Compliance
DPDP Act 2023 Notice
Digital Personal Data Protection Act, 2023 · Updated 08 June 2026
DATA FIDUCIARY: PRAMAANAI
This notice explains how PramaanAI ("Data Fiduciary") collects, uses, and protects your personal data as required by the Digital Personal Data Protection Act, 2023 (India).
Categories of personal data we process
- Demographic (non-sensitive): Age range, state, district, occupation category, income bracket, family size, housing type, land holding size, marital status.
- Sensitive personal data (optional, explicit consent required): Caste category, disability status, minority community status. You may skip all of these.
- Contact (collected only at checkout): Email address, mobile number. Used only for pack delivery and reminders.
- Technical: IP address, browser type, page visit timestamps. Standard server logs, not sold.
Purposes and lawful bases
- Eligibility check: Consent (you check the consent box in intake form).
- Pack generation and delivery: Contract (you paid ₹49).
- Deadline reminders: Consent (opt-in at pack delivery).
- Legal obligations: Transaction records kept 5 years for GST compliance.
Your rights
- Right to information: This notice fulfils that right.
- Right of access (Section 11): Request a copy of all data we hold about you.
- Right of correction and erasure (Section 12): Correct inaccurate data or request deletion. We will respond within 30 days.
- Right of grievance redressal (Section 13): File a complaint with our Grievance Officer. If unresolved in 30 days, you may approach the Data Protection Board of India.
- Right to nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.
Consent withdrawal
You can withdraw consent at any time by emailing [email protected]. Withdrawal does not affect lawfulness of processing before withdrawal. Post-withdrawal, we will delete your profile data within 30 days (transaction records kept per legal obligation).
Grievance Officer
Name: Aditya Sharma
Email: [email protected]
Response time: 30 days
Escalation: Data Protection Board of India (once notified)