1. Who we are
Govt License (govtlicense.com) is run by Piyush Chawla.
For the personal data you give us, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the DPDP Act) and its Rules.
This notice also follows the Information Technology Act, 2000.
Contact: [email protected].
2. What we collect and why
| Data | Why we need it |
|---|---|
| Your name, your email address and how you log in (Google, email link or password). If you use Google, we receive your name, email and a Google account ID. | To create and run your account. |
| A username, and your business name if you add it. | To identify your account and to show on checklists you share. |
| The businesses, outlets and licences you add, with expiry dates, licence numbers and notes. | To show your licences and send renewal reminders. |
| A copy of a licence (PDF, JPG or PNG, up to 5 MB), only if you upload it. | To keep it for you in a private vault. |
| The guides you save. | To show your saved list. |
| Your choices: what you agreed to, when, and which version of this notice. | To respect your choices and to show that you made them. |
| The name and email of a person you nominate. | To let that person use your rights if you die or cannot act. |
| Messages you send us: the contact form (name, mobile number, optional email, message), corrections and grievances. | To answer you. |
| The emails we send you and whether they were delivered. | To send reminders and to fix delivery problems. |
| Page visits and, only if you accept analytics, clicks and scrolling. | To improve the site. |
| Technical data your browser sends, such as IP address, device and browser type. | To deliver and protect the site. |
3. What we do not collect
We do not ask for Aadhaar numbers, PAN numbers or bank details, and we ask you not to upload Aadhaar or bank documents.
Ticking a document in a checklist only records that you have it on your own device. It is not sent to us.
We no longer collect a mobile number or WhatsApp choice in your profile, because we do not use them. The contact form still asks for a mobile number so we can call you back about a message you send.
4. Your consent
We process your personal data with your consent, given when you create an account, press Accept, or send us a form. We ask for each purpose separately:
- Required for an account: you are 18 or older, you agree to this notice, and you agree to receive renewal reminders by email.
- Optional: update emails and tips.
- Optional: visit analytics with Microsoft Clarity.
You can withdraw any consent at any time in Your account, or in Cookie and analytics settings at the bottom of every page. It is as easy to withdraw as to give, and it takes effect at once. Withdrawing does not undo what we did before.
Where the law requires or allows it, for example to keep records or answer a legal order, we may also use data without your consent.
5. Who processes your data
| Provider | What it does for us |
|---|---|
| Supabase | Our database, login, private file storage and server functions. |
| Resend | Sends our emails. |
| Cloudflare | Hosting, security and page-visit counts. |
| Sign in with Google, the One Tap prompt and Google Fonts. | |
| Microsoft Clarity | Visit analytics, only if you accept. |
They process data for us under their terms. Shared checklists include your name and email, and only go to the people you choose.
We share data with authorities only when the law or a valid order requires it.
We do not sell your personal data and we do not use it for advertising.
6. Data outside India
Our providers run servers in several countries, so your data may be processed outside India.
The DPDP Act allows this unless the Government restricts a country. We will follow any such restriction.
7. How long we keep it
| Data | How long |
|---|---|
| Your account, licences, reminders, saved guides and nominee | While your account is active. We delete them when you delete your account. |
| An account nobody has logged in to for 24 months | Deleted automatically. We email you 30 days and 7 days before. Log in once to keep it. |
| Licence files in your vault | Until you remove them or delete your account. |
| Records of your consents | While your account exists. They are deleted with it. |
| Contact and correction messages | 12 months, then deleted. |
| Logs of emails we sent | 12 months, then deleted. |
| Grievance records | 3 years after we close them. |
| Backups | Copies are overwritten as our provider's backups expire, normally within 30 days. |
Microsoft and Cloudflare keep their own visit data under their own rules.
8. Your rights and how to use them
Under the DPDP Act you can:
- ask for a summary of the data we hold and how we use it;
- correct or update your data;
- ask us to erase your data;
- withdraw a consent;
- name a person to use your rights if you die or cannot act;
- raise a grievance with us.
If you have an account, log in and open Your account. Profile lets you correct your details. Your consents lets you withdraw. Your data and rights shows what we hold, lets you download it, name a nominee and write to the Grievance Officer. Delete my account removes your account, your licences, reminders, saved guides, nominee, consent records, email lists and your vault files.
If you do not have an account, email [email protected] from the address we hold.
9. Grievance Officer and complaints
Grievance Officer: Piyush Chawla.
Email: [email protected].
We reply within 7 days.
Please write to us first. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
10. Children
You must be 18 or older to have an account.
If you tell us you are under 18, we do not create or keep an account for you. A parent or guardian must sign up on your behalf.
If you think a child has an account, write to us and we will delete it.
11. Security and breaches
We protect your data with encryption in transit and at rest, a rule on every table so each person can open only their own rows, a private vault for files, limited staff access and hashed passwords. Our public website code contains no secret keys.
No system is perfectly safe. If a breach affects your data, we will email you without delay. We will tell you what happened, what it may mean for you, what we have done and what you can do. We will also report it to the Data Protection Board of India, as the Rules require.
12. Cookies and browser storage
| Item | Purpose |
|---|---|
| Login session | Keeps you logged in. |
| Language and text size | Remembers your choice. |
| Your analytics choice and your agreement | Remembers what you chose. |
| Short-lived form and reminder drafts | Keeps what you typed if the page reloads. |
You can clear these in your browser settings at any time. We use no advertising cookies.
13. Visit analytics
Microsoft Clarity shows us how people use the site (clicks, scrolling and page visits). It loads only after you press Accept in the banner. If you reject, or do not choose, it is not loaded and its cookies are removed.
Clarity does not record what you type in forms, and we never load it on account, reminder or unsubscribe pages.
Site search: if you accept analytics, the words you type in the search box (up to 60 letters, in lowercase), the number of results and the result you open are sent to Clarity. This tells us which guides people look for and cannot find. We never send your name, your account or anything that looks like a phone number or an email address.
You can change your choice at any time with Cookie and analytics settings at the bottom of every page.
We also count page visits with Cloudflare Web Analytics. It uses no cookies and does not track you across sites.
14. Changes and version
This is version 2026-10-29, dated 29 October 2026.
If we change this notice in a way that needs your agreement again, we will ask you before you continue. For other changes, we update the date at the top.