Privacy Policy

Last updated: 10 June 2026

1. Who we are

This website, FileMyRTI.com (“FileMyRTI”, “we”, “us”, “our”), is operated by RANAZONAI TECHNOLOGIES (OPC) PRIVATE LIMITED, CIN U62011TS2024OPC190928, a company incorporated under the Companies Act, 2013 on 13 November 2024, with its registered office at Flat 202, Radhakrishna Residency, Kalyannagar Phase 3, Hyderabad, Telangana 500045, India.

We help citizens draft, file, track, and appeal applications under the Right to Information Act, 2005 (“RTI”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary that determines how and why your personal data is processed.

This policy explains what personal data we collect, why, how we protect it, and the rights you have as a Data Principal.

2. Scope

This policy applies to personal data we process about visitors, registered users, and customers of FileMyRTI.com and our related communication channels (email, phone, WhatsApp). It does not cover third-party websites we link to, or the government departments to whom your RTI is submitted, which process your data under their own rules and the RTI Act.

3. What personal data we collect

You provide directly:

• Identity and contact details: name, email address, phone number, postal address.
• RTI application content: the subject of your request and any details, reference numbers, or documents you supply for drafting and filing. This may include information about your dealings with government departments.
• Account data: login credentials, or basic profile data if you sign in with Google.
• Payment data: processed by our payment gateway (see Section 7); we do not store your full card or bank details on our servers.
• Communications: messages you send us by email, phone, WhatsApp, or our website forms.

Collected automatically:

• Device and usage data: IP address, browser type, pages viewed, and similar log data.
• Cookies and similar technologies (see Section 6).

We collect only what is necessary to provide the service you have requested.

4. Why we use your data and our lawful basis

Under the DPDP Act we process your personal data on the basis of your consent and for certain legitimate uses permitted by the Act. Purposes include:

We will not use your personal data for a new purpose incompatible with the above without seeking your consent.

5. RTI-specific note

To deliver our service, the personal data and request details you provide are incorporated into RTI applications and submitted to the relevant Public Information Officer or government authority. Once submitted, that authority processes your application under the RTI Act and its own data-handling rules, which are outside our control. Please share only the information necessary for your request.

6. Cookies and analytics

We use cookies and similar technologies to keep you logged in, remember your preferences, measure traffic, and improve the site. We may use analytics and advertising-measurement tools to understand how the site is used and to measure the effectiveness of our communications. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

7. When we share your data

We do not sell your personal data. We share it only with:

• Government authorities — as necessary to file and pursue your RTI (Section 5).
• Payment processor — Razorpay Software Private Limited, to process your payment securely under its own privacy terms.
• Service providers / processors — hosting, email, communication, and analytics providers who process data on our behalf under contract and only on our instructions.
• Legal / regulatory — where required by law, court order, or to protect our rights, our users, or the public.

Any Data Processor we engage is bound to process your data only as we direct and to maintain appropriate security.

8. Data retention and erasure

We retain your personal data only for as long as necessary to fulfil the purposes above, including the lifecycle of your RTI matter and any appeals, and for periods required under applicable law (for example, tax and accounting records are generally retained for up to eight years). When personal data is no longer required and we are not legally obliged to keep it, we will erase or anonymise it. You may also request erasure (Section 9).

9. Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we process about you and the processing activities.
• Correction and updating — have inaccurate or incomplete data corrected or completed.
• Erasure — request deletion of your personal data where it is no longer necessary and not required to be retained by law.
• Grievance redressal — raise concerns with our Grievance Officer (Section 10) and receive a response within the timelines prescribed under the Act.
• Nomination — nominate another individual to exercise your rights in the event of your death or incapacity.
• Withdraw consent — withdraw your consent at any time, as easily as you gave it (Section 11).

We may need to verify your identity before acting on a request.

10. How to exercise your rights — Grievance Officer

To exercise any right above, or to raise a grievance about how we handle your data, contact our Grievance Officer:

• Grievance Officer: Syed Naseer
• Email: synaseer@filemyrti.com
• Phone: +91 99111 00589
• Address: Flat 202, Radhakrishna Residency, Kalyannagar Phase 3, Hyderabad, Telangana 500045

We will acknowledge and respond to your request within the period required under the DPDP Act and applicable rules.

11. Withdrawing consent

You may withdraw consent for any processing based on consent at any time by contacting us at the details in Section 10, or by using the unsubscribe link in our promotional emails. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent necessary to provide the service, we may be unable to continue providing it.

12. Children’s data

Our services are intended for adults (18 years and older). We do not knowingly process the personal data of children without the verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, in line with the DPDP Act. If you believe a child’s data has been provided to us, please contact us and we will take appropriate action.

13. Data security

We maintain reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, disclosure, or loss. While we work to protect your information, no method of transmission or storage is completely secure. In the event of a personal data breach, we will follow the notification requirements under the DPDP Act.

14. Transfers

Your personal data is processed in India. If any processing or storage occurs outside India (for example, by a service provider), we will do so in accordance with the DPDP Act and any restrictions notified by the Government of India.

15. Changes to this policy

We may update this policy from time to time. The “Last updated” date reflects the latest version. Material changes will be communicated through the website or by other appropriate means.

16. Escalation to the Data Protection Board

If you are not satisfied with our response to your grievance, you may lodge a complaint with the Data Protection Board of India, as provided under the DPDP Act.

17. Contact us

RANAZONAI TECHNOLOGIES (OPC) PRIVATE LIMITED (FileMyRTI.com)
Flat 202, Radhakrishna Residency, Kalyannagar Phase 3, Hyderabad, Telangana 500045
Email: synaseer@filemyrti.com | Admin@filemyrti.com | Phone: +91 99111 00589