Privacy Policy

Parsh Progressive Trust (registered trust no. 411163575734942), Patna, Bihar, runs banking service points for its partner bank as a Corporate Business Correspondent (CBC). We decide what personal data is collected and how it is used, so under the Digital Personal Data Protection Act, 2023 we are responsible for it as the data fiduciary.

This policy covers three things: this public website; the Parsh portal, used by our staff and bank agents (BCAs); and the Parsh Tracker, a browser extension on the counter PC of each BCA centre. The rules for kiosk availability tracking itself are in the Terms & Conditions.

The tracker answers one question — is the centre open and working — and the browser lets it see tabs on only two websites: the Parsh portal and the bank’s Kiosk Banking site (kioskbanking.bgb.bank.in).

What it reads

Which work sites are open

whether a Parsh portal or Kiosk Banking tab is open, and whether it is the tab in front.

Who is signed in

with the Parsh portal in front, which agent the portal says is signed in.

Whether the PC is in use

whether the keyboard or mouse was used in the last 15 minutes, or the screen is locked. Not which keys were pressed.

Where the PC is

its approximate location, every 5 minutes while the tracker is signed in. The browser works this out from nearby Wi-Fi networks or the internet connection, so on a wired PC it can be kilometres out.

Connection details

the internet (IP) address each report comes from, and the browser’s name and version.

Supervisors see this on the CBC dashboard as each session’s status (Online, Idle or Logout), the time worked on each portal, and the centre’s position on a map.

What it never reads

• any other website, or your browsing history;
• anything written on the pages of the two work sites — no customer’s name, Aadhaar or account number, or amount;
• your bank portal password, or the keys you press;
• your screen, your files, the camera or the microphone.

Your password and the tracker’s key

Your Parsh password is used once, to set the tracker up, and is not kept. The tracker then holds a key that works only in that browser and only for reporting. The portal stores just a fingerprint of the key and replaces it every day. Signing the tracker out ends the key and erases the stored location.

When an administrator opens a portal account for a member of staff or a bank agent, we hold:

Identity and contact

name, father’s or husband’s name, gender, user code, role, phone numbers (your own, an alternate and a family contact), email, residential address and profile photo.

KYC

PAN and bank account number, encrypted before they are stored and shown masked; of the Aadhaar number, only the last four digits; IFSC; scans of the PAN and Aadhaar cards; IIBF certification and KO code dates.

Work records

the centre and branch you are posted to, who you report to, the daily transaction summaries you file, reports you upload, complaints, targets and assignments.

Sign-in and security

your password, stored only as a one-way hash that cannot be turned back into the password; a cookie that keeps you signed in; sign-in times, failed attempts and sessions; and a record of every time someone opens your KYC details.

You can use this website without giving us any personal details. It carries no advertising or analytics trackers, and the centre locator runs entirely on our own servers.

Our hosting provider keeps standard server logs — internet address, browser and the pages requested — to keep the site secure and running. Your choice of theme and language is saved in your own browser and is not sent to us.

• To run the BC network: open and manage accounts, post agents to centres and keep the reporting line.
• To verify identity and eligibility (KYC), as the partner bank and IIBF certification require.
• To confirm that BCA centres are open at their scheduled hours, as the bank requires of the CBC.
• To keep accounts and the platform secure — for example, to find reports that did not come from the centre.
• To answer complaints and requests for help.

We do not sell or rent personal data, and we do not use it for advertising.

Your reporting line

supervisors, district coordinators, project managers and operations staff see work records and tracker status for the part of the network they manage.

Administrators

a small number of Parsh administrators manage accounts. KYC details are shown only to people an administrator has explicitly allowed, and every view is recorded.

The partner bank

where our Business Correspondent agreement or the bank’s audit requires it — for example, to show that a centre was open.

Service providers

Amazon Web Services hosts the portal and stores its data and files. Maps on the portal are drawn by a map provider (OpenStreetMap or Google Maps), which sees the viewer’s internet address.

When the law requires

a court, regulator or law-enforcement agency, when the law obliges us.

Portal data and uploaded files are stored with Amazon Web Services in its Mumbai region, in India, and travel only over encrypted (HTTPS) connections.

• PAN and bank account numbers are encrypted; of an Aadhaar number only the last four digits are kept.
• Passwords are kept only as one-way hashes, and an account locks after five wrong attempts.
• A bank agent’s portal session ends after two hours without use.
• Only the tracker’s latest location is kept — each new one replaces the last — and it is erased when the tracker signs out.

Everything else is kept while you work with us, and afterwards only for as long as the partner bank’s agreement or the law requires.

Under the Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how it is used;
• ask us to correct, complete or update it, and to erase what we no longer need to keep;
• withdraw your consent at any time by writing to support@parshprogressivetrust.com;
• nominate someone to act for you if you die or become unable to act yourself;
• complain to us, and if we do not resolve it, to the Data Protection Board of India.

The tracker is a condition of working as a BCA, so withdrawing consent to it means the BCA work has to stop, as the Terms & Conditions say. Withdrawing does not undo monitoring done before it.

When this policy changes, the new version is posted on this page with a new date. If a change affects what the tracker reads, agents will be told through the portal before it takes effect.

For any question, request or complaint about your personal data, contact us:

Email

support@parshprogressivetrust.com

Helpline

+91 799 118 2876Mon–Sat, 9:30 am – 6:30 pm

Head office

Alam Plaza, Opposite Bharat Petrol PumpH.O Digha, Ashiana RoadPatna – 800011, Bihar