Privacy Policy

Last updated: 2 July 2026. Aligned to India's Digital Personal Data Protection Act, 2023 (DPDP).

Data we process

Company registration details, filings, transactions, uploaded documents, and employee records (name, contact, PAN, PF UAN, ESIC IP, last-4 bank) needed to prepare compliance and payroll.

How it's protected

Sensitive identifiers (PAN, Aadhaar-last4, PF UAN, ESIC IP, bank-last4) are encrypted at rest. Documents are served only through authenticated, organization-scoped access. All actions are recorded in an audit log.

Purpose & sharing

Data is used solely to operate the service for your organization. We do not sell personal data. It is not shared except with government portals/GSPs you direct, or as required by law.

Your rights (DPDP)

You may access, correct, export, or request deletion of your data. Export is available in Settings; deletion requests are honoured subject to statutory record-retention requirements.

Retention

Compliance records are retained per applicable Indian statutory periods (e.g. Companies Act, Income-tax Act) even after account closure, then deleted.

Contact

Data protection queries: compliance@dcimal.in