Last updated: 28 October 2026
We don't ask for your name.
We use your information only to:
We do not sell or share your personal data with advertisers or unrelated third parties.
When you file a complaint, you confirm that you are 18 or older and agree to your details being used as described here. We record when you agreed and which version of this notice you saw. If you are under 18, please ask a parent or guardian to file the complaint for you.
You can withdraw your consent at any time by writing to our Grievance Officer. We will then stop using your details for anything further, except records we must keep for audit or by law, as described below.
We use a few outside services, only for these purposes:
If your complaint needs a government department, the officers of that department's office can see the complaint, its location and photos, but not your name, phone or email. Every case they open is recorded.
If you rate how your complaint was handled, your rating and any comment are seen by your representative's office (the representative and office managers) and GrievIQ staff. Ratings are never shown publicly. Your comment is removed together with your other details when your case is anonymised.
If you send feedback about the app, we keep what you wrote (and your email, if you gave it) for one year so our team can read it and reply, then delete it. Your feedback is never sent to representatives.
If you choose "Get updates on this phone" for a complaint, we keep your phone's notification address, linked to that complaint only, and use it only to send updates about it (acknowledged, moved up, marked fixed, closed). Your browser's notification service (Google, Apple, Mozilla or Microsoft) carries the alert in encrypted form and can't read it. We delete the address when the complaint is closed, or as soon as you turn updates off.
When you add a photo to a complaint, we ask your phone for its location once, with your permission, and read the photo's date and whether a camera took it. We use this only to check the photo was taken near the problem, and keep only the distance and its accuracy, never where you were. Saying no doesn't stop your complaint.
We count visits to these pages to see how GrievIQ is used, without cookies and without storing your network address. Each visit records only the city it came from (as our host Cloudflare reports it) and the time; a visitor is recognised for one day only, by a one-way code that cannot be traced back after that day. If your browser sends "Global Privacy Control" or "Do Not Track", your visits are not counted.
To stop floods of complaints, GrievIQ counts how many complaints are filed each day with one phone number and from one device (at most 5 and 15), and how many photos are added (at most 40). It counts a one-way code made with a secret that changes every day, never the number or network address itself, and the counts are deleted the next day.
If you choose to speak your complaint instead of typing it, your own browser turns your voice into text (Chrome sends the sound to Google for this). GrievIQ receives only the text you then send, never the recording.
These services may process data outside India. They act on our instructions and may not use your data for their own purposes.
When you file a report, its tracking number is saved in your browser on that device, so the home page can show how many reports you've filed there. Your language choice is saved the same way. This stays on your device and we can't see it. You can remove the tracking numbers at any time with "Forget reports on this device" on the home page.
If you look up a ward, its name is remembered on this device so the home page can show it next time. You can remove it with "Forget".
Complaint records (tracking number, description, status history) are kept for 3 years from filing, or 1 year after resolution, whichever is longer. Your mobile number and email are kept only as long as the complaint they belong to. When that time ends, your phone number, email, the complaint text, location, photos and any notes are removed; the tracking number, ward, issue type and dates are kept for statistics, without anything that identifies you. If you gave an email, we tell you 7 days before. A case is kept longer only while it is under a legal hold or an audit review. Sign-in records of representatives and staff keep their IP address and browser details for 1 year. One-time codes expire after 10 minutes and work only once: a code is wiped as soon as it's used, and all verification records are deleted within a day.
Photos are kept while a complaint is open. One year after a complaint is finally closed, full-size photos are deleted and small previews are kept as a record; the previews are deleted when the complaint record's own time (above) ends. If a complaint is reopened, the time starts again from when it closes. Photos that were added but never sent with a complaint are deleted after 2 days.
Under India's Digital Personal Data Protection Act, 2023, you may ask to see, correct or delete your personal data, subject to our legitimate need to keep complaint records for accountability. You can also withdraw your consent to us using your data at any time; this doesn't affect anything already done before you withdrew it. To do any of these, email us at [email protected].
If you're not satisfied with our response, you can complain to the Data Protection Board of India.
For questions or complaints about how we handle your personal data, or to use your rights, write to our Grievance Officer, IOTC (Indus Overseas Trading Corporation), at [email protected]. We acknowledge every request within 7 days and resolve it within 30 days.
When you add a photo of the work done, we ask your phone for your location once, only with your permission, to show the photo was taken at the spot. It is saved with that photo and never tracked in the background. GrievIQ staff see how far it was from the complaint's location; citizens see only a warning if it was far away, never your exact location. You can say no, and still add the photo.
Representatives sign in with Google. We receive only your name and email address, use them only to check that you are a registered representative, and record when you sign in and out. You are signed out after 1 hour without activity and after 24 hours in any case.
If a representative adds you to their team, we keep your name and email address to let you sign in, the job details the office records for you (designation, duties, the wards and issue types you cover, and whether you are on leave), and a record of what you do on cases. Team members see the same complaint details as the representative, never a citizen's full phone number; office assistants see photo previews only.
What GrievIQ staff, representatives and their teams do (signing in, and actions on complaints) is kept as an audit record. These records can't be changed or deleted, and are read only by GrievIQ's auditor and super admin to check that complaints are handled properly.
If you apply to be a Community helper, we keep your name, mobile number, email address, the ward or village you will help in, your type of photo ID and only its last 4 characters (never a full Aadhaar number), a photo of the ID, a selfie holding it, and a photo of your face for your digital ID card. Two different GrievIQ staff members check these, one of them on a video call with you. We use them only to decide whether you can be a helper, and to check again once a year.
The ID photo and the selfie are deleted 30 days after the decision on your application or yearly check. Your card photo is kept only while you are a helper, and deleted as soon as you stop, withdraw, are removed or are refused. The rest of your helper record (name, contact details, ID type and last 4 characters, and what happened when) is kept as the audit record of who was allowed to file complaints for citizens. Payments are made through Razorpay: we keep the payment reference, amount, dates and any refund, as accounts and tax law require, and never see your card, UPI or bank details.
Only GrievIQ staff with permission see your helper details, and every time they open one of your photos it is recorded with their name. Citizens, representatives and the public never see your name, mobile number or email. Anyone can check your helper number, which shows only whether it is active, the ward or village and since when. Your card photo is shown only to a person who scans the live QR code on your ID card, never for a typed-in number.
If a Community helper files a complaint for you, we email you a code and a link (or GrievIQ staff phone you) to ask whether you asked for it, and nothing is sent to anyone until you say yes. The helper can follow your complaint's progress until you remove them, which you can do at any time on the Track page. The office handling it sees only that it was filed with help, never who helped.
When you scan a helper's ID card, your phone asks GrievIQ whether the card is genuine. We don't record who scanned it; to stop misuse, we keep only a count of checks from each device for that day, made in the same one-way way as our visit counts, and delete it the next day.
GrievIQ is built and operated by IOTC (Indus Overseas Trading Corporation). For any privacy-related questions, reach us at [email protected].