Legal
Privacy notice
Last updated 7 November 2026
Draft, under legal review
Who we are
OptProof and optproof.in are run by Arjun Raj, trading as Digital Architect, a sole proprietorship based in Bengaluru, India (GSTIN 29DOHPR6992Q1ZH). Our principal place of business is No 2 & 03, Ashrivadam, Opposite 5th Cross, Sidedahalli, near NMH Convention Hall, Bengaluru, Bengaluru Urban, Karnataka 560073, India. For the data described here, we decide why and how it is used, so we are the data fiduciary. When a business uses OptProof to collect consent from its own customers, that business is the data fiduciary and we process the data on its behalf. That is covered by our data processing agreement, not this notice.
What we collect and why
Each purpose below lists the exact data we use, what it lets you do, and how long we keep it.
Your OptProof account and sign-inNeeded for the service
If you or your team use the OptProof console, we use your details to create your account, sign you in securely and show you the right workspace.
What it lets you do: Lets you sign in to the OptProof console and work in your business workspace.
Data we use:
- Full name
- Work email address
- Google account identifier, if you sign in with Google
- Workspace and role
- Two-factor authentication settings
- Sign-in times and device type
How long we keep it: We keep account records for 3 years after the account is closed, then delete them.
Providing the service and billingNeeded for the service
We use your business and billing details to run your subscription, send GST invoices and keep payment records.
What it lets you do: Lets you pay for an OptProof plan and receive proper tax invoices.
Data we use:
- Billing contact name
- Billing email address
- Business legal name and address
- GSTIN, if you give one
- Plan and billing period
- Payment reference from the payment provider
How long we keep it: Tax and accounting records are kept for 8 years because tax law requires it.
Your free website scan and reportNeeded for the service
When you use the free scanner, we scan the web address you give us and email you the readiness report.
What it lets you do: Lets you get a DPDP readiness report for your website by email.
Data we use:
- Name
- Work email address
- Company name, if you give it
- Website address you ask us to scan
- Scan results
How long we keep it: 1 year, then we delete it.
Follow-up from our team (optional)Optional
If you tick the box on the scanner or contact form, someone from OptProof may email you about your report and our plans. You can say no and still get your report.
What it lets you do: Lets our team help you fix the issues the scan found and choose a plan.
Data we use:
- Name
- Work email address
- Company name, if you give it
- Readiness score from your scan
How long we keep it: 2 years, then we delete it.
Answering your questionsNeeded for the service
When you write to us, we use your message and contact details to reply and fix the problem.
What it lets you do: Lets us answer support, sales and privacy questions you send us.
Data we use:
- Name
- Email address
- Your message and any files you attach
- Workspace name, if you have one
How long we keep it: 2 years, then we delete it.
Keeping OptProof secureNeeded for the service
We keep short technical logs to stop abuse, investigate problems and record who changed what in a workspace.
What it lets you do: Keeps your account and your customers’ consent records safe from misuse.
Data we use:
- Shortened IP address
- Browser type
- Pages and API routes requested
- Actions taken in the console, with the time
How long we keep it: Security logs are kept for at least one year, then deleted.
Basis: a legitimate use allowed by the DPDP Act, not consent. You can still ask about it or complain to us.
Product news and DPDP updates (optional)Optional
We send occasional emails about new OptProof features and changes to the DPDP Rules.
What it lets you do: Keeps you informed about new features and changes that may affect your business.
Data we use:
- Name
- Email address
- Topics you choose
How long we keep it: 2 years, then we delete it.
Where your data is stored
Our database, files and backups are stored in India, in AWS Mumbai (ap-south-1). Backups stay in the same region. Email is the exception: the emails we send you, and the ones you send to our addresses, pass through our email provider, Hostinger, which stores mailboxes and their backups in the European Union (France or Germany). The organisations that help us run OptProof are listed below and on our sub-processors page.
- Amazon Web Services, Mumbai region (hosting, storage, encryption keys and backups), India
- Hostinger (email delivery and our mailboxes), European Union (France or Germany)
- Anthropic (AI drafting, with personal identifiers removed first), Outside India
- Razorpay (payments, once online payments are switched on), India
Some features use an AI model from Anthropic to draft text, such as notice translations. Before anything is sent to the model, we remove names, phone numbers and email addresses. Anthropic processes that redacted text outside India. A person reviews every draft before it is used.
Withdrawing consent
You can withdraw your consent at any time, as easily as you gave it. Open our privacy preference centre and switch off any purpose. Withdrawing does not affect what we did before you withdrew.
Open the OptProof preference centre. Every optional purpose has its own switch, and there is one action to withdraw everything. Every email we send for an optional purpose also has a one-click unsubscribe link.
Your rights
You can ask to see a summary of your data, correct or update it, delete it, nominate someone to act for you, or raise a complaint with us. Use our rights portal to make a request.
Make a request through our rights portal. You will get a reference number, and we will reply by the due date shown there.
Complaints
Write to our grievance officer first: Arjun Raj, grievance@optproof.in.
If you are not happy with how we handled your complaint, you can complain to the Data Protection Board of India. Please contact us first so we can try to fix it.
Children
OptProof is a service for businesses. We do not knowingly collect personal data from anyone under 18. If you think a child has given us their details, tell us and we will delete them.
Contact
OptProof privacy desk (Arjun Raj, trading as Digital Architect): privacy@optproof.in. No 2 & 03, Ashrivadam, Opposite 5th Cross, Sidedahalli, near NMH Convention Hall, Bengaluru, Bengaluru Urban, Karnataka 560073, India.
Changes to this notice
If we change how we use your data, we will update this page and the date at the top. If a change affects an optional purpose you agreed to, we will ask you again.