Privacy Policy & Data Protection Notice
Effective Date: August 15, 2026 | Compliant with the Digital Personal Data Protection (DPDP) Act 2023 (India), EU/UK GDPR, CCPA/CPRA, and ISO/IEC 27001 standards.
verified_user Quick Summary of Your Data Rights
BhashaTantra Solutions Pvt. Ltd. operates as a Data Fiduciary under Section 2(i) of India's DPDP Act 2023. We collect only what is strictly necessary to deliver cultural translation, business localization, and consultation services. We never sell your personal data, we sanitize all uploaded files to strip metadata/scripts, and we provide complete control to view, correct, or erase your data at any time.
1. Identity of Data Fiduciary
This website and its associated digital localization platforms and services are owned and operated by:
Entity Name: BhashaTantra Solutions Private Limited
Registered Office: Plot No. 104, Tech Innovation Zone, Infocity, Bhubaneswar, Odisha 751024, India
Corporate Identity: Registered under the Companies Act, 2013 (India)
Contact Email:privacy@bhashatantra.com / dpo@bhashatantra.com
2. Personal Data Collected & Purpose Mapping
Under Sections 5 and 6 of the DPDP Act 2023, personal data is processed solely for specific, unbundled purposes with your informed consent:
| Data Category | Specific Data Fields | Processing Purpose | Lawful Basis |
|---|---|---|---|
| Contact & Inquiry | Full name, business email, phone number, organization name | Responding to service inquiries, providing translation estimates, and direct communication | Explicit Consent (Sec 6 DPDP / Art 6(1)(a) GDPR) |
| Consultation Bookings | Name, email, company, preferred date/time slot, meeting agenda | Scheduling video consultations via Google Meet / Zoom and automated reminders | Contractual Necessity (Art 6(1)(b) GDPR) |
| Document Uploads | Uploaded files, documents, and sample text for localization | Translation analysis; files are stripped of EXIF/GPS metadata and sanitized of scripts | Explicit Consent for Service Execution |
| Payment Records | Transaction IDs, order reference, gateway status (Stripe / Razorpay) | Invoicing, tax compliance, and refund dispute resolution (No raw card data stored) | Legal Obligation under Indian Tax & GST Laws |
| Technical Telemetry | IP address, browser type, device type, security session token | DDoS defense, bot prevention, rate limiting, and server security auditing | Legitimate Security Interest (Sec 8 DPDP / Art 6(1)(f) GDPR) |
3. AI Localization & Zero Data Retention (ZDR)
When enterprise clients utilize our AI Translation pipelines and digital localization platforms:
- No Public Model Training: Your confidential source documents and translation memories are never used to train public Large Language Models (LLMs).
- Ephemeral In-Memory Processing: Translation payloads exist only in RAM during model inference and are immediately discarded upon delivery.
- Client Ownership: You retain 100% intellectual property and copyright over all translated deliverables.
4. Your Rights as a Data Principal
Under the DPDP Act 2023 (Sections 11–14) and GDPR (Articles 15–22), you are entitled to exercise the following rights:
visibility Right to Access & Summary
Request a summary of the personal data being processed and the processing activities undertaken.
edit_note Right to Correction & Erasure
Request correction of inaccurate data, completion of incomplete records, or permanent erasure of your personal data.
support_agent Right of Grievance Redressal
Right to have grievances addressed by our designated Grievance Officer within statutory timelines.
person_add Right to Nominate
Nominate another individual to exercise data rights on your behalf in the event of death or incapacity.
To exercise any of these rights, email our Data Protection team at privacy@bhashatantra.com. Requests are verified and processed within 30 days free of charge.
5. Data Retention & Automated Purging
- Session State: Automatically terminated after 120 minutes of idle inactivity.
- Automated Database Backups: Rotated daily and permanently purged after 14 days.
- Cookie Consent Choices: Retained for 180–365 days before prompting re-confirmation.
- Form Inquiries & Consultation Records: Retained for the duration of the active business relationship, or immediately deleted upon verified Right-to-Erasure request.
6. Protection of Children's Personal Data
In strict compliance with Section 9 of the DPDP Act 2023, BhashaTantra does not knowingly collect personal data from individuals under 18 years of age without verifiable parental consent. We do not engage in behavioral monitoring, tracking, or targeted advertising directed at children.
7. Security Safeguards & Breach Notification
We implement industry-grade technical and organizational safeguards under Section 8(5) of the DPDP Act, including TLS 1.3 in-transit encryption, AES-256 data-at-rest encryption, two-factor authentication (2FA), automated SVG sanitization, and cryptographic webhook verification.
8. Grievance Redressal Officer
For any complaints, data access requests, or unresolved privacy concerns, please contact our designated Grievance Officer:
Grievance Officer: Priyabrata Mohanty
Designation: Data Protection Officer & Compliance Lead
Official Email:grievance@bhashatantra.com
Physical Address: BhashaTantra Solutions Pvt. Ltd., Plot No. 104, Infocity, Bhubaneswar, Odisha 751024, India
Resolution Timeline: Acknowledged within 48 hours; resolved within a maximum of 30 days.
Visit our dedicated Grievance Redressal Page for full procedural details.