Privacy Policy

This policy explains what personal data we collect, why, and what rights you have. It is written to align with the Digital Personal Data Protection Act, 2023 and the Rules made under it.

What we collect. Identity and contact details, entity and statutory identifiers (PAN, GSTIN, CIN, DIN), documents you upload, payment records, and usage data.

Why. To deliver the services you order, to meet our own statutory obligations, and to communicate with you about your orders.

Consent. We record your consent with the purpose, the version of this notice, the time and the IP address. You may withdraw consent as easily as you gave it, through your account settings.

Your rights. Access, correction, erasure, nomination and grievance redressal. Requests are logged and answered within ninety days at the outside. Raise one from your account or by writing to the grievance officer named on the Grievance Redressal page.

Retention. Documents are retained for the period set out in our retention schedule — eight years by default, aligned to the Income-tax Act and the Companies Act.

Security. Documents are stored outside the web root with randomised names, served only through an authorisation check, and every view and download is logged.

⚠️ TEMPLATE — review with counsel and complete the operator details before launch.