Skip to main content
Review Draft v0.9Cutoff: 17 Oct 2026

Your Privacy Rights and Requests

Exercise your statutory rights under Indian law to access, correct, export, or erase your personal data.

Legal Review & Compliance Status Notice

This policy draft is tailored to AI Tathastu's verified architecture and engineering practices. Under India's phased legal framework (Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025), substantive obligations commence in scheduled tranches.

Any item labelled with an [Awaiting Verification] tag designates operational data (such as formal legal entity name, designated grievance officer contacts, or vendor contractual tiers) reserved for verified business confirmation. This platform makes no unverified certification claims.

Find my informationask about categories held, purposes and relevant sharing.
Correct or updatecorrect a mistaken CV extraction, institution, result, profile link or accepted claim.
Eraserequest deletion of specified data or closure of your account subject to legal retention.
Withdraw permissionstop future optional AI enrichment, a particular profile sync, marketing/analytics use or another authorized purpose as applicable.
Object to incorrect verified statusask for review of an evidence or verification outcome.
Complaintreport mishandling, unexpected data sharing or inaccessible controls.

1. Request help with your personal data#

You may contact Awaiting Verification: email / privacy requests form about the data that AI Tathastu holds in connection with your account. When the applicable statutory provisions are in force and apply, we support rights including access to information, correction, completion, updating, erasure, consent withdrawal and grievance redressal subject to lawful exceptions. Do not claim a general DPDP 'data portability' right unless another applicable law or product feature provides it.

3. Identity/authority verification#

We may request reasonable information to establish that the requester is the account holder or legally authorized parent/guardian. We do not request full identity documents unless necessary and lawful. Requests must not disclose another person's information to an unauthorized requester.

4. How requests are handled#

After receiving a request we assess its scope, applicable law, existing permissions, technical records, backups, authorized recipients and any applicable exceptions. We will confirm receipt and provide a response within the legally applicable timeframe; the exact published service timeline must be verified by counsel and operationally supported. We will explain meaningful denials and the escalation process.

5. Withdrawal is not retroactive#

Withdrawing a provider connection stops future retrieval under the withdrawn authorization. It cannot change copies already disclosed outside our control or undo completed external model inference. Deleting a raw CV does not necessarily delete accepted profile fields derived from it unless the request includes those fields.

6. How to complain or escalate#

Start at Awaiting Verification: grievance process. Where legally applicable, the Data Protection Board process may be available after the required steps and applicable commencement. See Grievance for details.

Exercise Your Privacy Rights

Submit a request under Section 11, 12, or 13 of the Digital Personal Data Protection Act, 2023.

Download My Data (Portability)

Download a machine-readable JSON copy of all personal profile information, confirmed projects, skills evidence, resumes metadata, and consent audit trails stored on AI Tathastu.

Questions or privacy inquiries?

Reach out to our privacy desk or review grievance redressal procedures.