Privacy Policy

Transversal ("we," "our," or "us") operates the transversal.in website and provides DPDPA compliance solutions and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our platform, or engage with our services.

This policy is prepared in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other applicable data protection laws. By accessing our services, you consent to the practices described in this policy.

We use your personal data for the following lawful purposes:

Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:

• Consent: Where you have given explicit consent for specific processing activities
• Contract Performance: Where processing is necessary to fulfill our contractual obligations to you
• Legal Obligation: Where processing is required to comply with applicable laws
• Legitimate Uses: For purposes specified under Section 7 of the DPDPA, including voluntary provision of data, medical emergencies, employment purposes, and public interest

You may withdraw your consent at any time by contacting us. However, withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

We do not sell your personal data. We may share your information with:

We take reasonable measures to protect your personal data:

• Encryption: Data in transit is protected using TLS/SSL encryption
• Access Controls: We limit access to personal data to authorized team members only
• Secure Infrastructure: Your data is stored on Supabase, a trusted cloud database platform with built-in security features
• Authentication: We use secure authentication mechanisms to protect your account

While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained while your account is active and for a reasonable period afterward for legal and business purposes
• Transaction Data: Retained as required by tax and financial regulations (typically 7 years in India)
• Communication Data: Retained for the duration of the business relationship plus a reasonable period for support purposes

Upon request for deletion (subject to legal retention requirements), we will delete or anonymize your personal data within a reasonable timeframe.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You have the right to obtain confirmation about whether your personal data is being processed, and access to such data along with a summary of processing activities
• Right to Correction: You have the right to correct, complete, or update your personal data that is inaccurate or misleading
• Right to Erasure: You have the right to request deletion of your personal data, subject to legal retention requirements
• Right to Grievance Redressal: You have the right to have grievances addressed and, if unsatisfied, approach the Data Protection Board of India
• Right to Nominate: You have the right to nominate another individual to exercise your rights in case of death or incapacity

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.

We do not use cookies, tracking pixels, or third-party analytics tools on our website.

Your browsing activity on our website is not tracked, monitored, or shared with any third parties for advertising or analytics purposes. We believe in respecting your privacy and providing our services without invasive tracking.

If we decide to implement any cookies or tracking technologies in the future, we will update this Privacy Policy and seek your consent where required by law.

Your personal data is stored securely on Supabase, our trusted database infrastructure provider. We do not transfer your personal data to servers located outside of the jurisdictions where Supabase operates.

We do not sell, rent, or transfer your personal data to third parties for their own purposes. Your data is only used to provide and improve our services to you.

Our services are intended for businesses and professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information immediately. If you believe we may have collected data from a child, please contact us.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you by email or through a prominent notice on our website
• For significant changes, we may seek your renewed consent

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response to your grievance, you have the right to approach the Data Protection Board of India as established under the Digital Personal Data Protection Act, 2023.