Privacy Policy

1. Introduction & Purpose

BharatShramSetu operates a unified digital system designed to monitor, protect, and empower workers across industrial, construction, and unorganized sectors in India. This Privacy Policy explains our practices regarding the collection, use, storage, and security of personal, professional, attendance, and identity information across our mobile app, web portal, and digital pass services.

2. Who Is Covered

This policy applies to all users registered on the platform:

• Workers & Labourers: Individuals registered under the Worker Registry who hold a Unique National Worker ID and Digital Worker Pass.
• Contractors & Sub-contractors: Agencies managing site deployments, statutory registrations, and welfare filings.
• Principal Employers: Site owners, developers, and enterprises overseeing safety and workplace compliance.
• Government & Regulatory Authorities: Labour inspectors, welfare board officials, and statutory auditors.

3. Roles & Responsibilities in Data Handling

• Employer / Contractor as Primary Data Handler: When employers or contractors upload worker details, they determine the purpose of processing. The platform processes this information strictly under agreed service agreements.
• Platform as Independent Data Handler: BharatShramSetu independently manages data for national statistical analysis, anonymous AI safety model training, identity fraud prevention, system security, and issuance of portable Worker IDs.
• Registered Individuals: Workers and individual users whose information is being processed.

4. Information We Collect

We collect only the minimum information necessary to provide welfare management, safety compliance, and site governance:

5. Mobile Device Permissions

• Camera Access: Used solely to take worker profile photos, perform live face verification at site entry, and scan document/pass QR codes.
• Location (GPS): Used exclusively to confirm physical presence within designated job sites during shift hours and for field safety audits.
• Storage: Used to store digital worker passes and payslips locally for offline viewing, and to attach required compliance files.
• Notifications: Used to send shift reminders, safety alerts, provident fund/insurance updates, and welfare scheme notices.

6. How Your Information Is Used

• Digital Pass Issuance: Generating portable Digital Worker Passes and verified Skill Passports.
• Welfare & Contribution Tracking: Automating social security records (PF, ESIC, welfare board registrations) across contractor deployments.
• Safety & Compliance Monitoring: Evaluating workplace safety standards, contractor licensing, and labour law compliance.
• Fraud Prevention: Stopping duplicate identities, wage misappropriation, and unauthorized site entry.

7. Data Sharing & Third Parties

We do not sell or rent personal information to advertisers or marketing agencies. Data is shared strictly with authorized entities:

• Authorized Employers & Contractors: Only for workers deployed under their direct operational scope.
• Government & Statutory Portals: Integrated directly with official portals (such as EPFO, ESIC, and State Welfare Boards) for legal compliance verification.
• Secure Service Providers: Government-empaneled cloud data centers in India, messaging gateways, and technical infrastructure partners under strict confidentiality agreements.
• Law Enforcement: Only when legally mandated by a formal government order or court summons.

1. Clear Notice & Informed Consent

Whenever personal information is collected, users are provided with a clear, easy-to-understand notice explaining what information is required and why. Notices are provided in English, Hindi, and regional languages. Users must give explicit, clear consent before data collection, and consent records are maintained in a secure digital registry.

2. User Rights Over Personal Data

Every registered worker and user possesses clear legal rights regarding their personal data:

• Right to Know & Access: You can request a complete summary of your personal information stored on the system, the activities performed with it, and the list of third parties who have received it.
• Right to Correct & Update: You have the right to correct inaccurate data, complete unfinished profiles, or request removal of outdated information that is no longer required.
• Right to File Grievances: You have access to a fast, transparent grievance redressal system to resolve data complaints.
• Right to Nominate: You can nominate a family member or representative who can manage your data rights in case of death or unforeseen incapacity.

3. Protection of Government & Statutory Identifiers

All national identity numbers and sensitive credentials are encrypted and stored in secure, restricted vaults. The platform never displays or stores full plain-text government identity numbers on general screens. Masked formats (showing only the last four digits) and secure cryptographic hashes are strictly utilized.

1. Lawful Basis for Processing

For international personnel, expatriate managers, or foreign enterprise partners using the platform, data is handled under recognized legal justifications:

• Contractual Need: Processing required to provide platform services, issue worker passes, and fulfill workforce agreements.
• Legal Duty: Processing required to comply with statutory labour laws, safety codes, and tax filings.
• Legitimate Operational Interest: Preventing fraud, safeguarding work sites, and maintaining platform security.
• Explicit Consent: Freely given approval for non-essential optional features, such as background location or skill alerts.

