Privacy Policy

This Privacy Policy explains how Decipher Consultancy Services ("we", "us", "our"), operating the Dpublish CMS platform at www.dpublish.in, collects, uses, stores, and protects your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian laws.

business 1. Data Fiduciary Information

Under the DPDP Act, 2023, we act as a Data Fiduciary responsible for determining the purpose and means of processing your personal data.

Entity: Decipher Consultancy Services
Address: Block C, Sushant Lok III, Sector 57, Gurugram, Haryana - 122003, India
Email: info@decipherconsultancy.in

database 2. Personal Data We Collect

We collect the following categories of personal data depending on your interaction with our platform:

Category	Data Collected	Source
Identity Data	Full name, business name, designation	Contact form, demo booking, onboarding
Contact Data	Email address, phone number, office address	Contact form, account registration
Account Data	Login credentials (encrypted), role, permissions	CMS account creation
Usage Data	Pages visited, features used, session duration, IP address	Automatic collection via analytics
Technical Data	Browser type, device info, operating system	Automatic collection
Payment Data	Billing address, GST number, transaction records	Subscription and invoicing
Content Data	Articles, images, media uploaded to the CMS	Publisher's editorial workflow
Communication Data	Emails, chat transcripts, support tickets	Customer interactions

task_alt 3. Purpose of Data Processing

We process your personal data only for the following specified and lawful purposes as required under Section 4 of the DPDP Act:

• To provide, operate, and maintain the Dpublish CMS platform and its features
• To process demo requests, enquiries, and contact form submissions
• To create and manage your CMS account and subscription
• To process payments, generate invoices, and maintain billing records
• To provide customer support and resolve technical issues
• To send service-related communications (downtime alerts, feature updates, billing reminders)
• To improve our platform through aggregated, anonymised usage analytics
• To comply with legal obligations, including tax and accounting requirements
• To prevent fraud, unauthorised access, and ensure platform security

how_to_reg 4. Consent

In compliance with Section 6 of the DPDP Act, 2023, we obtain your free, specific, informed, unconditional, and unambiguous consent before processing your personal data.

How we obtain consent:

• Contact forms: Explicit consent checkbox with a clear privacy notice before submission
• Account creation: Acceptance of terms and privacy policy during onboarding
• Cookies: Cookie consent banner on first visit with option to accept or reject non-essential cookies

Withdrawal of consent: You may withdraw your consent at any time by emailing info@decipherconsultancy.in. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Upon withdrawal, we will cease processing your data and delete it within 30 days, unless retention is required by law.

shield 5. Data Storage & Security

We implement reasonable security safeguards as required under Section 8 of the DPDP Act to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

• Encryption: All data transmitted via TLS/SSL encryption. Passwords are hashed using bcrypt
• Infrastructure: Hosted on AWS (Amazon Web Services) with data centres in India (Mumbai region)
• Access control: Role-based access with multi-factor authentication for admin accounts
• Backups: Daily automated backups with encrypted storage
• Monitoring: 24/7 server monitoring and intrusion detection
• Audits: Periodic security reviews and vulnerability assessments

schedule 6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, as required under Section 8(7) of the DPDP Act.

Data Type	Retention Period	After Retention
Contact form submissions	90 days	Securely deleted
CMS account data	Duration of subscription + 30 days	Deleted or anonymised
Publisher content	Duration of subscription + 30 days for migration	Deleted upon request
Payment & billing records	8 years (as per Income Tax Act, GST laws)	Securely archived then deleted
Usage analytics	24 months (aggregated/anonymised)	Auto-purged
Support tickets	12 months after resolution	Securely deleted

share 7. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share data with the following categories of recipients only to the extent necessary:

• Cloud hosting provider: Amazon Web Services (AWS) - for platform infrastructure and data storage
• Email service provider: Brevo (formerly Sendinblue) - for transactional and service emails
• Analytics: Google Analytics - for aggregated, anonymised website usage insights
• Payment processors: For secure payment processing (we do not store card details)
• Legal authorities: When required by law, court order, or government regulation

All third-party service providers are contractually obligated to protect your data and process it only for the specified purposes.

public 8. Cross-Border Data Transfers

In accordance with Section 16 of the DPDP Act, your personal data is primarily stored and processed within India (AWS Mumbai region). Where data is processed outside India (e.g., by third-party service providers), we ensure transfers comply with the DPDP Act and are made only to jurisdictions not restricted by the Central Government.

child_care 9. Children's Data

Dpublish CMS is a B2B platform designed for publishers and media organisations. We do not knowingly collect personal data from individuals under 18 years of age. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at info@decipherconsultancy.in and we will delete such data.

As required under Section 9 of the DPDP Act, we will obtain verifiable consent from a parent or guardian before processing any data of a person under 18 years.

admin_panel_settings 10. Your Rights as a Data Principal

Under the DPDP Act, 2023, you (the "Data Principal") have the following rights:

• Right to Access (Section 11): Request a summary of your personal data being processed and the processing activities
• Right to Correction & Erasure (Section 12): Request correction of inaccurate data, completion of incomplete data, updating of outdated data, or erasure of data no longer necessary
• Right to Grievance Redressal (Section 13): Lodge a complaint with our Grievance Officer or escalate to the Data Protection Board of India
• Right to Nominate (Section 14): Nominate another individual to exercise your rights in the event of your death or incapacity
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, email us at info@decipherconsultancy.in with the subject line "Data Principal Rights Request". We will respond within 30 days.

cookie 11. Cookies

We use cookies and similar technologies to improve your experience. For detailed information, please see our Cookie Policy.

support_agent 12. Grievance Officer

In compliance with Section 13 of the DPDP Act, we have appointed a Grievance Officer whom you may contact for any concerns regarding your personal data:

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.

update 13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify active subscribers via email
• Obtain fresh consent where required under the DPDP Act

Your continued use of the platform after changes constitutes acceptance of the updated policy.