Privacy Notice
Version 2026-10-11.2. Issued under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Digi Karya ("Digi Karya", "we") runs Digi Karya, an app that helps contractors manage compliance documents, contracts, tenders and payments. For the personal data described here we are the Data Fiduciary: we decide why and how it is processed.
We process your personal data only with your consent, which you give when you sign up or when the app asks you, and only for the purposes below. You can withdraw it at any time.
What we collect and why
Your account
| Personal data | Why we use it |
|---|---|
| Your name, email address and password (stored only as a one-way hash) | To create your account, sign you in and keep it secure |
| Your name, email and account ID from Google or Facebook, if you sign in with them | To sign you in. We do not use or keep their access tokens |
| Your mobile number, only if you tick the box agreeing to sales calls | To call you about Digi Karya plans, features and offers. This is optional and separate from using the app. Turn it off at any time in Privacy settings and we delete the number |
| Your nominee's name, email and relationship, if you add one | So that person can exercise your rights if you die or become unable to |
Your business records
| Personal data | Why we use it |
|---|---|
| Documents you upload (licences, registrations, certificates, insurance, DSCs), which may contain PAN, GSTIN, Udyam or Aadhaar numbers, addresses and signatures | To store them for you and remind you before they expire |
| Contracts, milestones, payments, tenders, bids, deposits, bank guarantees and GST filing details you enter | To track your work and payments, send deadline reminders and produce reports and exports |
If you add information about other people, such as team members, clients or staff named in your documents, please make sure you are allowed to share it with us.
Who we share it with
We never sell your data or let others advertise to you with it. We share it only with these companies, which process it on our behalf and only for the job listed, and with a marketplace service provider when you place an order with them. Some of these companies may store data outside India.
- Amazon Web Services: Hosts the application, its database and the files you upload (servers in Sydney, Australia)
- Resend: Sends reminder, tender alert, invitation and order emails
- Razorpay: Processes payments and holds service providers' bank details
- Google and Facebook: Sign-in, only if you choose to use them
We may also disclose data where Indian law requires it, for example to tax authorities or under a court order.
Cookies
We use only the cookies needed to keep you signed in. Display preferences such as dark mode are saved in your browser. We use no advertising or tracking cookies: usage statistics are counted without cookies, and visitors who aren't signed in can't be recognised from one day to the next.
How long we keep it
- Your account and business records: for as long as your account exists.
- When you delete your account, we delete them straight away. Uploaded files are removed from storage within a day.
- Paid registration and marketplace order records: 8 years, because tax and company law require it. We keep them without your name and delete them afterwards.
- Your mobile number for sales calls: until you turn sales calls off, when we delete it.
- Records of your consent: for as long as your account exists.
- Security logs, such as staff access to files: one year.
Your rights
You can use these from Privacy in the app menu, or by writing to our grievance officer.
- Access: get a summary and a full copy of the personal data we hold about you.
- Correction and erasure: correct, complete or update your data, or have it deleted.
- Withdraw consent: as easily as you gave it. Turn off sales calls from Privacy settings, or withdraw all consent by deleting your account. This does not affect processing that happened before.
- Nominate: name someone to exercise these rights if you die or can no longer act for yourself.
- Grievance redressal: we answer complaints within 90 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Children
Digi Karya is for people aged 18 and over. We do not knowingly process children's personal data. If you think a child has signed up, contact us and we will delete the account.
Security and breaches
Data is encrypted in transit, files are stored privately and served only to people allowed to see them, and staff access is limited, protected by two-factor sign-in and logged. If a breach affects your data, we will tell you and the Data Protection Board without delay, as the law requires.
Contact our grievance officer
Digi Karya
Email: support@digikarya.com
Signed-in users can also raise a request from Privacy settings.
Language and changes
This notice is in English. Ask our grievance officer for it in any language listed in the Eighth Schedule to the Constitution of India. If we change it in a way that matters, we will ask for your consent again.