Legal / DPDP Compliance

Digital Personal Data Protection Act, 2023

Last reviewed: April 22, 2026

DevBhumi Technologies Pvt. Ltd. is committed to full compliance with India's Digital Personal Data Protection (DPDP) Act, 2023. This page describes how we meet our obligations as a Data Fiduciary under the Act.

01 / Principles

How we handle your data

📋

Lawful Processing

We process personal data only on the basis of your consent or for the purposes of fulfilling our contractual obligations to you, as required under Section 4 of the DPDP Act.

🎯

Purpose Limitation

Personal data is collected for specified, explicit, and legitimate purposes and is not processed in ways incompatible with those purposes.

🔒

Data Minimisation

We collect only the data that is necessary for the purpose for which it is processed. We do not ask for data we don't need.

✅

Accuracy

We take reasonable steps to ensure the personal data we hold is accurate and up to date. You can correct your data at any time via app settings.

⏱️

Storage Limitation

Data is not retained for longer than necessary. We have defined retention schedules for each data category, reviewed annually.

🛡️

Security

We implement appropriate technical and organisational security measures including encryption, access controls, and regular audits.

02 / Your Rights

Your rights under the DPDP Act

Right to Information

Section 11

You have the right to obtain a summary of your personal data we process, the identity of all Data Fiduciaries and Data Processors with whom it has been shared, and any other prescribed information.

Request via [email protected]

Right to Correction & Erasure

Section 12

You have the right to correct inaccurate or misleading data, complete incomplete data, and erase data no longer necessary for the purpose it was collected, subject to legal retention requirements.

Settings → Account → Manage Data

Right to Grievance Redressal

Section 13

If you have a grievance regarding processing of your personal data or the exercise of your rights, you may contact our Data Protection Officer. We will respond within 72 hours.

Contact DPO: [email protected]

Right to Nominate

Section 14

You may nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.

Request nomination form at [email protected]

03 / Compliance Status

Our compliance obligations

Consent Management

Granular consent notices with plain-language summaries before data collection begins.

Implemented

Consent Withdrawal

Users can withdraw consent at any time via Settings → Privacy. Withdrawal is as easy as giving consent.

Implemented

Data Localisation

All Indian user data is stored on AWS infrastructure located in the ap-south-1 (Mumbai) region.

Implemented

Data Protection Impact Assessment

Annual DPIAs for high-risk processing activities involving AI inference on personal data.

In Progress

Data Breach Notification

We will notify the Data Protection Board and affected users within 72 hours of becoming aware of a personal data breach.

Implemented

Children's Data

We do not knowingly process data of children under 13. Age verification is implemented at registration.

Implemented

04 / Contact

Data Protection Officer

For any queries related to the DPDP Act, your rights, or data processing practices, contact our designated Data Protection Officer.

Ankit Soni, Data Protection Officer

DevBhumi Technologies Pvt. Ltd.

Bengaluru, Karnataka 560001, India

[email protected]