DPDP Act 2023 Compliant

Privacy Policy

Last updated: September 2026 • Engineered for strict cryptographic data privacy and zero sensitive data retention

1. Overview & Commitment to Privacy

At UnMaskPeople.in, we take the confidentiality and privacy of our subscribers with paramount seriousness. This Privacy Policy details our practices regarding information collection, zero-retention architecture, and strict adherence to India’s Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Special Aadhaar & Identity Data Protection Clause

Zero Storage of Raw Aadhaar Credentials

In compliance with the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 and UIDAI circulars, UnMaskPeople.in never stores, caches, or logs 12-digit Aadhaar numbers, biometric information, or physical identity card images. Queries are processed in transient memory to verify mathematical format, age band, and state distribution, after which all sensitive identifiers are immediately purged.

3. Information We Collect

Account Credentials: Name, work email address, and cryptographically hashed passwords (Bcrypt with salt rounds).
Billing & Wallet Data: Razorpay transaction IDs, top-up receipts, and atomic wallet ledgers. We do not store raw credit/debit card numbers or UPI MPINs.
Operational Logs: Timestamps, response latency, and masked carrier query logs used strictly for audit integrity and automated refund processing.

4. Cryptographic Security Standards

We implement industry-leading technical measures to safeguard all telemetry data:

In-Transit Encryption: All data transmissions are encrypted using Transport Layer Security (TLS 1.3).
At-Rest Encryption: Database credentials and external provider API tokens are protected via AES-256-GCM authenticated encryption.
Secret Masking: Sensitive identifiers in administrative dashboards are dynamically masked (e.g. ••••••••1234).

5. Your Rights Under DPDP Act 2023

As a data principal under Indian law, you have the right to:

Request a summary of personal data processed by the Platform.
Request correction, completion, or updating of your account records.
Request account closure and permanent erasure of your personal data.

6. Grievance Redressal Officer

In accordance with the Information Technology Rules, 2021, the designated Grievance Officer for UnMaskPeople.in is:

Name: Grievance Redressal Officer, UnMaskPeople.in

Email: privacy@unmaskpeople.in

Turnaround Time: Acknowledgment within 24 hours; resolution within 15 days.