1. Information We Collect
Skymax Broadband Pvt. Ltd. ("we," "our," "Skymax") collects information to provide and improve our internet services. We collect the following categories of personal data:
- Identity Information: Full name, date of birth, Aadhaar/PAN number (for KYC compliance as required by TRAI).
- Contact Information: Email address, mobile number, residential address, pincode.
- Account Data: Username, encrypted password, plan details, billing history, payment records.
- Technical Data: IP address, MAC address, device identifiers, router model, session logs, bandwidth usage data.
- Communication Data: Support ticket contents, call recordings (with notice), chat transcripts.
- Payment Data: UPI IDs, last 4 digits of card, transaction IDs. Full card numbers are never stored.
2. How We Use Your Information
Your data is used exclusively for the following purposes:
- Provisioning and managing your broadband connection (authentication, billing, bandwidth allocation).
- KYC verification as mandated by the Department of Telecommunications (DoT) and TRAI regulations.
- Processing payments, generating GST-compliant invoices, and issuing refunds.
- Communicating service updates, maintenance notices, and plan renewal reminders.
- Responding to support requests and resolving technical issues.
- Fraud detection, network security monitoring, and abuse prevention.
- Improving network performance and planning infrastructure expansion.
3. Data Sharing
We do not sell your personal data. We share data only in these circumstances:
- Payment Processors: Razorpay/PayU for secure payment processing — only non-sensitive transaction data.
- Legal Compliance: Government authorities, law enforcement, or courts when required by Indian law (IT Act 2000, CrPC).
- RADIUS/Network Vendors: Technical session data with authorized network equipment vendors under NDA.
- Auditors: Financial and technical auditors under strict confidentiality agreements.
4. Cookies & Tracking
Our website uses minimal, privacy-respecting cookies:
- Session Cookies: Required for customer portal login — expire when you close the browser.
- CSRF Tokens: Security tokens to prevent cross-site request forgery attacks.
- Preference Cookies: Remember your language and display preferences.
We do not use third-party advertising cookies or cross-site tracking technologies.
5. Data Security
We implement industry-standard security measures including:
- AES-256 encryption for stored passwords and sensitive data.
- TLS 1.3 for all data transmission between you and our servers.
- Regular penetration testing and vulnerability assessments.
- Access controls — staff can only access data necessary for their role.
- Audit logs for all data access and modifications.
6. Your Rights
Under applicable Indian data protection regulations, you have the right to:
- Access: Request a copy of your personal data we hold.
- Correction: Update inaccurate or incomplete data via your customer portal.
- Deletion: Request deletion of your data (subject to legal retention requirements).
- Portability: Receive your data in a machine-readable format.
- Objection: Object to processing for marketing purposes at any time.
To exercise these rights, email privacy@skymax.net.in or write to our registered office. We respond within 30 days.
7. Data Retention
- Active account data: Retained for the duration of your subscription.
- Post-termination: Basic records retained for 3 years as required by DoT.
- Call detail records (CDR): 1 year as per TRAI mandate.
- Financial records: 7 years for GST/Income Tax compliance.
- KYC documents: As required by regulatory authorities.
8. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a child has provided us personal data, contact us immediately at privacy@skymax.net.in for deletion.