Privacy Policy

1. Introduction

DataDefend is a product of Cybersecure Digital Intelligence Private Limited. This Privacy Policy describes how we collect, use, and protect your personal information when you use our DPDPA compliance platform and related services.

As a privacy compliance platform, we are committed to protecting your data and maintaining the highest standards of data protection in accordance with the Digital Personal Data Protection Act (DPDPA), 2023 and other applicable laws.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email, phone number, company details)
• Payment and billing information
• Communication preferences and correspondence
• Data you upload to the platform for compliance management

2.2 Automatically Collected Information

• Device information and IP address
• Usage data and analytics
• Cookies and similar tracking technologies
• Log files and error reports

3. How We Use Your Information

We use your information to:

• Provide and maintain our compliance platform services
• Process your transactions and manage your account
• Send important updates, security alerts, and compliance notifications
• Improve our services through analytics and research
• Comply with legal obligations and prevent fraud
• Provide customer support and respond to inquiries

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Cybersecure Digital Intelligence Private Limited: Our parent company for consolidated operations and support
• Service Providers: Trusted third parties who assist in delivering our services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

5. Data Security

We implement industry-standard security measures including:

• End-to-end encryption for data in transit and at rest
• Regular security audits and penetration testing
• ISO 27001 and SOC 2 Type II certified infrastructure
• Role-based access controls and multi-factor authentication
• 24/7 security monitoring and incident response

6. Your Rights Under DPDPA

As a data principal, you have the following rights:

• Right to Access: Request access to your personal data
• Right to Correction: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Grievance Redressal: File complaints with our Data Protection Officer
• Right to Nominate: Nominate another individual to exercise your rights

To exercise these rights, contact us at privacy@datadefend.com

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods include:

• Account data: Duration of account plus 7 years for compliance
• Transaction records: 7 years from date of transaction
• Communication logs: 3 years from last interaction
• Marketing data: Until consent is withdrawn

8. International Data Transfers

Your data is primarily stored and processed within India. If we transfer data internationally, we ensure adequate safeguards are in place through standard contractual clauses and compliance with DPDPA requirements for cross-border data transfers.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us