Legal
Privacy policy
What we hold, why we hold it, and the two things we never do with it.
Draft
Draft
This is a draft, pending legal review.
The summary below describes what Scanblip actually does today, and it is accurate. The numbered outline that follows it is the structure a lawyer will complete; it is not yet a legal notice, and it should not be relied on as one. It will be replaced by the reviewed text before anyone can create an account in production.
The short version
In plain language
Nine sentences. Everything else on this page is detail underneath them.
- We collect your email address so you can sign in and receive alerts.
- We collect your WhatsApp number to check that you are a real person once. It is never shown to anyone.
- We store the vehicle details you choose to add. Only what you mark public appears on your QR page.
- We store the alerts you send or receive, to deliver them and to review abuse reports.
- We store which QR pages your account opens, for abuse prevention and for your own “is my QR working” history.
- We store security records — a hashed address, a device family and the time — to stop abuse.
- We do not sell your data, and there are no advertising trackers on this site.
- We never give the person who scans your QR your details, and we never give you theirs.
- Information may be disclosed when legally required or otherwise permitted by applicable law.
The other party
Who we are
- Legal entity
- RGOLabs India Pvt. Ltd.
- Registered address
- Mahagunpuram NH 24 Ghaziabad, Uttar Pradesh 201002
- Grievance officer
- Being updated
Until these are decided, write to us through the contact page.
Not yet written
Sections the full policy will contain
The structure counsel will fill in. None of it is in force.
Who we are
To be writtenLegal entity, registered address, grievance officer and privacy contact.
What we collect and why
To be writtenA table by data class: email address, WhatsApp number, vehicle details, alerts, scan and security records, support correspondence, consent records.
Legal basis and consent
To be writtenItemised purposes, which are optional, and how to withdraw an optional consent as easily as it was given.
What we never do
To be writtenNo sale of data, no advertising trackers, no search by number plate, no disclosure of one side’s details to the other.
Who processes data for us
To be writtenThe processor table with the country each one operates in, and the cross-border transfer note.
Disclosure
To be writtenWhen information may be disclosed, and the process we follow for a request from a public authority.
Retention
To be writtenHow long each record class is kept, in plain words, including the hold that applies after an account is deleted.
Your rights
To be writtenAccess and export, correction, erasure, nomination and grievance, with the response period.
Security measures
To be writtenThe named controls: passwords stored only as scrypt hashes, encryption at rest for contact details, and an append-only audit log.
Children
To be writtenThe service is for people aged 18 and over.
Changes
To be writtenHow a new version is published and how you are told about it.
Version history
To be writtenEvery published version, with its effective date.