Privacy Policy

DigiChallan is a platform operated by Trustbyte Technologies ("DigiChallan", "we", "us", "our"), a business registered in India and registered under the Goods and Services Tax (GST) regime. DigiChallan helps vehicle owners look up traffic challans (e-challans) and settle them either by paying the full amount, or through discounted settlement facilitated by independent advocates via the Lok Adalat process.

DigiChallan.in is a private service and is not affiliated with the Ministry of Road Transport and Highways (MoRTH), Delhi Traffic Police, or any other government body. Challan data shown on this platform is checked against real, live challan records for your convenience; DigiChallan does not issue challans and is not responsible for their accuracy.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used, stored, shared and protected, and the rights you have over it under Indian law — principally the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 along with the rules made under it.

From all users (account & contact data): name, email address, phone number, password (stored as a salted hash, never in plain text), and role (customer, advocate, or admin).

From customers: vehicle registration number(s), challan details you save or that are fetched from public/government e-challan records, saved vehicle numbers for quick lookup, and payment-related data for challans you choose to settle (amount paid, UPI transaction reference/UTR you provide, payment status).

From advocates (lawyers): in addition to the above — districts you are enrolled to practice in, office address, Aadhaar number and/or PAN card number (for identity verification), bank account details (account holder name, account number, IFSC, bank name — for settlement payouts), and your law/enrolment certificate.

Collected automatically: basic technical data such as IP address, browser/device type, and access timestamps, generated as a normal part of operating a web application and used for security, fraud prevention, and diagnosing issues.

We do not collect more identity information than a given role requires — for example, customers are never asked for Aadhaar, PAN or bank details.

We process personal data only for the purposes for which it was collected, consistent with the DPDP Act's requirement that data be used only for lawful, specified purposes with your consent (or another lawful basis where consent is not required, such as compliance with a legal obligation):

• To create and secure your account, and authenticate you when you log in.
• To look up, save, and display your challans, and to calculate the amount payable (including any Lok Adalat discount).
• To process payments — including generating a UPI QR code/payment link and verifying the UPI transaction ID/UTR you submit — and to keep an accurate settlement record.
• To verify an advocate's identity and district enrolment (Aadhaar/PAN) before allocating them cases, and to pay out their fees to the bank account they provide.
• To connect customers with an appropriate, verified advocate for Lok Adalat settlement, and to let that advocate post case-progress updates.
• To send essential account and transactional communications (e.g. password reset emails, case status updates).
• To maintain audit logs of administrative actions, for security and accountability.
• To comply with applicable law, respond to lawful requests from courts or government authorities, and enforce our Terms & Conditions.

Passwords are hashed using industry-standard bcrypt hashing and are never stored or logged in plain text. Sensitive identity documents you upload (advocate law certificates, settlement proof documents) are validated for file type before being stored and are only accessible to authorised platform administrators. Access to Aadhaar, PAN and bank account details is restricted to what is necessary to verify and pay advocates, and this data is never shared with customers.

We take reasonable security practices and procedures as required under Section 43A of the Information Technology Act, 2000 and the associated Reasonable Security Practices Rules, 2011, and we align our processing with the security safeguards contemplated under the DPDP Act. No online platform can guarantee absolute security, but we work to keep these safeguards current.

We do not sell your personal data. We share it only in these circumstances:

• With the advocate allocated to your case (Lok Adalat settlement mode only) — limited to what they need to represent the case (challan details, district); your full contact details are visible to our admin team, and case-relevant communication is routed through the platform.
• With payment/communication infrastructure providers (e.g. our email-sending provider) strictly to deliver the service you requested.
• With government or judicial authorities where required by law, a valid legal process, or to establish, exercise or defend a legal claim.
• In a business transfer (e.g. merger, acquisition, or sale of assets), where your data may be transferred as part of that transaction, subject to equivalent protections.

We retain personal data for as long as your account is active and as needed to provide the service, resolve disputes, and meet legal, tax (including GST-related) and accounting record-keeping requirements. If you request deletion of your account, we will delete or anonymise personal data that we are not otherwise required to retain by law.

As a "Data Principal" under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it is being processed.
• Correction and updating of inaccurate or incomplete personal data (available directly from your profile settings for most fields).
• Erasure of personal data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal — noting that withdrawing consent for essential processing (e.g. identity verification for advocates) may mean we can no longer provide that part of the service.
• Grievance redressal — raise a complaint with our Grievance Officer (Section 9 below), and if unresolved, with the Data Protection Board of India once constituted under the DPDP Act.

To exercise any of these rights, contact us using the details in Section 9.

We use browser local storage (not third-party advertising cookies) to keep you signed in between visits and to remember basic preferences such as your selected language. We do not use tracking cookies to build advertising profiles, and DigiChallan does not run third-party ads.

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, queries, requests, or grievances relating to this Privacy Policy or your personal data may be directed to:

Grievance Officer, Trustbyte Technologies
Email: contact@digichallan.in
Phone: +91 95400 04402
Address: Tower B, Logix Technova, Sector 132, Noida, UP – 201301, India

We aim to acknowledge grievances within 24 hours and resolve them within 15 days, as prescribed under the IT Rules, 2021.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be notified on this page with an updated "Last updated" date. Continued use of DigiChallan after changes take effect constitutes acceptance of the revised policy.