Privacy notice
DPDP Ready ("we") processes personal data in accordance with the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
What we collect and why
| Data | Purpose | Kept for |
|---|---|---|
| Website address you ask us to scan, and the scan result | To produce and show your report | 90 days |
| A salted hash of your IP address | Rate-limiting and abuse prevention | 90 days |
| Your email address (only if you give it) | Sending your report, payment link, purchased pack and DPDP deadline reminders | Until you unsubscribe or ask us to erase it; purchase records as required by tax law |
| Payment details | Processed by Razorpay; we never see your card/UPI details | Per Razorpay's policy |
| Anonymous page analytics (self-hosted, cookieless) | Understanding which pages are useful | 12 months, aggregated |
We set no advertising or tracking cookies and load no third-party trackers.
Your rights
You may access a summary of your data, correct or erase it, withdraw consent at any time (every email has a one-click unsubscribe), nominate another person to exercise your rights, and raise a grievance. Email hello@example.com (Grievance contact) — we respond within 7 days and never later than 90 days. If you are not satisfied, you may complain to the Data Protection Board of India.
About scans
When you scan a website we load its public pages once, like a normal visitor, and do not log in, submit forms or test for vulnerabilities.