Privacy Policy & DPDP Notice

Last updated: [month, year]

Near-final draft. Carried over from your reviewed policy, with a new §2/§4 covering the surveillance data layer. Confirm retention periods and the Grievance Officer with counsel. See also the Terms & DPDP consent.

1. Information we collect

Account details (name, email, mobile), entity/company details, usage data (features enabled, actions taken), and payment metadata via Razorpay (we do not store card details).

2. Surveillance data layer (you are the fiduciary)

Where you operate surveillance, access-control or attendance features, the resulting video, biometric, credential and access-log data belongs to your data subjects and is processed on your instructions. You are the Data Fiduciary for that layer; Essodify is a Data Processor and does not use it for any purpose other than delivering the service to you.

3. How we use your information

To provide and improve the service, process payments and issue invoices, send service notifications (if opted in), respond to support, and meet legal obligations under Indian law.

4. DPDP compliance & your rights

Under the Digital Personal Data Protection Act, 2023, we process personal data only for the purposes above and with your consent. You may access, correct or erase your data and withdraw consent at any time via [mechanism / email]. Grievance Officer: [Name], [email], [address].

5. Data storage & retention

Data is stored in India (Supabase Mumbai region and your chosen storage). Account data is retained for the life of the account plus [period] for legal compliance; operational logs for [period]. [Confirm final retention periods.] Passwords and sessions are managed by Supabase Auth; secret keys are held server-side only and never exposed to the browser.

6. Third-party services

We use Supabase (database & auth) and Razorpay (payments); each has its own privacy policy. We do not sell your data.

7. Cookies

Only essential cookies for authentication and sessions. No third-party advertising cookies.

8. Contact

Privacy queries: [privacy email] · [address].