Last updated July 13, 2026
This notice applies to residents of India who use Uprity. The Digital Personal Data Protection Act, 2023 (DPDPA) governs how we collect, process, and store your personal data.
Under the DPDPA 2023, you have the following rights:
Right to Access Information (Section 11)
You may request a summary of the personal data we process about you, the processing activities undertaken, and the identities of data fiduciaries and processors with whom your data has been shared.
Right to Correction and Erasure (Section 12)
You may request correction, completion, or updating of inaccurate or incomplete personal data, and erasure of personal data that is no longer necessary for the purpose for which it was collected, unless retention is required by law.
Right of Grievance Redressal (Section 13)
If you have a concern about our data processing, you may lodge a grievance with our Grievance Officer (see below). You must exhaust this route before approaching the Data Protection Board of India.
Right to Nominate (Section 14)
You may nominate another individual to exercise your rights under the DPDPA on your behalf in the event of your death or incapacity. To register a nomination, contact us at the details below.
Data Export (Service Feature)
While the DPDPA does not include a statutory data portability right, we voluntarily provide a self-serve data export (JSON) so you can obtain a copy of your data at any time.
To exercise any of the above rights, contact us:
Include your full name, email address, and a clear description of your request. We will respond within 30 days (or 45 days for complex requests).
Note: We may ask you to verify your identity for security purposes before fulfilling your request.
Under the DPDPA 2023, we process your personal data on the basis of your consent (Section 6) and, where applicable, for certain legitimate uses under Section 7 (such as voluntary provision of data for a specified purpose, compliance with law, or responding to a medical emergency). Key principles:
You can manage your consent preferences at any time:
Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
Under DPDPA, certain categories of data (e.g., religious affiliation, biometric data, financial information) require heightened protection. We:
Uprity is not intended for users under 18 years old. If you are a parent or guardian and believe we have collected data from a minor, please contact us immediately at privacy@uprity.com.
We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or modification:
Breach notification: In the event of a personal data breach, we will notify the Data Protection Board of India and each affected data principal in the manner and within the timelines prescribed under the DPDPA and its Rules.
See our Security page for detailed information.
Under DPDPA 2023, we have appointed a Grievance Officer to handle data-related complaints.
Contact: privacy@uprity.com
Response time: We will acknowledge your grievance within 48 hours and provide a resolution within 30 days.
Your personal data may be transferred outside India for processing (e.g., to Supabase in the US, Google in the US). Under Section 16 of the DPDPA 2023, transfers of personal data outside India are permitted except to countries restricted by notification of the Central Government. We:
Details of where each sub-processor processes data are listed on our Sub-processors page.
Our obligations under the DPDPA depend on whose data is being processed:
If you are an end customer of a business that uses Uprity and have a privacy request, please contact that business first; we will assist them in fulfilling it.
We retain your personal data as follows:
You may request deletion at any time, subject to legal retention obligations.
For complete details, see our Privacy Policy.
Questions about your DPDPA rights or data privacy?