Privacy policy
This notice covers this website. If your organisation uses the DPDPNiti platform, the handling of data inside your tenant is governed by your agreement with us and by the data processing terms attached to it.
Last updated 19 September 2026
Draft — not yet reviewed by counsel. This document has been prepared by DPDPNiti and has not been reviewed by an external legal adviser. We publish it in draft rather than not at all, because you are entitled to know our position before you contact us. It will be replaced by a reviewed version before DPDPNiti is generally available.
Who we are
DPDPNiti is a product of AZpirations Services. For anything in this notice, write to privacy@dpdpniti.com.
What this website collects
This site is a set of static pages. It has no forms, no accounts, no shopping basket and no comment box. Specifically:
- No analytics. We run no analytics product, no tag manager and no advertising pixel.
- No cookies set by us. The site sets no cookies of its own and shows no cookie banner, because it has nothing to ask you to consent to.
- No third-party embeds. Fonts are served from this site rather than fetched from a font provider, so loading a page does not tell anyone else that you did.
- Server logs. Our hosting provider records ordinary request logs — IP address, time, the page requested, the browser's user agent — for delivery, security and abuse prevention. We do not use those logs to build a profile of you.
If you email us
When you write to us — to ask for a walkthrough, or about anything else — we receive what you chose to send: your name, your email address, your organisation, and whatever you wrote. We use it to reply, to arrange and follow up on a walkthrough, and to keep a record of our correspondence with you. We do not sell it, we do not rent it, and we do not pass it to a third party for their own purposes.
How long we keep it
- Correspondence: for as long as we are in contact, and for 24 months after the last exchange.
- Server logs: as retained by our hosting provider in the ordinary course, and not copied elsewhere by us.
If you ask us to erase your correspondence sooner, we will, unless we are required to keep it.
Who else sees it
Two categories of provider necessarily do: the host that serves this website, and the email provider that carries our mail. They act on our instructions and for no purpose of their own. We will name them here before general availability; if you need to know today, ask us and we will tell you.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us for a summary of the personal data we hold about you and how we are processing it; ask us to correct or complete it; ask us to erase it; and nominate another person to exercise these rights on your behalf. To do any of those, write to privacy@dpdpniti.com. We will acknowledge within three working days and respond substantively as quickly as we reasonably can.
Complaints
If you are unhappy with how we have handled your personal data or your request, tell us first at privacy@dpdpniti.com — the Act expects a Data Principal to use the Data Fiduciary's own grievance route before approaching the Data Protection Board of India, and we would rather fix it. If we do not resolve it, you may complain to the Board.
Changes
When this notice changes materially we will update the date at the top and keep the previous version available on request. We will not change it quietly.
See it against your own obligations
A walkthrough of the real product — the assessment, the controls, the evidence and the audit trail — with the roadmap shown as the roadmap.