Privacy Policy for SARAL

Last Updated: May 9, 2025

This Privacy Policy describes how the Commercial Department, Mumbai Division, Central Railway ("we," "us," or "our") collects, uses, and handles information in connection with your use of the SARAL website and its associated mobile application (collectively, the "Service").

This Service is intended for internal use by employees and authorized personnel of the Commercial Department, Mumbai Division, Central Railway.

1. Information We Collect

We collect information in the following ways:

a. Information You Provide (Administrators/Editors)

• Account Information: When an administrative or editor account is created for the Service, we collect information such as username, a hashed password, full name (optional), and assigned role (e.g., 'admin', 'editor').
• Content You Upload: We store the documents (PDF files) and any associated metadata (title, description, category) that authorized users upload to the Service. The system logs which user uploaded each document.

b. Information Collected Automatically (All Users)

• Log Data: Like most websites and applications, our servers automatically record information ("Log Data") created by your use of the Service. Log Data may include information such as your IP address, browser type, operating system, the referring web page, pages visited, location (if enabled by your device and browser), and cookie information (for administrators' sessions).
• Mobile Device Information (for App Users): If you use the SARAL mobile application, we may receive or collect information about your mobile device, such as device type and operating system version, for the purpose of providing and improving the Service. The app requires internet permission to function.
• Cookies (for Administrators): We use cookies to maintain session information for logged-in administrators and editors to ensure secure access to the admin panel. Public users Browse the documents do not require cookies for basic site functionality.

2. How We Use Your Information

We use the information we collect for the following internal purposes:

• To provide, operate, and maintain the Service.
• To authenticate administrators and editors and allow access to administrative functions.
• To attribute content uploads to the responsible user.
• To ensure the security of the Service.

3. Information Sharing and Disclosure

SARAL is an internal portal for the Commercial Department, Mumbai Division, Central Railway.

• Information collected is for internal operational use only within the department.
• We do not share personal information with third parties for marketing or commercial purposes.

4. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. This includes measures like hashing administrator passwords. However, no internet or email transmission is ever fully secure or error-free. Please keep this in mind when disclosing any information to us via the internet.

Access to the admin panel is protected by username and password. It is the responsibility of authorized users to keep their login credentials confidential.

5. Data Retention

We will retain Log Data and administrator account information for as long as it is necessary for the operational purposes of the Service or as required by departmental policies and applicable laws.

Uploaded documents will be retained as per the retention policies of the Commercial Department for such circulars and records.

6. Your Rights (Administrators/Editors)

Administrators with appropriate permissions can manage user accounts, including updating roles or deleting users (with restrictions). If you are an administrator or editor and have questions about your account information, please contact the IT Cell.

7. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy, please contact:

IT Cell, Commercial Department
Mumbai Division, Central Railway

---