Privacy Policy

1. Introduction

Dexcy Technologies ("we", "us", "our") operates the OwnDrive platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and other applicable Indian data protection laws. By accessing OwnDrive, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We collect the following categories of personal data:

• checkAccount Data: Full name, email address, phone number, billing address, and bcrypt-hashed password.
• checkUsage Data: IP address, browser type, device information, login times, and access logs.
• checkContent Data: Files you upload are encrypted using AES-256 encryption at rest. We never view raw file contents.
• checkPayment Data: Billing address and transaction IDs only. Raw card numbers are never stored by us—all payment processing is handled by PCI-DSS compliant providers.
• checkSupport Messages: Communications you send to our support team.

3. How We Use Your Data

We use your personal data solely for the following purposes:

• checkOperating, maintaining, and improving the OwnDrive service.
• checkAuthenticating users and verifying account credentials.
• checkSending transactional emails (password resets, receipts, notifications).
• checkDetecting fraud, abuse, and ensuring service security.
• checkComplying with legal and regulatory obligations.

4. Sensitive Personal Data

We do not intentionally collect or request Sensitive Personal Data (SPDI) as defined by the DPDPA 2023. If you upload files containing SPDI, they are processed only for secure storage and transmission. We employ technical and administrative safeguards to prevent unauthorized access.

5. Data Sharing & Third Parties

We do not sell your personal data. We may share your data with:

• checkInfrastructure Providers: Cloud hosting and storage partners under Data Processing Agreements (DPAs).
• checkPayment Processors: Secure payment gateways for billing (PCI-compliant).
• checkLegal Authorities: When required by law or court order.

6. Data Retention

We retain your data as follows:

• checkActive Accounts: Retained throughout your subscription plus 90 days after cancellation.
• checkAccess Logs: Retained for 30 days for security monitoring.
• checkData Deletion: You may request earlier deletion by contacting privacy@dexcy.in.

7. Cookies & Tracking

OwnDrive uses only session cookies for user authentication and session management. We do not use ad tracking, marketing cookies, or cross-domain trackers. Our analytics platform is self-hosted; no data leaves our infrastructure. You can clear cookies at any time via your browser settings.

8. Security

We implement the following security measures:

• checkAES-256 Encryption: All data at rest is encrypted using military-grade AES-256.
• checkTLS 1.3: All data in transit is encrypted using TLS 1.3 or higher.
• checkRole-Based Access Control (RBAC): Internal employees access only necessary data.
• checkIncident Notification: We notify affected users within 72 hours of discovering a breach.

9. Your Rights Under DPDPA 2023

You have the following rights regarding your personal data:

• checkRight to Access: Request a copy of your personal data.
• checkRight to Correct: Request correction of inaccurate data.
• checkRight to Erase: Request deletion of your data subject to legal retention requirements.
• checkRight to Withdraw Consent: Stop data processing by deleting your account.
• checkRight to Grievance Redressal: Contact privacy@dexcy.in. We acknowledge within 24 hours and resolve within 30 days.

10. Children's Privacy

OwnDrive is not intended for children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will promptly delete the account and associated data. If you believe a minor is using OwnDrive, please contact privacy@dexcy.in immediately.

11. Policy Changes

We may update this Privacy Policy from time to time. Material changes will be notified to you via email at least 15 days before taking effect. Continued use of OwnDrive after such notification constitutes acceptance of the updated policy.