This Privacy Policy describes how we collects, uses, stores, and protects information through the B2C Connnect mobile application . B2C Connnect is an internal banking-operations app used by authorized bank staff and managers to manage customer accounts, KYC documentation, credit reports, vouchers, and guest house administration.
1. Information We Collect
1.1 Information About App Users (Staff/Managers)
Login credentials (user ID, PIN/password) and authentication tokens
Device information (device model, OS version, unique device identifiers)
App usage logs and activity performed within the App (for audit and security purposes)
Approximate or precise location, when location permissions are granted .
1.2 Customer Information Handled Within the App
As part of normal banking operations, authorized staff use the App to view, enter, or upload:
KYC details: name, address, date of birth, phone number, identity documents (e.g., Aadhaar, PAN)
Account information: account numbers, GL codes, balances, transaction history, account statements
Credit report / CIBIL data retrieved for underwriting or verification purposes
Loan, FD, RD, and share account application details
Document images and scans uploaded through the camera or gallery for KYC and account-opening workflows
Guest house booking details (guest name, contact information, room assignment, check-in/check-out records) for the guest house administration module
This customer data is entered and viewed by authorized staff and is transmitted securely to our backend banking systems. It is not collected directly from end customers through this App.
2. Device Permissions
The App requests the following device permissions. Each is used only for the stated purpose:
a)Camera
Capturing photographs of customers and documents for document upload workflows
2)Read / Write External Storage
Saving generated PDF reports (e.g., account statements) and selecting existing images for upload
3)Coarse / Fine Location
Recording the location of field staff during door-step banking (DSB) visits and guest house / on-site operations, for verification and audit purposes
4)Internet / Network State
Communicating securely with our banking backend to submit and retrieve data
3. How We Use Information
To enable staff to perform core banking operations: account opening, KYC verification, voucher entry, and report generation
To generate and download PDF account statements, day books, and cash scrolls
To verify staff identity and location during door-step banking visits
To retrieve credit bureau (CIBIL) reports for loan underwriting, where authorized
To manage guest house bookings, check-ins, and check-outs
To maintain audit trails and logs required for banking compliance and internal controls
To detect and prevent unauthorized access (e.g., screenshot/screen-recording is disabled within sensitive screens)
4. Data Security
Sensitive data transmitted between the App and our servers is encrypted in transit using AES-256 and RSA encryption before submission.
Screens displaying sensitive financial or customer data have screenshot and screen-recording disabled.
Access to the App requires authenticated staff login; access levels are controlled by admin-assigned roles and permissions.
We apply administrative, technical, and physical safeguards to protect data against unauthorized access, alteration, disclosure, or destruction.
5. Data Sharing
We do not sell personal or customer data. Information handled through the App may be shared only with:
Our own backend banking systems and authorized internal departments
Credit bureaus (e.g., CIBIL/CIR providers), where required for credit checks on loan applicants
Regulatory authorities (e.g., RBI, or applicable banking regulators), where required by law or regulation
Law enforcement agencies, when legally compelled through valid legal process
6. Data Retention
Customer and transaction data is retained in accordance with applicable banking regulations and record-retention requirements (typically a minimum number of years as mandated by regulatory authorities). Staff account and audit-log data is retained for as long as needed for security, compliance, and operational purposes.
7. Children's Privacy
This App is intended for use by adult, authorized bank staff only and is not directed at children. We do not knowingly collect personal data from individuals under the age of 18 through this App.
8. Your Rights
Customers whose data is processed through this App may contact us using the details below to request access to, correction of, or deletion of their personal information, subject to applicable banking record-retention laws. Staff users may contact their system administrator for account-related data requests.
9. Third-Party Components
The App uses the following third-party components to function:
PDF generation and rendering libraries, for creating and viewing account statements
Image cropping and camera-capture libraries, for document photo capture during document uploading
Networking libraries (Volley), to communicate with our banking backend over encrypted channels
These components process data locally on-device or transmit it directly to our own servers; they do not independently collect or sell data to third parties.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Continued use of the App after changes are posted constitutes acceptance of the revised policy.
11. Scope
This Privacy Policy is applicable to all users of our App, platforms, website, and related products.
12. Contact Us
For any questions regarding this Privacy Policy or the App, please contact your organization's system administrator or the application support team.