DPDP ACT 2023 & DATA PRIVACY COMPLIANCE

Privacy & Data Protection Policy.

Effective Date: January 1, 2026 • Last Updated: September 16, 2026.

Zero Ad-Data Sale

We never sell, trade, or rent personal or corporate data to third-party ad brokers.

AES-256 Encryption

All corporate tax credentials, PANs, GSTINs, and API tokens are encrypted at rest.

DPDP Rights

Full rights to request access, correction, or deletion of your personal data records.

1. Information We Collect

Rishal Babu & Co. collects information required to deliver B2B supply chain matching, 3D WebGL metaverse rendering, tax compliance, and customer support:

A. Account & Contact Information

Full name, official corporate email address, phone number, company name, designation, and physical business address.

B. Statutory Tax & Financial Identifiers

Goods and Services Tax Identification Number (GSTIN), Permanent Account Number (PAN), bank settlement account details, and registered corporate address for E-Invoicing.

C. 2M Pixel World Customization Data

Brand logos, destination website URLs, custom 3D skyscraper mesh configurations, category tags, public brand descriptions, and pixel location coordinates ($X, Y$).

D. Device & Usage Telemetry

IP address, browser type, device specifications, WebGL GPU renderer capabilities, session duration, and interactive canvas zoom/pan telemetry.

2. Purpose of Data Processing

We process your personal and business data strictly for legitimate operational purposes:

  • To allocate, render, and maintain your brand plot on the 2,000,000 interactive pixel map and 3D WebGL metaverse.
  • To verify vendor identity, issue compliant GST Tax Invoices, and execute bank settlements.
  • To prevent fraudulent payments, illegal content uploads, or unauthorized account access.
  • To communicate order status updates, dispatch milestones, and security notices.

3. Data Protection & Third-Party Disclosure

We implement industry-standard administrative, physical, and technical safeguards (TLS 1.3 encryption in transit, AES-256 encryption at rest).

We disclose data only to trusted service providers essential for platform operations:

  • Payment Processors: Cashfree / Stripe (PCI-DSS Level 1 certified) for processing transaction charges.
  • Cloud Infrastructure: Vercel and AWS India regions for secure cloud hosting and database storage.
  • Statutory Authorities: Income Tax Department / GST Authorities when legally mandated for tax reporting.

4. Data Retention & DPDP Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP), Indian citizens and global users enjoy specific data rights:

  • Right to Access & Summary: Request a copy of all personal data held by us.
  • Right to Correction & Erasure: Request correction of inaccurate data or deletion of personal data (excluding statutory financial transaction records retained for 7 years under Indian tax laws).
  • Grievance Redressal: Right to seek redressal of privacy concerns through our Data Protection Officer.

5. Data Protection Officer (DPO) Contact Details

If you have questions, privacy requests, or complaints regarding your personal data, contact our designated Data Protection Officer:

Data Protection Officer / Privacy Desk

Rishal Babu & Co.

G12 Surya Hillview Apartments, Vidya Nagar, Cantonment, Ballari, Karnataka 583104, India

Email: privacy@rishalbabu.com / hello@rishalbabu.com

Telephone: +91 94918 43434

Want to request a data copy or account deletion?

Send your request directly to privacy@rishalbabu.com.

Submit Privacy Request