Privacy Policy

This Privacy Policy explains how Roothscale (“Roothscale”, “we”, “us”), a product of Reclevo Infotech, handles information when a campaign engages our Constituency War Room platform. It should be read together with our Data Protection statement and Terms.

1. Our role

For personal data processed on behalf of a campaign, the candidate’s campaign organisation is the Data Fiduciary and Roothscale acts as its Data Processor under a written agreement, processing data only on documented instructions and for the agreed purposes.

2. Information we process

• Account & staff data — names, email, phone and role of campaign users we issue logins to.
• Public electoral records — electoral rolls and Form 20 results published by the ECI / CEO, and polling-station data.
• Field-collected data — household surveys, grievances, visit logs and related notes gathered by the campaign’s own workers, with consent recorded at the point of collection.
• System telemetry — coverage, activity and audit metadata generated by use of the platform.
• Public external signals — publicly available news and social content relating to public figures, used in aggregate.

3. How we use it

• To operate the platform: voter file, booth analysis, grievance servicing and the Decision Engine.
• To produce recommendations, readiness scores and reports for the campaign.
• To secure, audit, support and improve the service for that campaign.

We do not sell personal data, and we do not pool one campaign’s data to benefit another.

4. Legal basis & consent

Personal data is processed on the basis of consent and other lawful grounds recognised under India’s Digital Personal Data Protection Act, 2023. Where consent is required (e.g. contactable phone numbers, outreach), it is captured and logged as a consent artifact and can be withdrawn.

5. Sharing

We share personal data only with the engaging campaign, with sub-processors strictly necessary to run the service (e.g. cloud hosting and messaging providers under contract), and where required by law. We operate on a strict one client per constituency basis.

6. Storage & security

Data is hosted in India. We apply encryption in transit and at rest, role-based access control, and an append-only audit trail on sensitive records. See Data Protection for detail.

7. Retention

Field-collected survey, consent and grievance data is deleted or returned within 90 days after the election result, unless the engagement is renewed or the law requires otherwise. Public electoral records may be retained as public information.

8. Your rights

Subject to the DPDP Act, data principals may request access, correction, and erasure of their personal data, and may nominate or complain. Because we act as a processor, such requests are routed to and actioned with the campaign as Data Fiduciary. Contact privacy@roothscale.com.

9. Changes

We may update this policy; material changes will be reflected by the “last updated” date above.