Privacy Policy
Effective date: 1 June 2026 · Compliant with Digital Personal Data Protection Act, 2023 (India)
1. Who We Are
Transformatrix Pvt Ltd ("PehchanKaun", "we", "us", "our") operates the PehchanKaun background verification platform. We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) in respect of the personal data we collect and process on this platform.
Registered address: Mumbai, Maharashtra, India.
Contact: info@transformatrix.in
2. What Data We Collect
We collect personal data in the following categories when conducting background verification checks on behalf of our client organisations:
| Identity data | Full name, date of birth, gender, father's name, Aadhaar number, PAN, Passport number, Voter ID, Driving Licence number |
| Contact data | Mobile number, email address, current and permanent address |
| Employment data | Employer name, designation, employee ID, joining/relieving dates, UAN |
| Education data | Institution name, degree, year of passing, roll number, board/university |
| Financial data | Bank account details, credit score (CIBIL / Experian), IFSC code |
| Biometric data | Selfie photograph (for face match/liveness checks only) |
| Reference data | Name, phone, email, Aadhaar number, address of two personal references (Self Address Verification check only) |
| Device/location data | GPS coordinates, device type (Self Address Verification check only) |
| Document uploads | Aadhaar card image, CV, degree certificates, bank statements, and other supporting documents you choose to upload |
| Consent data | IP address, browser/device information, and timestamp recorded when you give consent |
3. Why We Collect It (Purpose)
We collect and process personal data solely for the purpose of conducting background verification checks requested by the organisation that invited you to this platform. This includes:
- Verifying your identity against government databases
- Confirming employment, education, and address details
- Checking court, FIR, and criminal records
- Analysing financial standing via credit bureau checks
- AI-assisted media and web presence analysis
- Generating a verification report for the requesting organisation
We do not use your data for advertising, profiling, or any purpose unrelated to your background verification.
4. Legal Basis for Processing
We process your personal data on the basis of your explicit, informed consent obtained through the consent form sent to you by the requesting organisation, as required under Section 6 of the DPDP Act, 2023.
You may withdraw your consent at any time by visiting the verification link sent to you and selecting the withdrawal option, or by writing to us at info@transformatrix.in. Withdrawal of consent will stop further processing but will not affect data already processed.
5. Who We Share Your Data With
We share your personal data only to the extent necessary to conduct verifications, with the following categories of service providers:
| Government database APIs | DeepVue, SurePass — passthrough API calls to UIDAI, NSDL, MCA, EPFO, court databases. These providers do not retain your data beyond the API call. |
| Payment processing | Razorpay (processes payments by the requesting organisation; does not receive candidate personal data) |
| Infrastructure & storage | Hostinger VPS — application servers and encrypted document storage (MinIO) hosted in India |
| Email delivery | Nodemailer / platform SMTP — for sending you verification links, OTPs, and notifications. No personal data is retained by the mail provider. |
| AI analysis | Google Gemini, Anthropic Claude — for advanced media and CV analysis checks only (where ordered by the requesting organisation) |
We do not sell your personal data to any third party.
6. Data Storage & Security
- All data is stored on servers located in India (Hostinger VPS)
- Personal data fields (name, email, mobile, Aadhaar, PAN, etc.) are encrypted at rest using AES-256 encryption
- Documents are stored in encrypted object storage
- All data is transmitted over HTTPS (TLS 1.2+)
- Access to your data is restricted to authorised personnel of the requesting organisation and Transformatrix staff, logged in our audit system
- Multi-factor authentication is required for all administrative access
7. How Long We Keep Your Data
Your personal data is retained for 90 days from the date your verification was initiated, after which it is automatically anonymised — your name, contact details, documents, and verification results are permanently deleted from our systems.
The requesting organisation may apply for a retention extension (subject to our approval) if there is a legitimate legal or business reason. You will be notified of any such extension.
Anonymisation means: name replaced with "[DELETED]", email/mobile/Aadhaar set to null, all uploaded documents deleted from storage, and verification report permanently deleted.
8. Your Rights Under the DPDP Act 2023
| Right to Access (§11) | Request a copy of all personal data we hold about you. Use the link sent to your email or write to info@transformatrix.in. |
| Right to Correction (§12) | Request correction of inaccurate personal data. Write to info@transformatrix.in with the corrected information. |
| Right to Erasure (§12) | Request deletion of your personal data before the 90-day period. We will action your request within 30 days. |
| Right to Withdraw Consent (§6) | Withdraw your consent at any time. Processing already completed cannot be undone. |
| Right to Grievance Redressal (§13) | Raise a complaint about how your data is handled. We will respond within 30 days. |
| Right to Nominate (§14) | Nominate another individual to exercise these rights in case of death or incapacity. |
To submit an erasure or consent-revocation request online, use our Data Erasure Request form. Alternatively, email legal@transformatrix.in.
9. Grievance Redressal
If you have any complaint or concern about how your personal data is handled, please contact our Grievance Officer:
Grievance Officer
Transformatrix Pvt Ltd
Email: legal@transformatrix.in
We will acknowledge your complaint within 48 hours and resolve it within 30 days as required by the DPDP Act, 2023.
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India (DPBI) once it is established by the Government of India.
10. Children's Data
The PehchanKaun BGV platform is intended for use only in relation to individuals who are 18 years of age or older. We do not knowingly process personal data of children (persons under 18). If you believe we have inadvertently collected data relating to a minor, please contact us immediately at info@transformatrix.in and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the email associated with your verification or by displaying a notice on the platform. The effective date at the top of this page will always reflect the latest version.
12. Contact Us
Transformatrix Pvt Ltd
Platform: PehchanKaun BGV
General enquiries: info@transformatrix.in
Grievances: legal@transformatrix.in