Privacy Policy

1. Introduction & Scope

Welcome to Trity 2.0 ("Company," "we," "our," or "us"), a platform operated by Trity Environ Solutions Private Limited. This Privacy Policy applies to our website at tritysofttech.com and our associated Android application (together, the "Platform").

The Platform provides software-as-a-service tools for monitoring and managing sewage and effluent treatment plants (STP/ETP), including plant records, daily operational logbooks, operator management, service coordination, and subscription billing. By creating an account or using the Platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information from Google Sign-In

If you register or log in using Google, we receive basic profile information Google makes available — your name, email address, and profile picture URL (if public). We do not request or store your Google password. You can revoke access anytime from your Google Account settings.

2.3 Automatically Collected Information

• Device & session: device identifiers, browser/OS type, and active session records (we allow a limited number of concurrent sessions per account for security).
• Network: IP address and related technical data for security monitoring and fraud prevention.
• Push notifications: Firebase Cloud Messaging (FCM) tokens to deliver service reminders and alerts to your device.
• Usage: access timestamps and feature usage for reliability and service improvement.

2.4 Location Information

Where you choose to add plant locations, we collect the address and geographic coordinates you provide. This is used to organise plants and coordinate service requests, not for continuous tracking of your device.

3. How We Collect Information

• Direct input — during registration, profile setup, plant/operator creation, logbook entry, KYC upload, and checkout.
• Third-party authentication — Google Sign-In, with your explicit consent.
• Automatic collection — session, device, and log data as described in our Cookie Policy.

4. How We Use Your Information

• Account management — create and secure your account, verify your email via OTP, and maintain session security.
• Service delivery — operate plant monitoring, logbooks, operator and service-partner coordination, reminders, and reporting.
• Billing — process subscription payments, generate invoices, and apply applicable taxes (GST).
• Communication — send OTPs, confirmations, service reminders, and policy or account notifications by email, SMS, or push.
• Security & fraud prevention — monitor for suspicious activity and unauthorised access.
• Legal compliance — maintain records required by law and respond to lawful requests.

5. Data Sharing & Disclosure

We engage trusted third parties to provide services on our behalf:

• Payment processing partners (e.g. Razorpay)
• Email and SMS delivery providers
• Firebase Cloud Messaging for push notifications
• Cloud hosting and infrastructure providers

All such providers are bound by data protection obligations and may use your data only to provide services to us. We may also disclose information where required by law, court order, or to protect our rights, users, or safety.

6. Data Security

• Encrypted transmission — data between your device and our servers is protected using TLS.
• Password hashing — passwords are stored using BCrypt and are never readable by us.
• Private file storage — KYC and other sensitive documents are stored outside the public web root and served only through authorised, access-controlled requests.
• Session controls — short-lived access tokens, limited concurrent sessions, and re-authentication for sensitive operations.

7. Data Retention

• Active accounts: retained while your account is active and for a reasonable period thereafter.
• Logbook records: retained as operational records; once submitted, logbook entries are locked and cannot be edited, to preserve data integrity.
• Transaction & tax records: retained as required by applicable tax and financial law.
• Technical logs: retained for a limited period for security and fraud analysis.

Upon an account deletion request, we will remove or anonymise your personal data, except where retention is required for legal, regulatory, or legitimate business purposes (such as outstanding payments, invoices, or ongoing disputes).

8. Your Rights & Account Deletion

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete information (most profile details can be updated directly in your account).
• Erase your account and personal data, subject to legal and legitimate business retention needs.
• Object or restrict certain processing.

9. Grievance Officer (As per IT Act, 2000)

In compliance with the Information Technology Act, 2000 and applicable rules, the Grievance Officer can be contacted at:

Grievances are acknowledged within 24 hours (excluding weekends and public holidays) and redressed within 30 days of receipt.

10. Contact Us