Privacy Policy

Last updated: May 20, 2026

1. Data Collection & DPDPA 2023 Compliance

In accordance with India's Digital Personal Data Protection Act (DPDPA) 2023, we act as a Data Fiduciary for the information you provide. We collect only the minimum personal data required to fulfill your digital orders and provide perpetual library access.

The categories of data we collect include:

  • Identity Data: Name and email address used for account creation and verification.
  • Transaction Data: Details about payments made through Razorpay (we do not store raw credit card numbers).
  • Usage Data: Logged download history and digital library access records to ensure license compliance.

2. Purpose of Processing

Your data is processed strictly based on your consent or for legitimate business purposes as defined under Indian law:

  • To provide instant electronic fulfillment of digital assets.
  • To maintain your perpetual download license in your account dashboard.
  • To comply with statutory financial reporting, including GST and income tax regulations.
  • To prevent unauthorized redistribution or fraudulent use of our digital property.

3. Data Principal Rights

Under DPDPA 2023, you (the Data Principal) have the following rights:

  • Right to Access: Request a summary of the personal data we process about you.
  • Right to Correction: Update or correct inaccurate personal information.
  • Right to Erasure: Request the deletion of your account and data, subject to legal retention requirements for financial records.
  • Right to Grievance Redressal: Register a complaint regarding our data handling practices.

4. Data Localisation & Security

Your personal data is stored securely using cloud infrastructure provided by Firebase (Google Cloud). Transaction records are retained for a minimum of 7 years as required by Indian taxation laws. We use industry-standard encryption to protect your information from unauthorized access or disclosure.

5. Grievance Redressal Officer

If you have any questions or wish to exercise your data rights, please contact our designated Grievance Officer:

Email: privacy@store.prontly.in

Subject: Data Privacy Grievance

We aim to acknowledge all grievances within 48 hours and provide a resolution within 30 days.