infraapass.com
Privacy Policy
Last updated 29 September 2026
Who we are
InfraaPass is a software product owned and operated by ZippMat Private Limited, a company incorporated in India. In this policy, "we" and "us" mean ZippMat Private Limited.
InfraaPass is a gate log for construction sites. It records material deliveries, vehicles and visitors entering and leaving a site, and makes that record available to the company that runs the site.
Two different roles
Personal data reaches InfraaPass in two ways, and our responsibility differs in each.
Our own users. When someone from a customer's organisation creates an account and uses InfraaPass, we decide how that account data is handled. For this data we are the Data Fiduciary.
Gate records. When a guard logs a driver or visitor at the gate, that data belongs to the construction company that operates the site. They decide what is collected and why. We hold and process it on their instructions, as a Data Processor. If you are a driver or visitor and want your gate record corrected or removed, please contact the company operating that site. We will assist them, but we cannot act on it independently.
What we collect
- Account data: name, mobile number, email address, employer, site assignment and role.
- Authentication data: one-time passwords sent by SMS or WhatsApp to verify a mobile number.
- Gate records entered by our customers: visitor and driver names, mobile numbers, vehicle numbers, identification details where the site asks for them, photographs taken at the gate, materials and quantities, and entry and exit times.
- Technical data: device type, app version, IP address, and logs of actions taken in the app.
We do not collect financial account details, and we do not use tracking cookies for advertising.
Why we use it
- To provide the service, including verifying logins and keeping the gate record accurate.
- To support our customers when something goes wrong.
- To keep the service secure and to investigate misuse.
- To meet legal and regulatory obligations.
- To understand how the product is used, in aggregated and de-identified form, so that we can improve it.
We do not sell personal data. We do not share it with anyone for their own marketing.
Who we share it with
We share personal data only with service providers who help us run InfraaPass, and only to the extent they need it. These currently include cloud hosting providers and SMS and WhatsApp providers used to deliver one-time passwords. They act on our instructions and are not permitted to use the data for their own purposes.
We may disclose data where the law requires it, or to protect our rights or the safety of others.
Where it is stored, and for how long
Data is stored on servers located in India. We keep account data for as long as the account is active.
We keep gate records for as long as the site is running. After a site is archived, photos taken at the gate are kept for 3 years and all other gate records for 7 years, and then deleted. The company that runs the site can ask us to delete them earlier. Some records may be kept longer where the law requires it. Our Terms of Use set this out in full.
Keeping it secure
Access to production systems is restricted to a small number of authorised people and every such access is logged. The app can be locked with a PIN or biometric. Data is encrypted in transit. Guards using the app can see only who is currently on site and the last twenty-four hours of movements; they cannot see history, export data, or view records from other sites.
No system is completely secure. If a breach occurs that is likely to affect you, we will notify affected parties and the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023.
Your rights
Under the Digital Personal Data Protection Act, 2023, you may ask us to:
- tell you what personal data of yours we hold and how it is being used;
- correct or complete data that is wrong or out of date;
- erase data where we no longer need it;
- withdraw consent you previously gave, where we rely on consent; and
- nominate another person to exercise these rights on your behalf.
Write to us at the address below and we will respond. If your request concerns a gate record, see "Two different roles" above — we will pass it to the site operator and help them act on it.
Children
InfraaPass is not intended for anyone under 18 and we do not knowingly create accounts for children. If a child's personal data reaches us, tell us and we will delete it.
Changes to this policy
If we change this policy we will update the date at the top of this page, and tell our customers directly if the change is significant.
Contact and grievances
For any question about this policy, or to raise a grievance about how your personal data has been handled, contact:
Grievance Officer
ZippMat Private Limited
333, 14 Main Road, 6 A Cross, RMV Extension,
Sadashivnagar, Bangalore – 560080, India
+91 95389 53460 (10 AM – 6 PM IST, Monday to Friday)
We aim to acknowledge grievances within 7 working days and resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.