Privacy Policy

Last Updated: February 2026

CorpDesk ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our compliance management platform.

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, phone number, and password when you create an account
  • Company Information: Company name, CIN/LLPIN, PAN, GST numbers, registered address, and director details
  • Documents: Compliance documents, certificates, and filings you upload to our platform
  • Payment Information: Billing details processed through our payment providers (Razorpay)

Information Collected Automatically

  • Usage Data: Pages visited, features used, and actions taken within the platform
  • Device Information: Browser type, operating system, IP address, and device identifiers
  • Cookies: Session cookies and analytics cookies (see our Cookie Policy)

2. How We Use Your Information

We use your information to:

  • Provide and maintain our compliance tracking services
  • Send compliance reminders and notifications
  • Process payments and manage subscriptions
  • Improve our platform and develop new features
  • Communicate with you about updates and support
  • Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information with:

  • Service Providers: Cloud hosting (Vercel, Supabase), payment processing (Razorpay), email services (Resend)
  • Government APIs: MCA, GST portals for verification purposes (with your consent)
  • Legal Requirements: When required by law or to protect our rights

4. Data Security

We implement industry-standard security measures including:

  • Encryption of data in transit (TLS) and at rest
  • Secure cloud infrastructure with SOC 2 compliant providers
  • Regular security audits and vulnerability assessments
  • Access controls and audit logging

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion:

  • Personal data is deleted within 30 days
  • Company compliance records may be retained for 8 years as required by Indian law
  • Anonymized analytics data may be retained indefinitely

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data in a portable format
  • Opt-out of marketing communications

7. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or platform notification.

9. Contact Us

For privacy-related inquiries:

  • Email: privacy@corpdesk.in
  • Address: Bengaluru, Karnataka, India

10. Grievance Officer

In accordance with the Information Technology Act, 2000:

  • Name: Privacy Team
  • Email: grievance@corpdesk.in