Digital Personal Data Protection (DPDP) Notice
This notice is given under the Digital Personal Data Protection Act, 2023 (the "DPDP Act") to people who register a SamparkApp workspace. It sits alongside our Privacy PolicyDPDP notice and Terms & Conditions. Where this notice and the Privacy Policy differ on a point about your personal data, this notice applies to that point.
1. Who is responsible
SamparkApp (the "Data Fiduciary") decides why and how the personal data you give us when you register is processed. For the customer and lead data you upload to your workspace, you decide the purpose and we process it for you, as described in section 3 of the Privacy Policy.
2. What we collect and why
- Your name, email address and password (the password is stored only as a one-way hash): to create your account and sign you in.
- Your business name and time zone: to set up your workspace.
- Your chosen package and payment details (card or UPI details are handled by Razorpay, not stored by us; we keep the payment reference, amount and invoice): to charge, invoice and activate your package.
- The date, time and IP address of your acceptance, and the version of the documents you accepted: to keep a record that you agreed, which we may need to show in a dispute or to a regulator.
- Technical data such as IP address and device information: to secure the service and prevent abuse.
We process this data only for these purposes, and for any other purpose the law permits or requires.
3. Your consent
When you tick the box on the registration form you consent to us processing your personal data for the purposes in section 2. The consent is a clear, free and specific action, and it covers the Terms & Conditions, the Privacy Policy and this notice at the version shown on that page. We email you a copy of what you accepted, with the date, time and IP address recorded.
You may withdraw consent at any time by writing to the address in section 6. Withdrawing does not affect processing done before you withdrew, and we may have to close your workspace, because we cannot run it without the data above. We keep what the law requires us to keep, such as tax invoices.
4. Who we share it with
We share personal data only with providers who help us run the service: our hosting and email providers, and Razorpay for payments. They may process it only for that purpose. We do not sell personal data.
5. How long we keep it
We keep your account data while your workspace is active, and afterwards for as long as needed to meet legal, tax and accounting duties and to resolve disputes. We keep the acceptance record for as long as we may need to prove it. Then we delete it or make it anonymous.
6. Your rights and how to use them
Under the DPDP Act you may ask to see a summary of the personal data we process and who we share it with, to correct or complete it, to have it erased, to withdraw consent, and to have your grievance heard. You may also nominate another person to exercise these rights if you die or cannot do so yourself.
Write to our grievance contact at [email protected] with the subject "DPDP request". We will verify your identity and reply within a reasonable time, and in any case within the time the law sets. If you are not satisfied with our reply, you may complain to the Data Protection Board of India once it is established and the law allows it.
7. Children
SamparkApp is for business use. We do not knowingly register anyone under 18.
8. Changes
If we change this notice in a way that affects what you consented to, we will ask you again or tell you before it takes effect. The "Last updated" date above shows the current version.
Questions? [email protected]