Back to Home
DPDP Act 2023 — Section 5 Notice

Data Privacy Notice

Issued under Section 5 of the Digital Personal Data Protection (DPDP) Act, 2023

Data Fiduciary

ComplianceDesk AI LLP
502B, Sadhguru Capital Park, Madhapur, Hyderabad, Telangana – 500081, India

Categories of Personal Data Collected

Data CategorySpecific DataPurpose
Identity DataFull Legal NameIdentity verification for employment/business onboarding
Contact DataMobile Phone NumberOTP verification, consent management, communication
Document DataDriving License, Voter ID, Passport (image)AI-powered document verification via Protean eGov APIs
Biometric DataFacial photograph (from ID document)Liveness detection and anti-spoofing verification
Location DataState/region (derived from mobile prefix)Regional language selection and compliance routing

Purpose of Processing

  • Identity verification for employment or business verification as required by the Principal Employer or Client Organization.
  • Compliance with DPDP Act 2023, IT Act 2000 amendments, and Protean eGov Technologies KYC guidelines.
  • Fraud prevention through AI-powered document analysis and liveness detection.
  • Legal archiving of consent records as mandated by statute.

Data Retention

All personal data is automatically purged within 72 hours of verification completion. Consent records and legal audit trails are retained for 7 years as required by applicable Indian law. Data is encrypted with AES-256 encryption and stored exclusively within Indian territory.

Data Principal Rights (Section 11–14)

  • Right to Access (Section 11): You may request a summary of the personal data we hold about you and the processing activities performed.
  • Right to Correction (Section 12): You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Section 13): You may request deletion of your personal data at any time, unless retention is required by law.
  • Right to Grievance Redressal (Section 14): You may file a grievance with our Data Protection Officer. We will acknowledge within 48 hours and resolve within 30 days.
  • Right to Nominate (Section 14): You may nominate another individual to exercise your rights in case of death or incapacity.

Third-Party Sharing

Your personal data is shared only with:

  • Protean eGov Technologies Ltd. (formerly NSDL e-Governance) — for government identity database verification.
  • Cloud Infrastructure Provider — data remains exclusively within Indian territory.

We do not sell, trade, or transfer your data to any other third party.

Consent Withdrawal

You may withdraw consent at any time by sending STOP to our WhatsApp number. Withdrawal will immediately halt all data processing. Previously archived consent records will be retained as legally required.

Data Protection Officer

Statutory DPO

Statutory DPO — DPDP Act 2023, Section 10

Email: support@compliancedesk.ai
Address: 502B, Sadhguru Capital Park, Madhapur, Hyderabad – 500081

Amendments

This Privacy Notice may be updated periodically. Material changes will be communicated via WhatsApp and/or email. Continued use of our services after notification constitutes acceptance of updated terms.

Last Updated: March 6, 2026

DPDP Act 2023 Compliant
ComplianceDesk AI — India's Sovereign Identity Verification Platform