Privacy Notice

1. What this notice covers

This notice explains how we process personal data when you visit complianceedge.in, join a waitlist, or use the Compliance Edge platform. It is issued under the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

2. Personal data we collect

• Account data: name, work email and identity provider subject received from Google or Microsoft when you sign in. We never receive or store passwords.
• Workspace data: your organization’s legal name, GSTIN/CIN (if provided), and compliance records you create.
• Waitlist/contact data: email address and the page you signed up from.
• DSR ticket contacts: when your organization logs a data principal request, contact details are stored encrypted.

3. Purposes and lawful basis

We process personal data with your consent, and for legitimate uses connected to providing the service you signed up for: operating your workspace, sending transactional email, responding to enquiries, and securing the platform. We do not sell personal data or use it for cross-context behavioural advertising.

4. Your rights

Under the DPDP Act you may request access to, correction of, or erasure of your personal data; nominate another person to exercise your rights; and seek grievance redressal. Write to support@complianceedge.in — every request is tracked in our own DSR system against an SLA, and unresolved grievances may be escalated to the Data Protection Board of India.

5. Retention and deletion

Account and workspace data are retained while your account is active and deleted or anonymized after account closure, subject to a 30-day grace window and any legal retention duties. Waitlist emails are deleted on request.

6. Security

TLS 1.2+ in transit, AES-256 at rest, database row-level security for tenant isolation, and envelope encryption for sensitive fields. See our Security page.

7. Processors and transfers

We use vetted infrastructure processors (hosting, database, email delivery) bound by data processing terms. Where data is processed outside India, we ensure it is not a jurisdiction restricted by the Central Government under the DPDP Act.

8. Grievance officer

Grievance/contact: Alvionix Edge LLP — support@complianceedge.in. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.