Docs DPDP

DPDP Compliance

NiyatiOne, is committed to complying with India’s Digital Personal Data Protection Act (DPDP Act), 2023, ensuring that personal data is processed lawfully, fairly, and transparently.

What is the DPDP Act?

India’s DPDP Act, 2023 is designed to protect the personal data of individuals (data principals) and to regulate how organizations (data fiduciaries like NiyatiOne) collect, store, and use this data. It emphasizes consent-based, purpose-limited, and transparent data handling practices.

Scope of Application

The DPDP applies to:

Personal data collected online or digitally offline
Data collected within India or from individuals in India
Both Indian and international users whose data is processed in India

What Personal Data We Collect

We collect the following data directly or indirectly through our services:

Full Name
Email ID
Contact Number
Billing & Transaction Details
IP Address and Device Info
Company/Organization Details
Communication Preferences
Usage Data (based on service behavior)

Lawful Basis for Processing

We collect and process data based on:

Consent (explicit and informed)
Contractual necessity (for fulfilling your service agreements)
Legal obligations (for taxation, billing, regulatory needs)

You may withdraw your consent at any time by writing to [email protected]

Purpose of Data Collection

We use your personal data to:

Provide and improve our services
Respond to inquiries and support requests
Personalize user experience
Manage billing and communications
Conduct surveys and feedback
Comply with legal requirements

Data Protection Measures

We take security seriously. Our safeguards include:

End-to-end data encryption
Regular security audits
Role-based access control (RBAC)
Firewall and intrusion detection systems
Backup and recovery protocols

Your Rights Under DPDP

As a data principal, you have the right to:

Access your personal data
Correct or update inaccurate data
Withdraw your consent at any time
Be informed about data usage and sharing
File a grievance with our DPO or the Data Protection Board

To exercise these rights, contact: [email protected]

We do not sell your data. We may share it with:

Our trusted partners and With service providers necessary to deliver our offerings (e.g., cloud services, marketing tools)
With legal authorities if required by law
With your explicit consent when working with third-party tools or APIs

All such third parties are under confidentiality obligations and data processing agreements.