Privacy Policy

1. About This Policy

1.1 This Privacy Policy ("Policy") governs the collection, use, storage, processing, and disclosure of personal data by Zeroknow Technologies Pvt. Ltd. (under formation), Raipur, India ("DoqSeal", "we", "our", or "us"), in connection with the Platform and services available at doqseal.com.

1.2 This Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA"), the DPDP Rules 2025, and all other applicable Indian laws.

1.3 By accessing or using the Platform, you ("Data Principal", "User", or "you") consent to the collection and use of your personal data as described in this Policy.

2. Definitions

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under Section 2(t) of the DPDPA.
• "Sensitive Personal Data" includes financial data, health data, biometric data, Aadhaar number, PAN, and any other data specified under applicable law.
• "Data Fiduciary" means DoqSeal (Zeroknow Technologies Pvt. Ltd.) which determines the purpose and means of processing.
• "Privacy Mode" means the on-device processing feature where documents are analysed locally without any upload to DoqSeal servers.
• "Ephemeral Sandbox" means a temporary, isolated computing environment destroyed immediately upon completion of the task.

3. Data We Collect

3.1 Data You Provide Directly

• Account Registration: Name, work email, mobile number, and password.
• Profile Information: Organisation name, designation, and GSTIN.
• Support Communications: Tickets, feedback, and correspondence.

3.2 Data Collected Automatically

• Device Data: OS, browser version, IP address (truncated).
• Usage Telemetry: Feature interaction and search latency (anonymised).
• Cookies: Essential session tokens only. No third-party marketing trackers.

4. Legal Basis for Processing

4.1 Consent (Section 6, DPDPA): We process personal data with your free, specific, informed, unconditional, and unambiguous consent. Withdrawal can be initiated at hello@doqseal.com.

4.2 Legitimate Uses (Section 7, DPDPA): Certain data may be processed without consent for legal obligations or state functions under Indian law.

5. Zero-Knowledge Architecture

5.1 Privacy Mode: Documents designated as sensitive are processed entirely on the User's device. No raw document data is transmitted to or stored on DoqSeal servers.

5.2 Ephemeral Sandboxes: Server-side processing occurs in isolated containers destroyed immediately upon completion. Raw content exists only in volatile memory.

5.3 Encryption: All data at rest is encrypted using AES-256-GCM. Document encryption occurs client-side prior to transmission.

5.4 Data Residency: All personal data and documents are stored exclusively on servers located within India (ap-south-1) on MeitY-empanelled infrastructure.

6. Your Rights Under DPDPA

In accordance with the DPDPA, you possess the following rights:

• Right to Access: Summary of personal data and processing activities.
• Right to Correction & Erasure: Updating inaccurate data or requesting deletion.
• Right to Grievance Redressal: Recourse through the Grievance Officer.
• Right to Nominate: Appointment of a representative for data rights.

7. Data Retention Schedule

8. Grievance Redressal