DPDP Compliance
Last updated: 2026-09-11
Our Commitment
VigyanLLM Private Limited ("VigyanLLM", "we", "us") is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules thereunder. This page describes how we collect, process, store, and protect your data, and explains your rights under the DPDP Act.
We act as a Data Fiduciary for the personal data described below. We process data only for the purposes described in this notice, and we implement reasonable security safeguards to protect your data.
Data We Collect
We collect the following categories of personal data to operate our bioinformatics platform:
| Data Type | Purpose | Retention Period |
|---|---|---|
| Account Data Name, email, authentication credentials | Account creation, authentication, session management | Duration of account + 30 days after deletion request |
| Sequence Data DNA/RNA sequences, primer designs, docking inputs | Processing bioinformatics analyses, storing results in your dashboard | Duration of account; deleted on account closure |
| Payment Data Razorpay order IDs, subscription status | Payment processing, subscription management | 7 years (Indian tax law compliance) |
| Usage Logs IP address, browser, timestamps, API calls | Security monitoring, abuse prevention, service improvement | 90 days, then auto-deleted |
| Consent Records Cookie consent, communication preferences | Demonstrating DPDP compliance | 365 days |
| Anonymous Usage Daily tool usage counts (unauthenticated) | Rate limiting for anonymous visitors | 7 days |
Your Rights Under the DPDP Act
As a data principal, you have the following rights:
- Right to Access. You may request a summary of the personal data we hold about you, including the purposes of processing and any third parties with whom data has been shared.
- Right to Correction. You may request that we correct any inaccurate or incomplete personal data. You can update your account details directly from your dashboard.
- Right to Erasure. You may request deletion of your account and all associated personal data. We will process your request within 30 days, subject to any legal retention obligations.
- Right to Data Portability. You may request a machine-readable export of your sequence designs and account metadata in a structured, commonly used format.
- Right to Grievance Redressal. You may file a complaint regarding the processing of your personal data. We will acknowledge your complaint within 72 hours and aim to resolve it within 30 days.
How to Exercise Your Rights
You can exercise any of the above rights by:
- Self-service: Visit /account-deletion to request account deletion directly.
- Email: Send a request to contact@vigyanllm.in with subject line "DPDP Data Request — [Your Name]".
- Dashboard: Update your profile and export your data from the /dashboard page.
We will verify your identity before processing any request. We respond to all verified requests within 30 days.
Cookie Categories
We use the following categories of cookies on our platform:
| Category | Purpose | Consent Required |
|---|---|---|
| Necessary | Authentication (pf_token), session, CSRF protection | No — strictly necessary for service operation |
| Analytics | Google Analytics 4, Microsoft Clarity, usage statistics | Yes — loaded only after explicit consent |
| Marketing | Google Ads remarketing, conversion tracking | Yes — loaded only after explicit consent |
Data Security
We implement the following safeguards to protect your personal data:
- All data in transit is encrypted with TLS 1.2 or higher.
- Data at rest is stored in encrypted database volumes with AES-256 encryption.
- Authentication credentials are stored as salted bcrypt hashes — we never store plaintext passwords.
- Production database access is restricted to authenticated personnel with role-based permissions.
- All production access is logged for audit purposes.
- Automated data retention cleanup runs on a daily schedule.
Data Transfers
VigyanLLM is hosted on infrastructure located in the Asia-Pacific region. If you access our service from outside India, your data may be transferred to and processed in India. We ensure that any such transfer is protected by appropriate safeguards as required under the DPDP Act.
Third-Party Data Sharing
We share personal data with the following categories of third parties only as necessary to provide our service:
- Razorpay — payment processing (PCI-DSS Level 1 compliant). We do not share card numbers, CVV codes, or banking credentials.
- Google (OAuth) — optional social login. We receive only the email address and profile information you authorise.
- NCBI (NIH) — sequence lookup and BLAST operations. No personally identifiable information is transmitted.
- Amazon Web Services (AWS) — hosting, CDN (CloudFront), and content delivery. Technical logs only, no personal data.
We do not sell, rent, or license your personal data to any third party for marketing purposes.
Children's Data
VigyanLLM is a professional bioinformatics platform intended for researchers and students aged 18 and above. We do not knowingly collect personal data from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly.
Grievance Officer
In accordance with the DPDP Act, 2023, and the Information Technology Act, 2000, the name and contact details of our Grievance Officer are provided below:
Grievance Officer
VigyanLLM Private Limited
Email: contact@vigyanllm.in
Response time: We will acknowledge your complaint within 72 hours and aim to resolve it within 30 days.
Changes to This Policy
We may update this DPDP compliance page from time to time. Any material changes will be communicated via email to registered users and posted on this page with an updated "Last updated" date.
Contact
For questions about this DPDP compliance page, to exercise your data rights, or to file a complaint, please contact us at contact@vigyanllm.in.