Privacy Policy

Section 01

Data We Process

AuditWeave acts as a Data Fiduciary for user accounts and a Data Processor for uploaded privacy policies. We collect:

• Account credentials (email address and encrypted password hash) for secure access.
• Temporary privacy notice texts, URLs, or documents uploaded for GRC audits.
• System interaction metadata stored inside secure GRC compliance logs.

Section 02

Purpose & Notice of Collection

DPDP Act 2023 · Section 5

User details are processed exclusively to authenticate accounts and audit uploaded policy texts against statutory compliance rules. Uploaded privacy policies are parsed inside transient memory and deleted permanently from analysis workers once report compilations are completed. We do not sell, monetize, or utilize uploaded policy contents for training third-party models.

Section 03

Data Principal Rights

DPDP Act 2023 · Sections 11 & 12

In accordance with the DPDP Act 2023, you have:

• The right to access a summary of your personal data processed on the platform.
• The right to correct inaccurate or obsolete profile information.
• The right to request erasure of your user credentials and past audit histories at any time.

Section 04

Grievance Redressal

DPDP Act 2023 · Section 13

For complaints, rights exercise queries, or data issues, please contact our designated Nodal Grievance Redressal Officer: