◆ LEGAL · DATA PROTECTION

DPDP Act 2023
Compliance Statement.

Kunjara OS is built and operated in full compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act). This page explains what data we collect, why we collect it, how we store it, and how you can exercise your rights as a Data Principal.

Last updated: 1 January 2026 · Effective: 11 August 2023 (Act commencement)
DATA FIDUCIARY
Kunjara OS (Indigo Events & Promotions)
Bandra Kurla Complex
Mumbai 400 051
Maharashtra, India
CIN: [Registered Entity]
Data Protection Officer
For all DPDP-related requests:
privacy@kunjaraos.com
Response time: 7 business days
◆ WHAT WE COLLECT

Data categories & retention.

Account Data
Name, email address, phone number, password (hashed)
Account creation, authentication, and communication
Duration of account + 30 days after deletion
Event & Proposal Data
Client names, event briefs, budgets, vendor details
Core platform functionality — proposal generation, Event Rooms
Duration of account + 30 days after deletion
Usage Data
Pages visited, features used, session duration
Product improvement, bug fixing, analytics
12 months, then anonymised
Payment Data
Card last 4 digits, billing address, transaction ID
Billing and subscription management
7 years (statutory financial record requirement)
Support Communications
Emails, chat messages, support tickets
Customer support and dispute resolution
3 years
EXAMPLES
PURPOSE
RETENTION
◆ YOUR RIGHTS AS DATA PRINCIPAL

What the DPDP Act guarantees you.

01
Right to Access

You can request a complete copy of all personal data we hold about you at any time. We will provide it within 72 hours in a machine-readable format.

02
Right to Correction

If any data we hold is inaccurate or incomplete, you can request a correction. We will update it within 48 hours of verification.

03
Right to Erasure

You may request deletion of your personal data at any time. We will permanently erase it within 30 days, except where retention is required by law.

04
Right to Grievance Redressal

You have the right to lodge a complaint about our data practices. Our Data Protection Officer will respond within 7 business days.

05
Right to Nominate

Under DPDP Act 2023, you may nominate another individual to exercise your data rights in the event of your death or incapacitation.

◆ STORAGE & SECURITY

How we protect your data.

Data localisation

All personal data is stored on servers physically located within India. We do not transfer data outside Indian jurisdiction.

Encryption at rest

All databases are encrypted using AES-256. Backups are encrypted and stored in geographically separate Indian data centres.

Encryption in transit

All data transmitted between your browser/device and our servers uses TLS 1.3. We enforce HTTPS across all endpoints.

Access controls

Internal staff access to user data is role-based and logged. No employee can access raw user data without an audit trail.

Third-party processors

We only share data with processors who are contractually bound to DPDP Act compliance and who process data within India.

Breach notification

In the event of a data breach, we will notify affected users and the Data Protection Board within 72 hours, as required by the DPDP Act.

◆ EXERCISE YOUR RIGHTS

Make a data request.

To access, correct, or delete your data — or to exercise any other DPDP Act right — email our Data Protection Officer. We respond within 7 business days.

Email privacy@kunjaraos.com →See FAQ