Privacy Policy
Effective Date: February 1, 2026 · Last Updated: March 2026 · Jurisdiction: Republic of India
As a platform dedicated to Indian data protection and AI governance, Sutra Check practices strict data minimization under the Digital Personal Data Protection Act (DPDPA), 2023 (Act No. 22 of 2023).
Our interactive Risk Classifier and Grievance Policy Generator execute 100% client-side in your web browser. We never store, log, or transmit your proprietary AI system configurations, prompt metadata, or draft policies to our backend servers.
01.Identity of the Data Fiduciary
Under Section 2(i) of the DPDPA 2023, Sutra Check operates as the Data Fiduciary regarding data collected through the website (https://sutracheck.in).
For any queries or formal communications regarding personal data processing, you may reach our designated Data Protection & Grievance Desk at privacy@sutracheck.in.
02.Zero-Retention Client-Side Processing
The core interactive compliance engines on this site:
- 5-Minute Branching Risk & Mandate Classifier: Processes user-selected radio buttons and deployment options purely in local browser memory. No inputs are transmitted or recorded.
- CPA 2019 AI Grievance Policy Generator: Dynamically compiles custom legal Markdown/text directly inside your browser’s JavaScript engine. Generated documents reside only in your device's memory until you copy or download them.
- Ed-Tech & RBI Lineage Checkers: Local DOM state management with zero telemetry.
03.Personal Data We May Collect
We collect personal data only when you affirmatively provide it to us:
When you submit an inquiry via our Contact Form or email us, we collect your name, email address, organization name, and the text of your communication to resolve your request.
Like any standard web service, our servers automatically log basic HTTP header information (IP address, user agent, requested URL, timestamp) for security monitoring, DDoS prevention, and site uptime verification.
04.Lawful Basis of Processing under DPDPA 2023
We process personal data solely on lawful grounds established under the Act:
- Consent (Sections 4 & 6): For voluntary contact submissions, where consent is explicitly collected prior to transmission.
- Certain Legitimate Uses (Section 7): For essential server logging required to maintain cybersecurity, detect fraud, and ensure network resilience.
05.Cookies & Local Storage Policy
Sutra Check believes in a clean, tracker-free web experience:
- No Tracking Cookies: We do NOT use third-party behavioral advertising cookies, Meta pixels, or invasive session recorders.
- Functional Local Storage: We use your browser's
localStorageexclusively to preserve functional client preferences across visits: your theme preference (theme: 'dark' | 'light', toggled via the sun/moon icon button in the top navigation bar) and temporary local assessment restores. No personal identifiers or analytics telemetry are stored.
06.Rights of Data Principals
In accordance with Chapter III of the DPDPA 2023, you have the following enforceable rights regarding your personal data:
Obtain a summary of personal data held and identities of third parties with whom data was shared.
Request rectification of inaccurate personal data or erasure of data no longer necessary.
Register grievances with our designated Grievance Officer and escalate to the Data Protection Board of India.
Designate another individual to exercise your rights in event of death or incapacity.
Designated Grievance Officer (DPDPA 2023 & IT Rules 2021)
In compliance with Section 8(9) of the Digital Personal Data Protection Act 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, our designated officer is:
If your grievance is not resolved to your satisfaction within the statutory timeframe, you have the right to register a complaint with the Data Protection Board of India.
07.Amendments to this Policy
As MeitY, the Ministry of Law & Justice, and the Data Protection Board issue subsequent rules, circulars, and gazettes, this policy will be amended to maintain continuous statutory harmonization. Updates are reflected with the revision timestamp at the top of this page.