Privacy Policy
This Privacy Policy explains how Thobde Vedic Farms Pvt Ltd (�Company�, �we�, �us�) collects, uses, stores, and protects personal information when you use the Vedic Way farmer mobile application (�App�, display name CarbCred) and related programme services hosted at vedicway.co.in.
By registering, logging in, or continuing to use the App, you consent to the practices described below, in addition to the in-app Farmer Carbon Credit Participation Agreement and consent screens shown at login.
1. Who we are
Data controller: Thobde Vedic Farms Pvt Ltd
Programme: Vedic Way � digital farmer registration, land parcel registry, tree inventory,
document verification, and carbon / regenerative agriculture programme participation (Maharashtra, India).
Contact: carbon@thobdevedicfarms.com
2. Information we collect
Depending on how you use the App, we may collect:
- Identity & contact: legal name, relation name, mobile number, optional email address, national ID fields, Aadhaar number (when provided), PAN, and preferred contact details for grievances.
- Authentication: mobile OTP verification records, optional Aadhaar OTP verification reference, session tokens stored securely on your device, and audit logs (timestamps, device identifier).
- Land & farm data: parcel boundaries, GPS coordinates and accuracy, geo-tagged corner points, tenure details, crop and tree inventory, biomass and biochar programme records where applicable.
- Documents & media: uploaded land records (e.g. 7/12 extract, ownership documents), identity documents, geo-tagged photographs of land, crops, trees, biomass, biochar application, soil samples, and mobile-lab verification videos (which may include audio when recorded).
- Payment details: UPI ID, payment method preference (UPI, PhonePe, Google Pay, or bank transfer), and payout-related records administered by programme staff.
- Device & technical data: a programme-specific device identifier sent with API requests, network connectivity status for offline sync, app version, and standard server logs (IP address, request timestamps) for security and troubleshooting.
- Location & sensors: precise location while you capture farm boundaries or geo-tagged photos; device compass heading for photo orientation (motion sensors on iOS).
- Communications: grievance descriptions and support messages you initiate (including via WhatsApp when configured).
3. How we use your information
We use collected information to:
- Verify farmer identity and eligibility for the Vedic Way programme.
- Register land parcels, tree inventory, and supporting documents for staff review.
- Operate monitoring, reporting, and verification (MRV) for carbon, biomass, biochar, and ESG programme activities.
- Process programme payments and grievances, and communicate status updates.
- Detect fraud, duplicate claims, and programme compliance issues.
- Maintain audit trails required for registry, verification, and legal compliance.
- Improve App reliability, security, and support.
4. Legal basis & consent
Processing is based on your explicit consent at login and registration (including geo-tagging consent, Aadhaar/OTP consent where shown, and the Farmer Participation Agreement), performance of the programme contract, and compliance with applicable Indian law. You may withdraw consent for optional features by contacting us; withdrawal may limit programme participation where data is required for verification.
5. Permissions on your device
The App may request the following permissions:
- Location � to mark land corners and verify farm parcels on the map.
- Camera & photo library � to capture or attach registration documents and geo-tagged field photos.
- Microphone � when recording mobile-lab verification videos.
- Notifications � for programme status updates (local and, when configured, push notifications).
- Internet � to sync data with
https://vedicway.co.in/api/v1.
You can change permissions in your device settings; some features will not work without them.
6. Data storage & security
- Programme data is stored on secure servers operated for Vedic Way (production API:
https://vedicway.co.in/api/v1). - Authentication tokens on your device use platform secure storage (iOS Keychain / Android Keystore).
- Release builds may use TLS certificate pinning to protect API communication.
- We apply access controls, encryption for sensitive configuration, and staff authorization so only authorised programme personnel access farmer records.
7. Data sharing & third parties
We do not sell your personal data. We may share data with:
- Service providers that help us operate the programme � for example SMS OTP delivery (HSPSMS), optional payment processing (Razorpay), optional cloud export storage (AWS S3), optional satellite NDVI providers, and optional push notification services (Firebase Cloud Messaging) when enabled by the programme administrator.
- Verification & registry partners � auditors, carbon registries, lab partners, and ESG reporting entities as required for programme verification and compliance.
- Legal authorities � when required by law, court order, or to protect rights, safety, and programme integrity.
Third parties are permitted to process data only for the purposes described and under appropriate confidentiality and security obligations.
8. Data retention
We retain farmer registration, land, document, and audit records for the duration of programme participation and as required for carbon registry, tax, legal, and compliance purposes � typically aligned with the minimum programme term in your participation agreement. Anonymised or aggregated data may be retained longer for reporting. You may request deletion subject to legal and contractual retention requirements.
9. Your rights
Subject to applicable law (including the Digital Personal Data Protection Act, 2023, when in force), you may:
- Request access to or correction of your personal data.
- Request deletion of your CarbCred farmer account and associated data � see our Account & data deletion page (https://vedicway.co.in/account-deletion).
- Withdraw consent where processing is consent-based (with programme limitations noted above).
- Raise a grievance through the App or by emailing carbon@thobdevedicfarms.com.
We will respond within a reasonable period and may verify your identity before acting on requests.
10. Children
The App is intended for farmers and authorised programme participants aged 18 and above. We do not knowingly collect personal data from children without appropriate guardian consent.
11. International transfers
Primary data processing is intended to remain in India. If data is transferred outside India (for example through a cloud or registry partner), we will apply appropriate safeguards required by applicable law.
12. Changes to this policy
We may update this Privacy Policy from time to time. The �Last updated� date at the top will change when we do. Material changes may also be communicated in the App or by programme administrators.
13. Contact us
For privacy questions, data access requests, or programme support:
Email: carbon@thobdevedicfarms.com
Website: https://vedicway.co.in
Company: Thobde Vedic Farms Pvt Ltd