Privacy Policy & DPDP Act 2023 Statutory Notice • Publyst

1. Introduction & Statutory Data Fiduciary Status

Dasgupta Technologies ("We", "Us", or "Our"), operating the autonomous social publishing software Publyst (accessible via https://publyst.tech, Telegram bot @PublystBot, and APIs), functions strictly as a Data Fiduciary under Section 2(i) of the Digital Personal Data Protection (DPDP) Act, 2023 (Republic of India).

This Statutory Privacy Notice satisfies our obligations under Section 6 of the DPDP Act 2023, informing you (the Data Principal) of the personal data collected, specific processing purposes, third-party processors, ephemeral media lifecycle, and your legal rights.

2. Section 6 Statutory Itemized Notice of Data Processing

Under Section 6(1) of the DPDP Act 2023, consent must be preceded by an itemized notice. We process only the minimum personal data strictly necessary to deliver authorized social media publishing:

Data Item	Specific Lawful Purpose	Retention Period
Telegram Chat ID	Authenticating bot sessions & dispatching post approval cards	Retained until account deletion
Brand Profile & Contact	Generating localized copy, booking CTAs, and regional language adaptation	Retained until updated or deleted
Social OAuth Tokens	Publishing authorized media to Meta (Instagram, FB) & YouTube	Encrypted at rest (AES-256-GCM); purged on disconnect
Raw Media (Images/Video)	Ephemeral visual sentiment analysis & instant platform dispatch	Zero Permanent Storage: Purged from RAM within 120s
Billing & GST Details	Payment processing via Razorpay & issuing GST tax invoices	7 Years (Statutory Indian CGST Act Rule 46 compliance)

        ⚖️ Right to Withdraw Consent (Section 6(4)): You have the absolute right to withdraw consent at any time with the same ease with which it was given. Send /delete_data inside the Telegram bot or click "Purge Data" in your Brand Hub dashboard. Processing will cease immediately, and all tokens will be permanently wiped.
      

3. Ephemeral Media Buffering & Zero Retention Protocol (Section 8)

Under Section 8(7) of the DPDP Act 2023, personal data must be erased as soon as the specified purpose is fulfilled.

Publyst enforces an immutable Zero Permanent Storage Protocol for visual media:

Images and video files transmitted via chat are streamed directly into ephemeral, encrypted in-memory buffers.
Multimodal vision models analyze the content in real time to generate captions and hashtags.
Immediately upon dispatch to Instagram, Facebook, or YouTube (or upon user cancellation), the raw media buffer is overwritten and wiped from server memory.
Publyst does NOT build training datasets, maintain public galleries, or store archives of your client photos.

4. Protection of Minors & Children (DPDP Section 9)

In accordance with Section 9 of the DPDP Act 2023:

No Onboarding of Children: Publyst is an enterprise social management tool intended strictly for registered businesses and creators aged 18 years or older. Individuals under 18 years of age are prohibited from creating accounts.
No Behavioral Tracking of Children: Publyst does NOT track, profile, or deliver targeted advertising to minors.
Automated Vision Sentinels: Our multimodal vision pipeline incorporates an automated safety guardrail that detects unaccompanied minors or infants. Content flagged as non-compliant is refused and immediately purged from memory.

5. Statutory Rights of Data Principals (Sections 11–13)

As a Data Principal under Indian law, you are legally entitled to:

Right to Summary (Section 11): Obtain a summary of personal data being processed by sending /my_data to our Telegram bot or visiting /dashboard.
Right to Correction & Updating (Section 12): Update your business name, contact phone, or location directly in the Brand Hub.
Right to Erasure (Section 12): Request permanent erasure of all stored profile records, OAuth tokens, and historical drafts.
Right of Grievance Redressal (Section 13): Access prompt redressal of data protection concerns through our designated statutory Grievance Officer.
Right to Nominate: Nominate another individual to exercise your data rights in the event of death or incapacity.

6. Statutory Grievance Redressal Officer (GRO) & Dispute Escalation

Pursuant to Section 13 of the DPDP Act 2023, Dasgupta Technologies has appointed a designated Grievance Redressal Officer:

Grievance Redressal Officer: Debasish Dasgupta
Designation: Head of Compliance & Data Protection
Entity: Dasgupta Technologies
Statutory Compliance Email: grievance@publyst.tech
Operational Support: support@publyst.tech
Direct Telephone / WhatsApp: +91 92316 75661
Registered Physical Address: Kolkata, West Bengal 700001, India

        ⏱️ Statutory Resolution Timelines:
        
• Formal acknowledgment with unique ticket UUID: Within 24 hours.
        
• Preliminary evaluation & remediation: Within 7 business days.
        
• Final statutory closure: Within 30 calendar days.
        
        Appeal to Data Protection Board of India (DPBI): If you do not receive a resolution within statutory timelines, or are dissatisfied with the outcome, you have the statutory right under Section 13(4) to register an appeal with the Data Protection Board of India.

7. Payment Compliance & 7-Day Money-Back Guarantee

All commercial transactions are processed through RBI-authorized payment aggregator Razorpay Software Private Limited under strict PCI-DSS SAQ A guidelines. Publyst does not store raw credit/debit card numbers or UPI PINs.

In accordance with our customer commitment, all initial subscription payments carry a 100% 7-Day Money-Back Guarantee. For full details, refer to our Refund & Cancellation Policy.