DPDP Compliance
Digital Personal Data Protection Act 2023
What is the DPDP Act 2023?
The Digital Personal Data Protection (DPDP) Act 2023 is India's landmark data privacy law. It grants citizens control over their personal data and places obligations on companies to process data responsibly, securely, and lawfully.
Scale Craft's DPDP Compliance Framework
Data Localization
Your data is stored exclusively on AWS Mumbai (ap-south-1) servers in India. No cross-border data transfer occurs without explicit user consent.
Consent Management
We obtain explicit, informed consent before collecting any business or personal data. Users have the right to withdraw consent at any time.
Data Minimization
Only the minimum required information necessary to run the platform is collected. We do not store unnecessary user details.
Right to Access
You can request a copy of the personal data we store. We respond to all data access requests within 30 days.
Right to Correction
Users can update or correct any inaccurate or incomplete personal data via settings or support.
Right to Erasure
Upon account deletion or request, all user-related data is permanently erased within 30 days.
Data Breach Notifications
In the unlikely event of a security breach, affected users and authorities will be notified within 72 hours.
Privacy by Design
Privacy considerations are embedded directly into our product development cycle from day one.
Data Principal Rights
To exercise your rights under the DPDP Act, contact our Data Protection Officer:
📧 dpo@scalecraftind.in (Data Protection Officer)