Privacy Notice

1. Introduction & Commitment

At DigiKavach Technologies Pvt. Ltd., safeguarding your digital safety and privacy is our primary mission. We process personal data in strict compliance with India's Digital Personal Data Protection (DPDP) Act, 2023 and applicable Information Technology laws.

2. Information We Collect & Process

We adhere to strict data minimization principles and only collect information necessary to deliver fraud analysis and incident assistance:

• Threat Analysis Input: Text messages, URLs, phone numbers, payment QR codes, or APK files that you explicitly submit to Kavach One for scam evaluation.
• Identifier Hash: When communicating via WhatsApp or app channels, your identifier is salted and cryptographically hashed (SHA-256) to protect personal identity.
• Incident Assistance Details: In the event of confirmed cyber fraud, basic transaction identifiers and incident facts provided by you to help draft a standardized 1930 Cybercrime Helpline complaint.

3. Purpose & Lawful Basis of Processing

Your data is processed strictly for:

• Evaluating threat indicators against our multi-modal AI fraud detection models.
• Generating structured incident draft reports and freeze request notices for citizen submission to 1930 / banks.
• Continuous threat intelligence refinement (using irreversibly anonymized and aggregated indicators).

4. Third-Party Sub-Processors & External Assets

To ensure high performance, security, and accessibility, we utilize select infrastructure providers:

• Cloud Infrastructure: Hosted in sovereign AWS data centers located in Mumbai, India (ap-south-1) with AES-256 encryption at rest and TLS 1.3 in transit.
• Static CDNs & Typography: Google Fonts and jsDelivr CDN are used solely to deliver web fonts and visual icon glyphs. No personal or scam submission data is shared with these CDNs.
• Language Accessibility: Google Translate scripts provide on-device multilingual translations for public marketing content. Private scam analysis and chat records are never routed to translation advertising trackers.

5. Your Rights Under DPDP Act 2023

As a Data Principal under Indian law, you have enforceable rights including:

• Right to Access: Request a summary of your processed data and processing activities.
• Right to Correction & Erasure: Request the correction or deletion of your personal data.
• Right to Grievance Redressal: Direct complaints to our dedicated Grievance Officer.
• Right to Nominate: Nominate an individual to exercise your rights in case of incapacitation.

6. Data Protection & Grievance Officer

For privacy inquiries, data deletion requests, or formal grievance redressal, contact:

Grievance Officer: DigiKavach Data Governance Team
Email: info@digikavach.net / security@digikavach.net
Postal Address: DigiKavach Technologies Pvt. Ltd., 4th Floor, No. 29, MCHS Layout, Jakkur, Bengaluru North, Karnataka - 560064, India