Last Updated: 09-May-2026
1. INTRODUCTION
1.1 This OTP Handling Policy (“Policy”) governs the manner in which “DigiServe Business Services” also known as “DSBS” (“Company”, “We”, “Us”, “Our”) collects, uses, and safeguards One-Time Passwords (“OTP”) provided by users (“User”, “Client”, “You”).
1.2 This Policy applies to all services provided by the Company and shall be read in conjunction with the Terms and Conditions, Privacy Policy, Data and Document Retention Policy, Cancellation and Refund Policy, and Disclaimer.
2. DEFINITIONS
2.1 OTP (One-Time Password) means a time-sensitive authentication code generated by authorized platforms for verification purposes.
2.2 User / Client means any individual or entity using the Company’s services.
2.3 Authorized Platforms means government portals or approved third-party systems used for registration, authentication, and application submission.
2.4 Official Communication Channels means the Company’s registered email address, official phone number, and verified business communication platforms.
2.5 Authentication means verification of identity for accessing or submitting information.
2.6 Authorization means consent granted by the User to perform specific actions on their behalf.
3. PURPOSE OF OTP USAGE
3.1 OTPs are used strictly for:
• Authentication of user identity
• Registration on authorized platforms
• Submission of applications
• Access to relevant systems for service execution
4. EXPLICIT NON-FINANCIAL USE
4.1 OTPs are used strictly for non-financial purposes.
4.2 The Company does NOT use OTPs for:
• Banking transactions
• Payment authorization
• UPI, card, or wallet verification
4.3 Users must never share banking or payment-related OTPs with the Company.
5. USER CONSENT AND AUTHORIZATION
5.1 By providing an OTP, the User gives explicit and informed consent to the Company to perform authorized actions.
5.2 Such authorization includes:
• Accessing authorized platforms
• Completing registration and application processes
5.3 Authorization is limited strictly to the scope of services requested by the User.
6. SCOPE AND LIMITATION OF USE
6.1 OTPs shall be used only for the specific purpose for which they are provided.
6.2 OTPs shall not be:
• Reused
• Used for unrelated purposes
7. NON-RETENTION POLICY
7.1 The Company follows a strict non-retention policy for OTPs.
7.2 OTPs:
• Are not stored
• Are not logged
• Are not retained
7.3 OTPs are used only for real-time authentication and immediately discarded after use.
7.4 The Company does not store:
• User passwords
• Login credentials
8. SECURITY MEASURES
The Company implements reasonable safeguards, including:
• Restricting access to authorized personnel
• Using secure communication channels
• Immediate usage and disposal of OTPs
• Internal controls and staff training
9. OFFICIAL COMMUNICATION CHANNELS
9.1 OTPs must be shared only through Official Communication Channels, including:
• Registered email address
• Official phone number
• Verified business messaging platforms
9.2 OTPs shared outside such channels shall be at the User’s risk.
10. USER RESPONSIBILITIES
The User agrees to:
10.1 Share OTPs only after understanding the purpose
10.2 Share OTPs only via Official Communication Channels
10.3 Not share financial or banking OTPs
10.4 Immediately report any suspected misuse
11. COMPANY RESPONSIBILITIES
The Company shall:
11.1 Use OTPs only for authorized and disclosed purposes
11.2 Not store or retain OTPs
11.3 Limit access to authorized personnel
11.4 Maintain safeguards against misuse
12. THIRD-PARTY SYSTEMS
12.1 OTPs are generated by:
• Government portals
• Regulatory systems
• Authorized third-party platforms
12.2 The Company does not control:
• OTP generation
• Delivery mechanisms
13. LIMITATION OF LIABILITY
13.1 The Company shall not be liable for:
• OTPs shared outside Official Communication Channels
• User negligence
• Third-party interception beyond reasonable control
13.2 The Company shall not be liable for financial losses resulting from the User sharing banking or payment OTPs contrary to this Policy.
14. INCIDENT REPORTING
14.1 Users must notify the Company immediately in case of suspected misuse of OTP.
14.2 The Company shall take reasonable steps to investigate and mitigate risks.
15. COMPLIANCE WITH LAW
This Policy complies with:
• The Information Technology Act, 2000
• The Digital Personal Data Protection Act, 2023
16. POLICY UPDATES
The Company reserves the right to update this Policy. Updated versions shall be published on the website.
17. CONTACT DETAILS
DigiServe Business Services (DSBS)
Phone: +91-9373574235
Email: support@registrationonline.org
