Privacy Policy
Last updated: January 2026. This policy explains what data we collect, why, and how you can control it.
1. Who we are
ChitiShield Technologies Pvt Ltd (“ChitiShield”, “we”, “us”) operates the ChitiShield compliance platform. We are headquartered in Hyderabad, India, and act as a data fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP) for the personal data described below.
2. Data we collect
- Account data — name, work email, company name, and role, collected when you sign up or request a compliance score.
- Uploaded documents — policies, DPAs, and related files you submit for scanning, used solely to generate your gap report.
- Usage data — pages visited, features used, and device/browser information, collected via cookies and analytics.
- Communications — messages you send us via the contact form or support channels.
3. How we use your data
We use your data to provide and improve the ChitiShield product, generate compliance reports, respond to support requests, and send you relevant product updates. We do not sell personal data to third parties.
4. Document handling
Documents you upload for scanning are encrypted in transit and at rest, processed only to generate your compliance report, and retained only for as long as your account is active or as required by law. You can request deletion of uploaded documents at any time.
5. Cookies
We use essential cookies to run the site and optional analytics cookies to understand usage. You can manage your preferences at any time from the cookie banner or your browser settings. See our Security page for details on how data in transit is protected.
6. Your rights
Under DPDP and GDPR, you have the right to access, correct, port, or erase your personal data, and to withdraw consent at any time. To exercise these rights, contact us at privacy@chitishield.com.
7. Data retention
We retain account data for as long as your account remains active, plus a limited period afterward for legal and audit purposes. Uploaded compliance documents are deleted within 30 days of account closure unless you request earlier deletion.
8. Contact
Questions about this policy can be directed to our team via the contact page or privacy@chitishield.com.
This policy is a general template and should be reviewed by qualified legal counsel before use in a live production environment.