Draft — pending legal review
This page is a working draft prepared ahead of formal review by counsel qualified in the DPDP Act 2023 and Indian IT Act. It is not yet in force and should not be relied on as final. No live, paid cases are being accepted while this review is outstanding.
Privacy Policy
Draft — last updated 2026-08-22
1. What we collect
- From you (the requester): name, email, phone, payment details (processed by our payment gateway, not stored by us directly), and your account activity.
- About the subject of your case: whatever identifying details you submit (e.g. name, phone number, email, social handle), used only to run the checks in your selected tier.
2. Why we process this data
We process subject data on the basis of the legitimate-interest representation you make at intake, in line with the DPDP Act 2023. We do not independently verify that representation beyond the automatic non-targeting checks described in our Terms of Service.
3. Where your data goes
To deliver a report, submitted data may be sent to:
- Public-record and open-source-intelligence lookup providers relevant to your selected tier (e.g. breach-database, court-record, and corporate-registry sources).
- Third-party AI providers, to classify your case and to synthesize the final report. Note (internal, pending legal review): our current architecture proposes DeepSeek for low-sensitivity classification and a second provider for report synthesis. Sending subject-identifying data to any AI provider — including one headquartered outside India — needs explicit sign-off from counsel before launch, given India's history of data-sovereignty scrutiny of foreign-hosted processors. This paragraph must be finalized, and this notice made specific and accurate, before go-live.
- Our payment gateway, to process your payment.
4. Retention and deletion
Case data, raw source results, and generated reports are automatically and permanently deleted 30 days after report delivery. You may request earlier deletion at any time.
5. Your rights
Under the DPDP Act 2023, you may request access to, correction of, or erasure of your personal data. Requests can be sent to our designated contact once published (a formal grievance-officer contact is required before launch).
6. Security
Data is encrypted in transit and at rest. Access to case data is restricted to the systems and personnel necessary to deliver your report.
7. Changes to this policy
We will post material changes here before they take effect.