1.Scope and status
This Privacy Policy governs the processing of personal data by NagarPulse Tech LLP (“CityPulse”, “Company”, “we”, “us” or “our”) through the CityPulse mobile application, website, APIs, dashboards and related services (“Platform”). It must be read together with the Terms of Service, Community Guidelines, Business & Advertiser Terms and applicable notices presented at collection.
2.Independent private platform
CityPulse is a privately operated technology platform. Unless expressly stated under a valid written arrangement, CityPulse is not a government department, municipal corporation, police authority, statutory authority, agency or instrumentality, and does not represent that any public authority has endorsed, approved, certified or guaranteed the Platform.
3.Data fiduciary / responsible entity
NagarPulse Tech LLP is the entity responsible for determining the purpose and means of processing personal data for CityPulse. Registered office: House No. 9, S. No. 392/113, Singapur Garden, Takli Road, Nashik – 422010, Maharashtra, India. Privacy contact: info.citypulsetech@gmail.com. Grievance Officer: Dhruvesh Anil Wagh. Email: info.citypulsetech@gmail.com.
4.Categories of personal data
- Identity/account data: name, mobile number, email, username, profile information and authentication data.
- Location data: approximate or precise location only where technically collected and permission/other lawful basis is applicable; background location only if genuinely implemented and separately disclosed.
- Device and technical data: device type/model, operating system, app version, IP address, identifiers, diagnostics, crash information, security logs and similar technical data.
- Usage data: screens viewed, feature interactions, searches, session information and engagement data to the extent actually collected.
- User Content: posts, comments, photographs, reviews, reports, messages, community submissions and business-submitted material.
- Transaction/booking data: booking, appointment, payment-status or order information where such functionality exists.
- Support and communications: correspondence, complaint details and information voluntarily provided in support interactions.
5.Notice and lawful processing
CityPulse shall present collection notices in a clear and intelligible manner and shall identify the categories of personal data and purposes relevant to the applicable processing. Where consent is the applicable ground, consent shall be obtained through an appropriate mechanism and shall be capable of being withdrawn in accordance with applicable law. Where processing is based on a statutory or otherwise legally recognised ground, the relevant basis shall be documented internally.
6.Purpose limitation
We process personal data for the following purposes:
- Account creation, authentication and account security.
- Providing requested platform features, location-based functionality and user support.
- Bookings, appointments or transactions where applicable.
- Moderation, fraud prevention, abuse detection and platform security.
- Analytics, diagnostics, service improvement and reliability, subject to applicable law and the production configuration.
- Legal compliance, responding to lawful requests and establishing, exercising or defending legal rights.
7.Data minimisation and optional permissions
CityPulse shall seek to collect only data reasonably necessary for identified purposes. Optional permissions shall not be represented as mandatory unless the relevant feature genuinely cannot operate without them. A user may disable device permissions, but doing so may disable or impair related functionality.
8.Location data
CityPulse shall not represent that it continuously tracks a person unless continuous tracking is actually implemented and lawfully disclosed. Precise location shall be used only where required for an identified feature and subject to the applicable notice, permission and lawful processing requirements.
9.Public / UGC areas
Content placed in public communities, reviews, public reports or public listings may be visible to other users and may be copied or redistributed by them. Public CityPulse communications are not represented as private or end-to-end encrypted unless the relevant feature expressly provides such protection. Users shall not post unnecessary confidential or sensitive information.
10.Children
Unless CityPulse deliberately launches a child-directed service with an approved compliance design, the Platform shall be configured for users aged 18 years or above. The age position must be consistent across the app, store listings, advertising and onboarding. If the Platform is made available to children or knowingly processes children's data, additional statutory requirements concerning verifiable parental consent and restrictions on tracking/behavioural monitoring shall be implemented before launch.
11.Service providers and third parties
CityPulse may use cloud hosting, authentication, analytics, crash reporting, maps, communications, payment and security vendors. Current production vendors may include Google/Firebase services, Google Maps/Places and other providers actually implemented. Vendor access shall be governed by appropriate contractual, security and data-processing controls.
12.Disclosure
Personal data may be disclosed to processors/service providers, payment providers, professional advisers, auditors, insurers, corporate transaction counterparties, public authorities, courts, regulators and law-enforcement agencies where reasonably necessary and lawful. CityPulse does not sell personal data.
13.Cross-border processing
Where vendors or infrastructure process personal data outside India, CityPulse shall maintain an appropriate legal and contractual basis and comply with applicable restrictions, notifications, contractual requirements and transfer controls.
14.Security safeguards
CityPulse shall maintain reasonable technical and organisational safeguards appropriate to the risk, including access controls, authentication, least-privilege administration, secure configuration, encryption in transit where appropriate, database security rules, logging, monitoring, vulnerability management, backup/recovery controls and incident response.
15.Personal-data breach / security incident
Upon becoming aware of a personal-data breach or material security incident, CityPulse shall activate its incident-response process, contain and investigate the incident, preserve evidence, assess impact, document the event and make notifications to affected persons and/or authorities where required by applicable law. Nothing in this Policy creates a promise of perfect security.
16.Retention
CityPulse shall retain personal data only for so long as reasonably necessary for the relevant purpose or as required/authorised by applicable law, contractual obligations, security, fraud prevention, tax/accounting, dispute resolution or establishment/defence of legal claims. A documented retention schedule shall govern production and backup systems.
17.Rights and requests
Subject to applicable law and commencement of the relevant provisions, Data Principals may have rights including access to information, correction/update, erasure, withdrawal of consent, grievance redressal and nomination. CityPulse may require reasonable identity/account verification and may refuse or limit a request where permitted by law.
18.Deletion
Users may initiate deletion through Settings → Account → Delete Account or https://citypulseco.in/delete-account. Deletion of the app from a device does not itself delete an account. CityPulse may retain limited information where required or reasonably necessary for law, security, fraud prevention, tax/accounting, disputes or legal claims.
19.Grievance
Privacy and data-protection grievances: Dhruvesh Anil Wagh, Grievance Officer, info.citypulsetech@gmail.com, House No. 9, S. No. 392/113, Singapur Garden, Takli Road, Nashik – 422010, Maharashtra, India. CityPulse shall maintain an internal grievance and request register and process requests within the timelines prescribed by applicable law.
20.Changes
CityPulse may amend this Policy when features, processing activities, vendors, security practices or law change. Material changes shall be communicated through an appropriate mechanism. The effective date shall be displayed.
21.No contractual waiver of law
Nothing in this Policy is intended to exclude or reduce any non-waivable statutory right, obligation or remedy.