Privacy notice

What stays in your browser

The main web interface stores your citizen profile, selected language, assessments, draft records, document metadata and reminders in this browser's local storage. These records are not synced to an account. Clearing browser site data can remove them. Use the backup only on a device and storage location you control; the JSON may contain personal information.

How the main app processes information

In the current main-interface workflow, benefit screening, text-intake extraction and draft preparation run in the browser using deterministic code. These three actions do not send your profile or free-text description to JanaSetu's screening, intake or draft API routes. Separate API endpoints exist for programmatic clients; a client that calls them sends the submitted profile or text to the application server. Do not assume API requests are local-only.

External catalogue and hosting

When you search the external open-data catalogue, your term (up to 120 characters) is sent to JanaSetu's server and matched against the bundled SmartDuke snapshot. The open-data search route does not forward your term to Hugging Face. A separate source-health check contacts Hugging Face with a fixed generic health-check query and dataset metadata; it does not send your search term or citizen profile. Do not enter names, addresses, income details or other personal information in the search box.

A hosted website also exposes network and request metadata to hosting, CDN and infrastructure providers. Their logs, retention and processing terms must be checked for the actual deployment. This notice does not certify provider-side deletion or log configuration.

Documents and speech

Document entries are metadata references only. JanaSetu does not upload, parse or retain the selected document bytes. Browser speech recognition may send audio to your browser or operating-system speech provider. You can avoid speech input and type manually.

External websites and the browser extension

Links to myScheme, department portals, UMANG, DigiLocker and other services leave JanaSetu. Their privacy notices and terms apply. Information entered or submitted there is controlled by the relevant service. The optional extension stores a profile you explicitly import in extension-local storage and sends mapped values to the active tab only after you click Fill. Review every field. The extension does not intentionally submit forms or upload documents; portal scripts may react to field changes. Check the page before proceeding.

Purpose and retention

Browser data remains until you delete it or clear site storage. Exported backups are under your control and may contain personal data. JanaSetu has no user accounts or account-based deletion request. Provider-side request and infrastructure log retention is outside browser storage controls and must be verified separately.

Your choices

• Use synthetic information while testing.
• Avoid voice input if you do not want to involve a speech provider.
• Do not enter personal information in the scheme-search box.
• Do not publicly share a backup; it may contain profile data.
• Clear local JanaSetu site data when finished.

Review status

This notice describes the prototype's intended and inspected flows. It is not a legal opinion or a completed Digital Personal Data Protection Act assessment. Qualified Indian privacy/legal review must validate deployment, API consumers, vendor terms, data flows, logs, retention, consent and applicable obligations before real citizen data is collected.