1. Our Commitment

AASHVIRA TECH SOLUTIONS LLP ("RemindPaisa") is committed to complying with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and its associated rules. We believe data protection is a fundamental right, and we have designed our platform and processes to honour your rights as a data principal.

This page provides a plain-language explanation of the DPDP Act as it applies to your use of RemindPaisa — whether you are a business owner (our customer) or one of the end customers whose data our customers add to the platform.

2. Key Definitions Under the DPDP Act

Data Principal: The individual whose personal data is being processed. If you are a business owner using RemindPaisa, you are a data principal for your own account data. Your customers are data principals for the customer data you add.
Data Fiduciary: The entity that determines the purpose and means of processing personal data. RemindPaisa (AASHVIRA TECH SOLUTIONS LLP) is the data fiduciary for account data. For customer data, you (the business owner) are the data fiduciary; RemindPaisa acts as a data processor on your behalf.
Personal Data: Any data that can directly or indirectly identify a natural person — names, phone numbers, email addresses, and similar identifiers.
Processing: Any operation performed on personal data — collection, storage, use, sharing, transfer, or deletion.

3. Personal Data We Process

As data fiduciary (your account data)

Your name, email address, mobile number (account registration and operation)
Your business name and GSTIN (generating GST-compliant invoices)
Login timestamps and IP address (security and fraud prevention)
Subscription and billing records (financial compliance)

As data processor (your customers' data, on your behalf)

Your customers' names, mobile numbers, email addresses (to send reminders per your instructions)
Due amounts and due dates (to populate reminder messages)
Message delivery and read status (to display your collections dashboard)

4. Legal Basis for Processing

Account data (contract performance): We process your personal data because it is necessary to perform the contract — i.e., to operate your RemindPaisa account.
Customer reminder delivery (contract performance): We process your customers' personal data to deliver the reminders you configure. You, as the business owner, are responsible for ensuring you have the appropriate basis to share your customers' data with us.
Financial records (legal obligation): We retain billing records for 7 years as required by the GST Act and Income Tax Act.
Security logs (legitimate interest): We retain security logs for 6 months to detect and prevent fraud and unauthorised access.

5. Your Rights as a Data Principal

The DPDP Act 2023 grants you the following rights. We will respond to all requests within 30 days of receipt.

Section 11 of the DPDP Act

Right to Information

You have the right to know:

What personal data we hold about you
The purposes for which we process it
The identities of third parties (service providers) with whom we share it
The basis on which we process your data

Email security@remindpaisa.com with subject "DPDP — Right to Information".

Section 12 of the DPDP Act

Right to Correction and Erasure

You have the right to:

Request correction of inaccurate or incomplete personal data we hold about you
Request erasure of personal data that is no longer needed for the purpose it was collected
Request erasure of personal data where processing is not in compliance with the DPDP Act

Note: We may decline erasure where we are required to retain data by law (e.g., billing records under GST Act) or where retention is necessary for legal proceedings.

Email security@remindpaisa.com with subject "DPDP — Correction / Erasure Request".

Section 13 of the DPDP Act

Right to Grievance Redressal

If you believe your personal data has been processed in a manner that does not comply with the DPDP Act, or if we have not responded adequately to a previous request, you have the right to:

File a complaint with our Grievance Officer
Escalate to the Data Protection Board of India if you are not satisfied with our response

Email security@remindpaisa.com with subject "DPDP — Grievance". We will acknowledge within 3 business days and resolve within 30 days.

Section 14 of the DPDP Act

Right to Nominate

You have the right to nominate another individual to exercise any or all of the above rights on your behalf in the event of your death or incapacity. To register a nomination, email security@remindpaisa.com with subject "DPDP — Nomination". Include your name, nominee's name, nominee's contact details, and a signed nomination declaration.

6. How to Exercise Your Rights — Step by Step

To make any DPDP Act request:

Email security@remindpaisa.com from the email address registered to your RemindPaisa account
State which right you are exercising (e.g., "Right to Erasure under DPDP Act Section 12")
Provide any relevant details to help us locate your data quickly
We will verify your identity (typically by confirming your registered email) and acknowledge within 3 business days
We will complete the request or explain any limitations within 30 days

Withdrawing consent

Where processing is based on your consent, you may withdraw it at any time by emailing security@remindpaisa.com with subject "Withdraw Consent". Withdrawal does not affect the lawfulness of any processing carried out before withdrawal. If you withdraw consent for processing that is essential to operating your account (e.g., authentication, reminder delivery), we will close your account within 30 days and delete your data per our retention policy.

A note for end-customers of businesses using RemindPaisa

If you received a payment reminder from a business that uses RemindPaisa — and you wish to access, correct, or delete your personal data — your first point of contact is that business (the data fiduciary). RemindPaisa acts only as a data processor on their behalf. However, if you cannot reach them, email security@remindpaisa.com and we will direct your request appropriately. To stop receiving reminders immediately, reply STOP to any WhatsApp or SMS message.

7. Our Obligations as a Data Fiduciary

Maintaining appropriate technical and organisational security safeguards (encryption in transit, infrastructure-level safeguards at rest)
Implementing access controls so that only authorised personnel can access personal data
Deleting personal data when the purpose for which it was collected is fulfilled, subject to legal retention obligations
Notifying you and the Data Protection Board of India in the event of a data breach that affects your personal data
Ensuring our data processors (WhatsApp Business API provider, SMS gateway, email delivery, cloud infrastructure) handle data under obligations equivalent to those we have accepted
Not using personal data for any purpose other than those disclosed in our Privacy Policy

8. Data Breach Notification

If we discover a personal data breach that is likely to affect your rights or interests, we will:

Notify all affected data principals within 72 hours of becoming aware of the breach
Report the breach to the Data Protection Board of India as required under the DPDP Act
Provide you with information about: what data was affected, how the breach occurred, what steps we have taken, and what you can do to protect yourself
Take immediate steps to contain, investigate, and remediate the breach

Breach notifications will be sent to your registered email address. We recommend keeping your registered email address current.

9. Grievance Officer

We have appointed a Grievance Officer responsible for addressing privacy-related complaints and DPDP Act requests:

Ashok KumarFounder & Designated Grievance Officer
AASHVIRA TECH SOLUTIONS LLP
Bengaluru, Karnataka, India
Email: security@remindpaisa.com
Response time: Within 30 days of receipt of complaint, as required under Section 13 of the DPDP Act
Acknowledgement: Within 3 business days

If you are not satisfied with our response, you may escalate to the Data Protection Board of India once it is established and operational, as per Section 27 of the DPDP Act.

10. Contact

For all privacy and DPDP Act related questions, including those not covered on this page:

security@remindpaisa.com — data protection and DPDP Act requests
support@remindpaisa.com — general support and account questions

Also see our Privacy Policy and Terms of Service.

Digital Personal Data Protection Act 2023