This Privacy Policy describes how Multicraft Digital Technologies Private Limited ("we", "us", "our"), the operator of the GATI MITRA programme and the website gatimitra.org, collects, uses, discloses and protects personal information that you ("you", "applicant", "partner", "user") submit through our portal, mobile interfaces or offline forms.
1. Information We Collect
- Identity & contact data: name, father/mother name, date of birth, gender, Aadhaar/PAN (where mandated), photograph, signature, email and mobile number.
- Address & location data: village, block, district, state, PIN code and GPS coordinates of the proposed service centre.
- KYC & financial data: bank account details, IFSC, cancelled cheque, GSTIN (if applicable) and uploaded KYC documents.
- Application data: educational qualification, experience, premises details and any other information you submit through the application form.
- Technical data: IP address, browser type, device identifiers, log files and cookies collected automatically when you access the portal.
2. How We Use Your Information
- To evaluate, process and track your GATI MITRA application and partner onboarding.
- To perform KYC, fraud checks, eligibility verification and due diligence.
- To deliver enrolment kits, training materials and post-onboarding support.
- To send transactional updates (SMS, email, WhatsApp) about your application, ticket or account.
- To meet legal, regulatory and audit obligations.
3. Legal Basis
We process your data based on (a) the consent you provide while submitting the application form, (b) performance of the partner agreement, and (c) compliance with applicable Indian laws including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
4. Sharing of Information
We do not sell your personal data. We may share it only with:
- Authorised programme personnel and field verification agencies of GATI MITRA.
- Banking, payment and KYC service providers strictly for processing your enrolment.
- Government or regulatory authorities where disclosure is required by law.
- Technology vendors hosting our portal under strict confidentiality and data-protection contracts.
5. Data Retention
Application and KYC records are retained for the duration of your engagement with GATI MITRA and for a minimum period thereafter as required by applicable law (typically 7 years for financial and KYC records). Rejected applications are retained for up to 3 years for audit purposes and then securely deleted.
6. Security
We use reasonable technical and organisational safeguards including TLS encryption in transit, role-based access controls, audit logs and encrypted document storage to protect your data from unauthorised access, alteration or disclosure.
7. Your Rights
- Right to access and obtain a copy of your personal data.
- Right to correct inaccurate or outdated information.
- Right to withdraw consent and request erasure, subject to legal retention obligations.
- Right to grievance redressal through our Grievance Officer (see Contact below).
8. Cookies
The portal uses essential cookies for login sessions, language preference and accessibility settings. We do not use third-party advertising cookies. You may disable cookies in your browser, but some portal features may not function.
9. Children
The GATI MITRA portal is intended for adults (18+). We do not knowingly collect data of minors.
10. Changes to this Policy
We may update this Privacy Policy from time to time. The current version will always be available at gatimitra.org/privacy with the "Last updated" date.
11. Grievance Officer / Contact
For any questions, requests or grievances regarding your personal data, please contact:
Grievance Officer — GATI MITRA
Multicraft Digital Technologies Private Limited
Email: support@gatimitra.org
Phone: +91-94186-86941
Website: gatimitra.org

