DPDP Compliance

1. Applicability

This page explains how MoneyGence complies with India's Digital Personal Data Protection Act, 2023 (DPDPA). Under the DPDPA, MoneyGence acts as a Data Fiduciary and you, as a user of our website or product, are a Data Principal. This page summarizes your rights and our obligations; full detail on what data we collect and how it is used is in our Privacy Policy.

2. Personal Data We Process

As described in our Privacy Policy, this includes account information (name, business email, password hash), business data you enter into the platform (client details, invoices, revenue records, bank statements, GST information), usage data, and voluntary submissions such as contact-form or newsletter sign-ups.

3. Basis for Processing

We process your personal data on the basis of your consent, given either by accepting our Terms and Privacy Policy at signup, or via our website's cookie preference banner for analytics and marketing cookies. Where the DPDPA's certain "legitimate uses" exceptions apply (for example, to comply with a legal obligation), we rely on those instead of consent.

4. Your Rights as a Data Principal

Under the DPDPA, you have the right to:

• Access: a summary of the personal data we hold about you and the processing activities carried out
• Correction and erasure: request correction of inaccurate or incomplete personal data, or erasure of data that is no longer necessary for the purpose it was collected
• Grievance redressal: raise a grievance with our Grievance Officer (see below) and receive a response in a reasonable timeframe
• Nomination: nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
• Withdraw consent: withdraw consent at any time, as easily as it was given; this will result in account termination where consent is the basis for providing the service

To exercise these rights, contact us at admin@moneygence.com.

5. Our Obligations as a Data Fiduciary

• We process personal data only for the purpose it was collected, or a purpose you would reasonably expect
• We implement reasonable security safeguards (HTTPS encryption in transit, bcrypt password hashing, role-based access controls, regular security review) to prevent personal data breaches
• In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the Act
• We erase personal data once the purpose for which it was collected is no longer being served and retention is not otherwise required by law, consistent with the retention terms in our Privacy Policy

6. Cross-Border Processing

Some of our third-party service providers (for website analytics and email delivery) may process data on infrastructure located outside India. As of this page's last update, the Government of India has not notified any countries as restricted destinations under Section 16 of the DPDPA. We take reasonable steps to ensure any such processors maintain appropriate safeguards.

7. Consent Manager

The DPDPA envisions a registered Consent Manager framework for managing consent across services. As this framework has not yet been operationalised by the Data Protection Board of India, we currently manage consent directly - through account signup terms and our website's cookie preference banner - and will integrate with a registered Consent Manager if and when it becomes applicable to us.

8. Grievance Officer

In accordance with Section 8 of the DPDPA, you may raise any data protection queries or complaints with our Grievance Officer:

Grievance Officer
grievance@moneygence.com

If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India.

9. Children's Data

MoneyGence is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors, and we do not track, target advertising to, or build behavioural profiles of children.

10. Changes to This Page

We may update this page as the DPDPA's implementing rules are notified or as our data practices change. Material changes will be reflected here with an updated "Last updated" date.