XPRESS FIBER PRIVATE LIMITED – Privacy Policy (Class B ISP License)
(Effective: 23 March 2022)
CIN: U64200BR2022PTC056987 | Incorporated: 23 March 2022
Class B ISP License: Bihar + Jharkhand Telecom Circles
Registered Office: E-Gurhatta Rd, Sikandarpur, Mirjanhat, Bhagalpur, Bihar 812005
Service Areas: Bihar SSA + Jharkhand SSA
DPO: privacy@xpressfiber.com | Helpline: 97716 14723
1. Introduction – Class B ISP Specific
XPRESS FIBER PRIVATE LIMITED operates under DoT Class B ISP License covering Bihar and Jharkhand telecom circles (state-level operations per DOT guidelines). This Privacy Policy complies with:
-
Digital Personal Data Protection Act, 2023 (DPDP)
-
DoT ISP License Conditions (KYC, logging, security)
-
TRAI QoS Regulations 2024
-
IT Act 2000 (reasonable security practices)
Scope: Wi-Fi hotspots, FTTx broadband, Partner App across Bihar/Jharkhand SSAs.
2. Data Collected – DoT Class B Requirements
| Category | Data Points | DoT Mandate | Purpose |
|---|---|---|---|
| Mandatory KYC | Name, mobile, photo, address, Aadhaar (masked) | DoT Rule 3(1) | Subscriber verification |
| Service Logs | IP, MAC, session start/end, data volume | DoT Rule 5(2) | QoS reporting, billing |
| Location | Hotspot SSID, GPS (Partner App only) | Network planning | Fault localization |
| Partner App | OHF routes, OLT/Switch GPS coordinates | Operational | Network documentation |
3. Legal Basis for Processing (DPDP + DoT)
| Processing Purpose | Legal Basis | DoT Reference |
|---|---|---|
| KYC verification | Legal Obligation | ISP License Clause 3.1 |
| Usage logging | Legal Obligation | ISP License Clause 5.2 |
| Billing | Contract Performance | TRAI Billing Reg. |
| Network management | Legitimate Interest | QoS benchmarks |
| Law enforcement | Legal Obligation | IT Act Section 69 |
4. Data Sharing – Class B ISP Boundaries
Geographic Scope: Bihar + Jharkhand only (Class B license restriction)
| Recipient | Data Shared | Purpose | Contractual Safeguards |
|---|---|---|---|
| Bihar/Jharkhand Partners | Complaint + address | Local installation/repair | DoT-approved NDA |
| Payment Gateways | Transaction details | UPI/Net banking | PCI-DSS Level 1 |
| DoT Bihar Circle | KYC + usage logs | License compliance | Govt agency |
| TRAI Eastern Region | QoS metrics | Performance reporting | Regulator |
| Law Enforcement | Full logs | Court order | IT Act 69 |
NOT SHARED: Data outside Bihar/Jharkhand circles.
5. XPRESS FIBER Partner App – Class B Operations
text
**Class B Specific Usage** (Bihar + Jharkhand SSAs only):
Network Assets Mapped:
├── Bihar: Patna, Bhagalpur, Gaya, Muzaffarpur SSAs
├── Jharkhand: Ranchi, Dhanbad, Jamshedpur SSAs
├── OHF (Overhead Fiber) routes between SSAs
└── OLT/EOC/Switch locations
**Technical Flow**:
1. Partner assigned complaint → GPS navigation starts
2. Travels OHF route → Background GPS records path
3. Captures asset photo → GPS timestamp added
4. Route saved in Bhagalpur DC → Used for OTDR fault location
5. Auto-deleted after 2 years per DPDP
6. Data Retention – DoT Minimum Standards
| Data Type | DoT Minimum | Our Policy | Deletion Method |
|---|---|---|---|
| Subscriber KYC | 3 years post-termination | 2 years | DoD 5220.22-M |
| Traffic logs | 1 year | 2 years | Secure erase |
| Location data | 6 months | 2 years | Bulk purge |
| Partner routes | N/A | 2 years | Automated |
7. Security – DoT Certified Standards
text
**DoT Rule 5(3) Compliant Security**:
├── Network: MEF CE 2.0 certified equipment
├── Data: AES-256 encryption (RADIUS, billing DB)
├── Access: MFA for admin, RBAC for partners
├── Logs: Syslog → SIEM → Bhagalpur DC
└── Audit: Annual DoT security audit
8. Your Rights – DPDP Act 2023
| Right | How | Timeline | DoT Exception |
|---|---|---|---|
| Access | App download/email DPO | 7 days | Traffic logs restricted |
| Correction | Self-service portal | Immediate | KYC needs DoT approval |
| Erasure | Written request | 30 days | Mandatory logs retained |
| Portability | JSON export | 7 days | Anonymized usage only |
9. Cookies – Wi-Fi Hotspot Specific
| Type | Wi-Fi Specific | Duration | Control |
|---|---|---|---|
| RADIUS Auth | Captive portal session | 24 hours | Auto-delete |
| Hotspot Usage | Data quota tracking | Plan validity | None |
| Analytics | Aggregate hotspot usage | 90 days | Portal opt-out |
10. Class B ISP Compliance Statements
text
**Mandatory DoT Disclosures**:
✅ Lawful interception facility available (Bihar Police)
✅ Traffic data retention for 2 years minimum
✅ KYC verification before activation
✅ IPv6 ready (TRAI mandate)
✅ QoS benchmarks reported monthly to TRAI Eastern
✅ Security audit certificate available on request
11. Grievance Redressal – Bihar/Jharkhand
text
**3-Tier DoT Process**:
1. DPO → privacy@xpressfiber.com (10 days)
2. Nodal Officer → Bhagalpur (15 days)
3. DoT Bihar Circle → Patna
4. TRAI Eastern Region → Kolkata
12. Contact – Class B ISP Specific
text
**Data Protection Officer (Bihar SSA)**:
Rajesh Kumar
privacy@xpressfiber.com
E-Gurhatta Rd, Sikandarpur, Mirjanhat
Bhagalpur, Bihar 812005
**Jharkhand SSA Contact**:
jharkhand@xpressfiber.com
Ranchi Field Office [Address]