Privacy Policy

Last updated 18 September 2026

This Privacy Policy explains how DPDP Core (“we”, “us”, or “our”) collects, uses, and protects personal data on dpdpcore.in.

1. Who We Are

DPDP Core is operated by Manan Patel, sole proprietor, India. For any questions about your personal data, contact contact@dpdpcore.in.

2. Information We Collect

• Free tools (DPDP explainer and Find My Role): These run entirely in your browser. We do not collect, store, or transmit any answers you provide to them.
• Account: To use the paid readiness assessment you create an account. We collect your email address, and if you sign in with Google the basic profile information Google shares for sign in. Your password is handled by our authentication provider and is never visible to us.
• Assessment answers: The readiness assessment runs on our server and is saved to your account. We store the answers you provide so that we can generate your readiness report and the document pack tailored to those answers, so that you can pause and resume, and so that you can return to review your answers later. We do not sell them or use them for advertising.
• Waitlist: If you join the waitlist, we collect only your email address, the referring page, and timestamp.
• Payments: When you make a purchase, Razorpay processes the payment. We receive confirmation along with basic transaction information (such as order ID, payment status, and amount).
• Organisation Details: Details you enter for document generation remain in your browser and are merged into the templates locally. They are not transmitted to our servers.
• Local Storage: Your language preference and organisation details for document generation are stored locally in your browser.

Limited technical information (such as IP address and request metadata) may be automatically processed by our hosting provider for security and operational purposes.

3. How We Use Personal Data

We use personal data only for the following purposes:

• Notifying waitlist users about product launches and important updates.
• Generating your readiness report and your tailored document pack from your assessment answers.
• Letting you resume an assessment and review your saved answers.
• Processing and verifying payments.
• Delivering the blank document templates you have purchased after successful payment verification.
• Maintaining basic transaction records for accounting, support, and legal compliance.

We will not use your data for any unrelated purpose without updating this Privacy Policy or obtaining any consent required under applicable law.

We do not sell your data or use it for advertising.

4. Data Storage and Third Parties

• Waitlist and order data are stored securely with Supabase.
• Payments are processed by Razorpay. Your payment card details are handled directly by Razorpay under their privacy policy.
• The Website is served through Cloudflare, which also provides security filtering and privacy friendly traffic measurement. Cloudflare processes request metadata such as IP address for those purposes.

We use third party service providers only as necessary to operate the Website and process payments.

5. Cookies and Similar Technologies

We set no advertising cookies, no analytics cookies and no session recording of any kind. We do not use Google Analytics, advertising pixels or tag managers anywhere on this Website.

Three things are stored on your device, and this is the full list:

• A security cookie set by Cloudflare (cf_clearance), on every page. It records that your browser passed an automated security check, and it exists to keep bots out. It is strictly necessary to serve the site.
• A session cookie set by Razorpay (rzp_unified_session_id), on the pages that can take a payment, which are Book a Call and the Template Builder. It is set by Razorpay's checkout script when the page loads, and Razorpay controls how long it lasts.
• Local storage in your browser, holding your language preference, any organisation details you enter for document generation, and, while you are signed in, your session. Your three hour sign in expires automatically, and signing out removes it.

We do not ask for cookie consent because nothing here tracks you across sites or builds a profile of you. Your browser settings can block or clear all of the above, and the Website still works, though a blocked security cookie may mean Cloudflare challenges you again.

Cloudflare Web Analytics is used on some pages to count visits. It sets no cookie and does not fingerprint visitors.

6. Data Retention

We retain waitlist emails and basic order records only for as long as necessary for the purposes described in this Privacy Policy or as required by applicable law. Where possible, you may request deletion of personal data that we are not legally required to retain.

We retain your account and your saved assessment answers for as long as your account is active, and for up to 12 months after your last activity, unless you ask us to delete them earlier or a law requires us to keep them longer. You can request deletion at any time (see Your Rights).

Where you have purchased a document pack, we keep a copy of the answers that pack was generated from for as long as the pack remains available to you in your account. This is what lets you reopen and download that pack later, and it is fixed at the time of purchase, so answering the assessment again does not change a pack you have already bought. If you ask us to delete your data, or you delete your account, those saved answers are deleted too and the pack can no longer be generated.

7. Security

We implement reasonable technical and organisational measures designed to protect personal data from unauthorised access, disclosure, alteration, or destruction. However, no online service can guarantee absolute security.

8. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of the personal data we hold about you. To make such a request, please email contact@dpdpcore.in and include the email address associated with your purchase or waitlist entry. We will respond as promptly as possible, and in any case within thirty days.

Complaints. If you are unhappy with how we have handled your personal data or your request, email contact@dpdpcore.in with the word Grievance in the subject line. The same address is our grievance route, it reaches the person who runs DPDP Core, and we will respond within thirty days. Once the Data Protection Board of India is operating and the relevant provisions commence on 13 May 2027, you will also be able to complain to the Board if our answer does not satisfy you.

You may also nominate another person to exercise your rights on your behalf if you die or become unable to act. To do so, email contact@dpdpcore.in.

9. Children’s Privacy

This Website is not directed at children. We do not knowingly collect personal data from children.

10. External Links

This Website may contain links to third party websites. We are not responsible for their content or privacy practices.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by revising the “Last updated” date at the top of this page.

12. Contact

For any privacy related questions or requests, please contact us at contact@dpdpcore.in.