Legal center

Privacy Policy (DPDP Act 2023)

Effective 2026-10-05 · Version 1.0

1. Information We Collect

Personal Data: Name, email, phone number, address, and financial information provided during onboarding.

Usage Data: IP address, browser type, pages visited, and interactions (for analytics only).

Device Data: Device type, operating system, and unique device identifiers.

We do not use cookies for tracking beyond essential authentication and preferences.

2. Lawful Basis

We process your data based on your consent, for contractual purposes, and to comply with legal obligations.

Marketing communications require your explicit consent, which you can withdraw at any time.

3. Purpose Limitation

Contact data is used solely for case handling and communication.

Harassment evidence is never used for marketing purposes.

Analytics data is anonymized and de-identified.

4. Data Retention

Leads (unconverted): 24 months, then anonymized.

Case data and documents: 7 years post-settlement.

Harassment logs: Case life plus 7 years.

Audit log: 7 years, append-only.

Sessions and OTPs: 10 minutes to 7 days.

Backups: 14 daily and 6 monthly snapshots.

5. Your Rights

Access: View all your data through your dashboard.

Correction: Edit your profile data at any time.

Erasure: Request data deletion (subject to legal retention requirements).

Data Export: Request a full archive of your data (JSON + PDF) via your dashboard.

Withdraw Consent: Opt out of marketing communications anytime.

6. Data Security

All data is stored on encrypted filesystems within India.

Passwords are hashed with industry-standard algorithms.

OTPs are single-use and hashed.

Session tokens are httpOnly and secure.

7. International Transfers

We do not transfer your data outside India without your explicit consent.

8. Children's Privacy

Our services are not intended for individuals under 18.

We do not knowingly collect data from children.

9. Consent

By using our services, you consent to this Privacy Policy.

Your consent is recorded in our consent ledger with version and timestamp.

10. Grievance Officer

Name: [REGISTERED ENTITY - Grievance Officer]

Email: grievance@debtrix.in

Phone: +91-8796995111

Address: [OFFICE ADDRESS]

We will acknowledge your grievance within 24 hours and resolve within 30 days.

11. Changes to This Policy

We may update this policy. Changes are effective immediately upon posting.

Your continued use indicates acceptance of the updated policy.