2. Data Location & Cross-Border Transfers

All primary databases and AI systems are hosted in secure, sovereign cloud data centers located within India. If information is accessed internationally by authorized global partners, standard contractual privacy protections are enforced to guarantee the same high level of data security.

3. International Privacy Rights

Users covered under international data protection laws can exercise their rights to access, data correction, deletion, processing restriction, automated data transfer (data portability in standard spreadsheet/JSON formats), and objections by writing to gdpr@bharatshramsetu.in.

1. Ownership of Platform & System Architecture

BharatShramSetu retains sole and exclusive ownership of all right, title, and interest in and to the Platform and the National Worker Welfare Management System (NWWMS). This includes, without limitation:

• Proprietary Software & Code: All underlying algorithms, frontend/backend source code, APIs, database architectures, and digital registry frameworks (Worker Registry, Contractor Registry, and Principal Employer Registry).
• Digital Worker Pass & Skill Passport: The architectural design, QR-generation workflows, portable identity frameworks, and automated skill-mapping templates.
• AI Models & Biometric Vector Systems: All artificial intelligence models, facial liveness verification engines, anti-spoofing algorithms, and proprietary mathematical vector representations.
• Trademarks & Branding: All registered and unregistered trademarks, logos, brand names ("BharatShramSetu", "NWWMS", "One Nation, One ID, One Platform"), UI/UX screen workflows, icons, and graphic assets.

2. Restrictions on Extraction, Reverse Engineering & Screen Capture

• Prohibition on Reverse Engineering: Users, contractors, principal employers, and third parties are strictly prohibited from copying, decompiling, reverse-engineering, disassembling, or attempting to derive the source code or underlying mathematical models of the platform.
• Extraction & Scraping Ban: Deploying automated scrapers, crawlers, bots, data-harvesting tools, or AI model-extraction scripts against any part of the registry or dashboard is strictly forbidden.
• Protection of Interface & Compliance Matrices: Capturing, copying, or duplicating the visual design, proprietary compliance matrices, risk-scoring algorithms, or audit reporting templates for commercial redistribution without written consent constitutes copyright infringement and will result in immediate legal action.

3. Ownership of User & Statutory Data

• User Documents: Contractors and Principal Employers retain ownership of their proprietary business files, contracts, and company documents uploaded to the platform.
• Aggregated & Statistical Data: Anonymized, aggregated performance statistics, macro labour trends, and generalized system analytics generated through the platform remain the intellectual property of BharatShramSetu Technologies Pvt. Ltd. for national reporting and system improvement.

1. Core AI Capabilities

• Face Verification & Anti-Spoofing: Verifies worker attendance at job sites to prevent proxy entries while checking that a live person is present.
• Predictive Safety & Compliance Risk: Analyzes contractor filing trends to identify safety and wage violation risks before they occur.
• Skill & Welfare Matching: Recommends suitable job placements and highlights government welfare schemes matching a worker’s qualifications.
• Smart Document Scanning: Automatically reads and extracts necessary details from uploaded compliance certificates to speed up approvals.

2. Human Oversight & No Automated Penalties

In keeping with ethical AI standards, no negative decision regarding employment, wages, fines, or worker status is ever made solely by an AI algorithm. All AI outputs are treated strictly as advisory recommendations. Final decisions are always reviewed and confirmed by qualified human HR officers, site supervisors, or compliance managers.

3. Fairness & Bias Prevention

AI models are trained on diverse, anonymized data to ensure fair treatment across all demographics, age groups, and regions. Face verification algorithms are continuously calibrated to ensure high accuracy across diverse outdoor lighting conditions and skin tones.

4. Privacy Protection in Facial Verification

The system does not permanently store raw face photos for daily attendance verification. Instead, images are converted into one-way mathematical numeric codes (vectors). These mathematical codes cannot be reversed into photos and are used only for secure site access.

5. Governing Law & Dispute Resolution

This framework is governed by the laws of India. Any formal legal disputes fall under the jurisdiction of the competent courts at Noida / New Delhi. Periodic updates to this document will be posted on the portal, and continued use of the platform indicates acceptance of updated terms.