1. Who We Are
PrivacyLedger (“PrivacyLedger”, “we”, “us”, or “our”) is a technology company based in Bengaluru, India. We build and operate a purpose-built compliance platform for the Digital Personal Data Protection Act 2023 (“DPDP Act”).
This Privacy Policy explains how we process the personal data of visitors to our website (privacyledger.ai) and prospects who contact us or subscribe to our communications. It is issued in compliance with Section 5 of the DPDP Act 2023.
For questions, contact our Data Protection Officer at dpo@privacyledger.ai.
2. Personal Data We Collect
We collect personal data in the following ways:
a) Contact and Demo Request Forms
When you submit a form on our website to request a demo, assessment, or pricing information, we collect:
- First name and last name
- Work email address
- Company name and job title
- Phone number (optional)
- Company size and industry
- Your message or compliance challenge description (optional)
b) Newsletter Subscription
When you subscribe to our newsletter, we collect your email address and, optionally, your first name.
c) Website Usage Data
We use Vercel Analytics and Vercel Speed Insights, which are privacy-first analytics tools that do not use cookies or fingerprinting techniques. They collect aggregated, anonymised data such as page views, referrers, and performance metrics. No personal data is shared with Vercel for analytics purposes.
d) Data You Voluntarily Provide
Any additional information you choose to share with us via email or other communications.
3. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- To respond to your enquiries — contacting you about a demo, assessment, or pricing request you submitted
- To send newsletters — delivering weekly updates on the DPDP Act, MeitY guidance, and compliance insights (only if you subscribed)
- To improve our website — using aggregated analytics to understand how visitors use privacyledger.ai
- To comply with legal obligations — as required by applicable Indian law
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Legal Basis for Processing
Under the DPDP Act 2023, we process your personal data on the following grounds:
- Consent (Section 6) — for newsletter subscriptions and marketing communications. You can withdraw your consent at any time by clicking “Unsubscribe” in any email or by visiting privacyledger.ai/unsubscribe.
- Legitimate use (Section 7) — for responding to demo and enquiry requests you initiated, and for website analytics.
5. Data Retention
We retain your personal data only for as long as necessary for the purpose it was collected:
- Lead / enquiry data — retained for up to 3 years from the date of collection, or until you request deletion
- Newsletter subscriber data — retained until you unsubscribe or request deletion
- Analytics data — retained in aggregated, anonymised form with no individual-level retention
6. Third Parties We Share Data With
We do not sell your personal data. We share it only with the following trusted processors:
- Vercel Inc. (USA) — our website hosting provider. Personal data is stored on Vercel's infrastructure and their Postgres service (powered by Neon). Vercel is SOC 2 Type II certified.
- Neon Inc. (USA) — our database provider (serverless PostgreSQL). Data is stored in the ap-southeast-1 (Singapore) region.
- Sanity AS (Norway) — our content management system for website content. Sanity does not process your personal data submitted through our forms.
All third-party processors are bound by data processing agreements and are required to process personal data only on our instructions.
7. Cross-Border Data Transfers
Our database infrastructure is hosted in Singapore (ap-southeast-1). While the DPDP Act's cross-border transfer provisions (Section 16) are subject to rules yet to be notified by the Central Government, we take reasonable steps to ensure personal data transferred outside India is subject to adequate protections. We will update this policy when the Government notifies permitted geographies.
8. Your Rights as a Data Principal
Under the DPDP Act 2023, you have the following rights:
- Right to access (Section 11) — request a summary of the personal data we hold about you and how it is being processed
- Right to correction (Section 12) — request correction of inaccurate or incomplete personal data
- Right to erasure (Section 12) — request deletion of your personal data where we no longer have a lawful basis to retain it
- Right to withdraw consent (Section 6) — withdraw consent for processing at any time without affecting the lawfulness of prior processing
- Right to grievance redressal (Section 13) — raise a grievance with our Data Protection Officer within 30 days
- Right to nominate (Section 14) — nominate an individual to exercise your rights in the event of your death or incapacity
To exercise any of these rights, email us at dpo@privacyledger.ai. We will acknowledge your request within 3 business days and respond within 30 days, as required by the DPDP Act.
If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India once it is constituted.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security reviews. See our Security Policy for full details.
10. Children's Data
Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately at dpo@privacyledger.ai.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
Data Protection Officer, PrivacyLedger
Bengaluru, Karnataka, India
Email: dpo@privacyledger.ai
General enquiries: hello@privacyledger.ai