What we collect and why
Data we collect
| Data | Why | Legal basis |
|---|---|---|
| Name, work email, company name, sector | Account creation and report labelling | Contractual necessity — S.7, DPDP Act 2023 |
| Password (stored as a PBKDF2-SHA256 hash — never plain text) | Authentication | Contractual necessity — S.7 |
| Assessment responses and free-text notes | Deliver the self-assessment service and generate your gap report | Contractual necessity — S.7 |
| Payment reference token (paid plans only) | Subscription management. Raw card / bank details are never stored by us — processed by Razorpay Software Pvt Ltd. | Contractual necessity — S.7 |
| Marketing email (if you opt in) | Product updates, DPDP regulatory alerts | Freely given opt-in consent — S.6. Withdraw any time in Account Settings. |
Your rights under the DPDP Act, 2023
- Access — see all data we hold about you in Account Settings
- Correct — email [email protected]
- Erase & close account — Account Settings → Close account. PII is pseudonymised immediately.
- Withdraw marketing consent — Account Settings or any email unsubscribe link
- Complain to the Data Protection Board of India — dpboard.gov.in (once operational)
Data Fiduciary: Aptus Software Labs Pvt Ltd • Full Privacy Notice