Who we are
DPDP India Scanner is run by Crave Brain Services and Technology (“we”, “us”). You can reach us at info@dpdpindiascanner.com. We are the Data Fiduciary for your account data. For data that our customers record about their own visitors (rights requests, consent records, breach and inventory entries), we process it on their behalf as a Data Processor; that customer is the Data Fiduciary.
What we collect and why
- Account: your first and last name, email address and password (stored hashed) — to give you an account, sign you in and address you correctly.
- Product news (only if you opt in): your email address — to send occasional product news and DPDP updates.
- Scans: the website addresses you scan and the public pages we read — to produce your reports. Scan reports are deleted automatically after 30 days.
- Billing: your plan and Razorpay subscription status. Razorpay collects payment details directly; we never see card or UPI details.
- Evidence files: documents you choose to upload to your workspace (contracts, policies, configuration exports) — kept in private storage that only you can open, to show what your organisation has in place. Please redact personal data you do not need before uploading. They are deleted when you delete the website or your account.
- Team access: if a website owner adds you to their workspace, we show them your name and email address and record what you change, so they can see who did what.
- Two-step sign-in: if you turn it on, an encrypted key for your authenticator app and hashed recovery codes.
- AI features: when you use them, the report content and your answers are sent to Anthropic to generate the result.
- Security logs: sign-ins and requests, kept for one year as Rules 6 and 8(3) require.
We use no analytics or advertising trackers on this website, so we show no cookie banner. We use only the cookie needed to keep you signed in.
Consent and withdrawal
You agree to account processing when you register, and separately, if you choose, to product news. You can withdraw either at any time: untick product news on your account page, delete your account there, or write to info@dpdpindiascanner.com. Withdrawing is as easy as giving consent. Processing done before you withdraw stays lawful.
Your rights
You can ask for a summary of your data and who it was shared with, correct, complete, update or erase it, nominate someone to act for you, and raise a grievance. To do so, write to info@dpdpindiascanner.com from the email address on your account, or use your account page to update your details or delete your account. Deleting your account erases your scans, workspace records and subscription records. We respond within 30 days, and never later than 90 days.
Grievances and the Board
Write to our Grievance Officer at info@dpdpindiascanner.com with “Grievance” in the subject line. We acknowledge it promptly and resolve it within 30 days, and never later than 90 days. Please use this route first: you must exhaust it before going to the Board. If you are not satisfied with our response, you can complain to the Data Protection Board of India through the online platform the Board provides.
Sharing and transfers
Processors: Razorpay (payments, India), Anthropic (AI features, United States) and our cloud hosting provider. When our customers turn on processor notices, we send their processors a notice when one of their visitors withdraws consent or asks for erasure; it carries the request reference and, for requests, the requester’s email address, so the processor can act on it. Some processing therefore happens outside India, which the Act allows unless the Government restricts a country.
Retention and security
We keep account data while your account is open and erase it when you delete the account, except records we must keep by law. Data is encrypted in transit; access is limited to staff who need it.
Children
The service is for businesses and is not meant for anyone under 18.
Language
You can ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India by writing to info@dpdpindiascanner.com.
Changes
We will tell you about material changes by email before they apply.
Crave Brain Services and Technology · info@dpdpindiascanner.com