Privacy Policy

1. Who We Are

LicenseGuard ("we", "us", "our") is a SaaS application at licenseguardapp.com, operated by an individual based in India. We help contractors track license and insurance expiry dates and send automated email alerts.

For all privacy matters contact our Grievance Officer — details in Section 11.

2. Information We Collect

We collect only the minimum data needed to deliver the Service:

• Account data: Your name and email address on signup
• Document data: License/insurance names, types, and expiry dates you enter
• Payment data: Handled entirely by Dodo Payments — we never see or store your card details
• Usage logs: Login activity for security purposes only
• Contact messages: Name, email, and message if you contact us

3. Purpose of Collection

As required by the DPDPA 2023, we state the explicit purpose for each data point collected. We use your data solely for:

• Creating and managing your account
• Sending expiry alert emails — the core service
• Processing payments via Dodo Payments
• Responding to support and grievance requests
• Maintaining security and preventing fraud

We do not use your data for advertising, profiling, or selling to third parties.

4. Consent

By creating an account you provide free, informed, specific, and unambiguous consent to the collection and processing of your data as described here, in accordance with the DPDPA 2023.

You may withdraw consent at any time by requesting account deletion. Withdrawal results in termination of the Service for your account.

5. Data Sharing

We share your data only with the following service providers, strictly for operating the Service:

• Supabase — database and authentication (servers in the US)
• Resend — email delivery (processes your email address to deliver alerts)
• Dodo Payments — subscription billing
• Cloudflare — website hosting and CDN (Cloudflare Pages)
• Web3Forms — contact form processing

All providers are bound by data processing agreements and may not use your data for their own purposes.

6. Cross-Border Data Transfer

Your data may be stored and processed outside India by our service providers above. By using the Service you consent to this transfer. We ensure all providers maintain adequate security standards consistent with Indian law requirements.

7. Data Security

We implement reasonable security practices as mandated by the IT (SPDI) Rules, 2011 and DPDPA 2023:

• HTTPS/TLS encryption for all data in transit
• Encryption of data at rest in our database
• Row-level security — users can only access their own data
• Secure authentication with password hashing

8. Your Rights Under Indian Law

Under the DPDPA 2023 and IT Act 2000, you have the right to:

• Access — request a copy of all personal data we hold about you
• Correction — update incorrect data in your dashboard or by contacting us
• Erasure — request permanent deletion of your account and all data
• Withdraw consent — opt out of data processing at any time
• Grievance redressal — file a complaint with our Grievance Officer
• Nominate — nominate another individual to exercise rights on your behalf in case of death or incapacity (DPDPA 2023)

To exercise any right, email: . We respond within 30 days as required by law.

9. Data Retention

We retain your data as long as your account is active. Upon account deletion request, all personal data will be permanently deleted within 30 days.

10. Cookies

We use only essential session cookies required for authentication. No tracking, advertising, or analytics cookies are used.

11. Grievance Officer

As required under the Information Technology Act, 2000 and DPDPA 2023, we have designated a Grievance Officer for data-related complaints:

12. Children's Privacy

LicenseGuard is intended for adults (18+) in a professional context. We do not knowingly collect data from minors. If you believe a minor has provided data to us, contact our Grievance Officer immediately for prompt deletion.

13. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email at least 7 days before changes take effect. Continued use after that period constitutes acceptance.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Information Technology Act 2000, SPDI Rules 2011, and the Digital Personal Data Protection Act 2023. Any disputes shall be subject to the exclusive jurisdiction of competent courts in India.