Privacy Policy

Effective Date: June 1, 2026 | Compliant with the Digital Personal Data Protection Act, 2023 (DPDP)

1. Consent and Information Collection

Ironclad is committed to protecting the personal and business data of our users. By using the Platform, you provide free, specific, informed, unconditional, and unambiguous consent to the collection and processing of your personal data for the purposes outlined in this Policy.

We collect personal identifiers and company documentation (such as Aadhaar cards, PAN cards, utility bills, bank statements, and director credentials) to process your licensing application filings.

2. Use and Purpose of Data Processing

We process collected data exclusively to provide our core services, including:

  • Verifying applicant identities and business entities.
  • Enabling Partners to prepare, file, and submit license applications to government portals.
  • Sending automatic reminders for upcoming license expirations and renewals.
  • Recording security logs and auditing data operations (IP address and browser User-Agent details).

3. Shared Access & Third-Party Integrations

We share your documentation and personal identifiers with:

  • Assigned Marketplace Partners: Verified independent professional partners (CAs/CSs) who are assigned to handle your license application jobs.
  • Infrastructure Providers: Supabase and Vercel hosting systems (stored securely in AWS ap-south-1 Mumbai region) for executing database and API operations.
  • Payment Gateways: Razorpay for secure compliance payment transactions. We do not store full credit card numbers or banking secrets on our servers.

4. Data Principal Rights (Under DPDP Act)

As a Data Principal in India, you are entitled to specific rights regarding your personal data:

  • Right to Access: Retrieve details about what personal data is processed and a list of entities it has been shared with.
  • Right to Correction & Erasure: Request the correction of inaccurate data or the deletion of your account and documents (subject to statutory audit retention rules).
  • Right to Grievance Redressal: You have the right to register a complaint regarding data processing with our Data Protection Officer (DPO).

5. Data Security and Retention Policies

We store all uploaded documents in encrypted storage vaults. Financial transactional records are retained for a minimum of 7 years to comply with statutory taxation and audit guidelines under Indian law. Standard application drafts are deleted upon account closure.

6. Contact Our Data Protection Officer (DPO)

If you have any requests to withdraw consent, correct data, or resolve grievances, please contact our Data Protection Officer at:

Email: dpo@ironcladlicensing.com