DPDPA Notice

This notice applies to residents of India who use Lokly. The Digital Personal Data Protection Act, 2023 (DPDPA) governs how we collect, process, and store your personal data.

Under the DPDPA 2023, you have the following rights:

Right to Access (Section 8)

You may request a copy of all personal data we hold about you and how we process it.

Right to Correction (Section 8)

You may request correction or updating of inaccurate or incomplete personal data.

Right to Erasure (Section 8)

You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purpose for which it was collected.

Right to Grievance Redressal (Section 9)

If you have a concern about data processing, you may lodge a grievance with us, and we will respond within 30 days.

Right to Portability (Section 8)

You may request your data in a structured format (e.g., CSV, JSON) to transfer to another service.

To exercise any of the above rights, contact us:

• Email: privacy@lokly.in
• In-App: Settings → Privacy & Security → Data Subject Request

Include your full name, email address, and a clear description of your request. We will respond within 30 days (or 45 days for complex requests).

Note: We may ask you to verify your identity for security purposes before fulfilling your request.

Under DPDPA 2023, we process your data based on your consent. Key principles:

• Consent-First: We obtain your explicit, informed consent before processing personal data
• Purpose Limitation: We process data only for the purposes disclosed to you
• Data Minimization: We collect only the minimum data necessary to provide the Service
• Accuracy: We take steps to keep your data accurate and up-to-date
• Storage Limitation: We retain data only as long as necessary

You can manage your consent preferences at any time:

• Marketing emails: Unsubscribe via Settings or email footer links
• Analytics cookies: Manage via the cookie banner (Settings → Cookies)
• AI features: Disable in Settings → Features
• Data sharing: Control in Settings → Privacy & Security

Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Under DPDPA, certain categories of data (e.g., religious affiliation, biometric data, financial information) require heightened protection. We:

• Do not collect sensitive personal data unless absolutely necessary and with explicit consent
• Encrypt all sensitive data in transit and at rest
• Limit access to sensitive data to authorized personnel only
• Retain sensitive data for the minimum period necessary

Lokly is not intended for users under 18 years old. If you are a parent or guardian and believe we have collected data from a minor, please contact us immediately at privacy@lokly.in.

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or modification:

• Encryption in transit (TLS 1.3) and at rest
• Access control and role-based permissions
• Regular security audits and penetration testing
• Incident response and breach notification procedures

See our Security page for detailed information.

Under DPDPA 2023, we have appointed a Grievance Officer to handle data-related complaints.

Contact: privacy@lokly.in

Response time: We will acknowledge your grievance within 48 hours and provide a resolution within 30 days.

Your personal data may be transferred outside India for processing (e.g., to Supabase in the US, Google in the US). These transfers are governed by DPDPA Section 5 and require:

• Your explicit consent before any transfer
• Contractual safeguards (Data Processing Agreements)
• Equivalent data protection standards in the receiving country

By using Lokly, you consent to such transfers.

We retain your personal data as follows:

• Account data: While your account is active, plus 6 months after deletion
• Transaction data: 7 years (required by tax law)
• Usage logs: 24 months

You may request deletion at any time, subject to legal retention obligations.

For complete details, see our Privacy Policy.

Questions about your DPDPA rights or data privacy?

• Grievance Officer: privacy@lokly.in
• Legal inquiries: legal@lokly.in