Legal
Privacy Policy
Last updated: 21 May 2026
This Privacy Policy explains how Emission X Technologies ("Emission X", "we", "us") collects, uses, stores, and protects your personal information when you use our mobile application and website. By using our services, you agree to this policy.
1. Information We Collect
- Phone number — used for OTP-based authentication via AWS Cognito. We do not store passwords.
- Name and profile information — provided voluntarily during onboarding.
- Farm or pilot location — collected only during active use of location-based features.
- Device token (FCM) — used to deliver push notifications via Firebase Cloud Messaging and AWS SNS.
- Payment information — processed entirely by Razorpay. Emission X does not store card or UPI details.
- Usage data — app interactions, booking history, and session metadata for service improvement.
2. Authentication & Security
- Emission X uses OTP-based phone authentication powered by AWS Cognito. No passwords are created or stored.
- All API communication is encrypted via TLS 1.3.
- Authentication tokens are short-lived (1 hour) and stored in device secure storage.
- Refresh tokens are rotated on every use and stored with 256-bit encryption on device.
3. Device Permissions
- Location — required for matching farmers with nearby pilots and for pilot navigation. Location is only active during live sessions.
- Camera / Storage — required for uploading farm documents and pilot licence verification.
- Notifications — used to send booking updates, pilot status alerts, and payment confirmations.
4. Payment Handling
- All payments are processed by Razorpay, a PCI-DSS compliant payment gateway.
- Emission X never stores raw card numbers, CVV, or UPI credentials.
- Payment signatures are verified server-side before any service is confirmed.
- Transaction records are stored securely in AWS DynamoDB for dispute resolution.
5. Data Sharing
- We do not sell your personal data to third parties.
- Booking details (farmer name, farm location, contact) are shared only with the pilot assigned to that specific job.
- Anonymised, aggregated usage data may be used for analytics and service improvement.
- Data may be disclosed if required by law or valid legal process.
6. Data Retention
- Account data is retained for the duration of your active account.
- Booking history is retained for 3 years for legal and audit purposes.
- You may request account deletion by contacting support@emissionx.in.
- After deletion, personal data is removed within 30 days. Legal records may be retained as required by law.
7. Your Rights
- Right to access — request a copy of your personal data at any time.
- Right to correction — update inaccurate information through the app or by contacting us.
- Right to deletion — request account and data deletion via support@emissionx.in.
- Right to portability — receive your data in a structured, machine-readable format on request.
8. Contact
- For any privacy concerns, data requests, or questions, contact us at support@emissionx.in.
- We will respond to all privacy-related requests within 72 hours.