administrative access to your records.
• Service providers — hosting, SMS/OTP, and crash analytics vendors strictly under data-processing agreements.
• Legal compliance — when required by valid legal process under Indian law (Information Technology Act, 2000 and rules thereunder, the Digital Personal Data Protection Act, 2023, etc.).

7. Data Retention

Your personal data is retained for as long as your agent account remains active with the partner agency. Upon termination of your agent relationship, identifying data is retained for an additional 36 months for compliance and audit purposes, after which it is permanently deleted or anonymised. KYC documents are retained per RBI/MCA recordkeeping norms applicable to the partner agency.

8. Your Rights

You have the right to:

• Access — request a copy of personal data held about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request deletion of your account and personal data (subject to legal retention requirements).
• Withdraw consent — revoke previously granted permissions through device settings or by contacting us.
• Lodge a complaint — with the Data Protection Board of India or the equivalent authority in your jurisdiction.

To exercise any of these rights, contact us using the details in Section 11.

9. Children's Privacy

The App is intended for use by adults (18 years and over) who are authorised recovery agents. We do not knowingly collect data from children under 18. If you believe we have inadvertently collected such data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified in the App and via your registered mobile number. The "Last updated" date at the top of this page reflects the latest revision.

11. Contact Us