Legal
Privacy Policy
Last updated: June 8, 2026
1. Scope
NetaGraph Data Systems ("NetaGraph", "we") operates a B2B and B2G civic intelligence platform. This policy describes how we handle data submitted by enterprise users, API consumers, and citizen signals routed through partner applications.
2. Data we collect
- Account data — name, work email, organization and role for workspace users.
- API telemetry — request metadata, latency, status codes and rate-limit counters.
- Civic signals — geo-tagged, time-stamped reports from citizen partner apps. Personal identifiers are hashed before they enter our analytics pipeline.
- Billing — limited to invoicing details; payment instruments are tokenised by our PSP.
3. How we use data
We use the above strictly to deliver the contracted services: serving API responses, generating analytics, maintaining service reliability, billing, and complying with applicable laws. We do not sell personal data.
4. Lawful basis & DPDP compliance
Processing relies on contractual necessity (enterprise customers), consent (citizen signals captured by partner apps), and legitimate interest (security, fraud prevention). We operate as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 and offer DPA addenda for enterprise customers on request.
5. Sharing
Data is shared only with sub-processors strictly required to operate the platform (cloud hosting, observability, PSP). A current sub-processor list is available on request to privacy@netagraph.in.
6. Retention
Account and billing data are retained for the duration of the contract plus 7 years for statutory compliance. Civic signals are retained for the operational window agreed with the originating partner; aggregated derivatives are retained indefinitely.
7. Your rights
Data principals may exercise access, correction, erasure and grievance rights via privacy@netagraph.in. We respond within 30 days as required by DPDP.
8. Security
Data is encrypted in transit (TLS 1.3) and at rest. Access is gated by SSO and role-based controls, with audit logs retained for a minimum of 12 months.
9. Changes
Material changes are notified to active customers at least 30 days in advance via workspace banner and email.
10. Contact
NetaGraph Data Systems · Grievance Officer · privacy@netagraph.in