India DPDP Act Compliance
Last updated: 2 October 2026
SAATHYA is committed to complying with the Digital Personal Data Protection Act, 2023 (DPDP Act). This page summarises how we handle your personal data in line with the Act.
1. About the DPDP Act
The DPDP Act is India's comprehensive data protection law. It gives individuals ("Data Principals") rights over their personal data and places obligations on entities ("Data Fiduciaries") that process it. SAATHYA acts as a Data Fiduciary for the personal data you share with us.
2. Consent
We collect and process your personal data only with your free, specific, and informed consent. You may withdraw consent at any time through your account settings or by contacting our Grievance Officer. Withdrawing consent may limit your ability to use certain features.
3. Purpose Limitation
We process your personal data only for the purposes disclosed at the time of collection — operating the marketplace, facilitating collaborations, processing payments, and complying with the law. We do not use your data for unrelated purposes without fresh consent.
4. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access information about the personal data we hold about you.
- Correct and update inaccurate or incomplete personal data.
- Request erasure of your personal data, subject to legal retention requirements.
- Nominate another individual to exercise your rights in the event of death or incapacity.
- Withdraw consent and lodge a grievance with us or the Data Protection Board of India.
5. Children's Data
SAATHYA is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact our Grievance Officer and we will take steps to delete it.
6. Grievance Redressal
Our Grievance Officer is designated to address data protection concerns. You can reach them at grievance@saathya.in. We acknowledge complaints within 24 hours and resolve them within the timeframes prescribed under the DPDP Act Rules.
7. Data Breach Notification
In the event of a personal data breach, we will notify affected Data Principals and the Data Protection Board of India as required by the Act, describing the nature of the breach and the steps you can take to protect yourself.
