DPDP Act, 2023 Compliant

Privacy Policy & Statutory Data Governance Notice

Effective Date: September 25, 2026 | Version 2.4 (Enterprise Edition)

Sovereign Indian Cloud Storage

This Privacy Policy is published in accordance with the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act 2023), the Information Technology Act, 2000, and the Central Goods and Services Tax Act, 2017 (CGST Act Sec 36). It governs the collection, processing, master archival, and data principal rights for all visitors and registered clients of Label Invoice (labelinvoice.com).

1. Identification of Data Fiduciary & DPO

Under the Digital Personal Data Protection Act, 2023, the Data Fiduciary responsible for determining the purpose and means of processing personal data on this platform is:

Data Fiduciary Entity:	Label Invoice (Operated by techowish.com)
Jurisdiction & Localization:	Republic of India \| Primary In-Country Indian Cloud Data Centers
Designated Data Protection Officer (DPO):	techowish.com@gmail.com
Grievance Redressal SLA:	Statutory acknowledgment within 24 hours; resolution within 72 business hours

2. Processing Roles: Data Fiduciary vs. Automated Data Processor

Account Metadata (Data Fiduciary): For registered users, we act as a Data Fiduciary for identity data (name, email, phone, business name, GSTIN, PAN, and payment transaction logs) collected to create and administer your account.
Document Processing (Automated Data Processor): When you upload marketplace shipping labels (Amazon, Flipkart, Meesho, Myntra, etc.), you represent that you are an authorized seller/merchant with lawful authority to process customer order slips. Label Invoice operates as an automated algorithmic processor to extract barcodes, crop margins, and generate thermal roll layouts without human interception or data profiling.

3. Personal & Operational Data We Collect

We collect the following categories of data in strict compliance with Section 5 of the DPDP Act 2023:

A. Account & Business Data

Full Name, Registered Email Address & Contact Number
Company Name, Trade Name, GSTIN & PAN
Hardware Printing Preferences (Thermal 4x6 vs A4 layouts)
Subscription Tier & Daily Crop Quota Status

B. Uploaded Document Metadata

File name, file size, label count, and batch processing time
Platform detected (Amazon, Flipkart, Meesho, Myntra, etc.)
Courier carrier identifier (Delhivery, BlueDart, Ekart, etc.)
Cryptographic SHA-256 integrity checksums

4. Purpose & Statutory Basis of Processing (DPDP Act Sec 5, 6 & 7)

We process your data strictly for legitimate operational purposes:

Execution of Contracted Service: To perform automated layout cropping, invoice separation, SKU overlay, and PDF collation requested by you.
Statutory Tax Compliance: Generating tax-compliant invoices and receipts for paid subscriptions via authorized payment gateways (Razorpay).
Security & Abuse Prevention: To prevent denial-of-service attacks, rate-limit malicious traffic, and protect server integrity.

5. Dual-Tier Data Retention: Master Server Legal Hold vs. Portal Privacy

Mandatory Statutory Archival Hold Notice (CGST Act 2017 Sec 36)

Server Hard Drive Master Retention: In compliance with Section 36 of the Central Goods and Services Tax (CGST) Act, 2017, Section 128 of the Companies Act, 2013, and DPDP Act 2023 Section 8(7) & Section 12(3) (statutory retention mandates), all uploaded commercial dispatch documents, shipping manifests, and crop usage logs are permanently preserved in the server master compliance vault within sovereign Indian infrastructure.

Client Workspace Shield: Clients retain the self-service right to de-link and clear their active dashboard history at any time. When cleared, batches are hidden from the active user interface while remaining permanently sequestered on disk for tax audit compliance.

6. Data Principal Rights Under DPDP Act, 2023

Label Invoice provides self-service automated tools to exercise your statutory rights:

Statutory Right	DPDP Act Section	How You Can Exercise on Label Invoice
Right to Access & Data Portability	Section 11	Instant one-click Full Data Export (.ZIP) in your Profile containing complete JSON and CSV dumps of profile, preferences, batch logs, and billing.
Right to Correction & Updating	Section 12(1)	Update personal profile, GSTIN, business name, or printer preferences anytime in Profile Settings.
Right to Erasure & Anonymization	Section 12(2) & 12(3)	Self-service Account Erasure immediately anonymizes your name, email, phone, and credentials, revokes sessions, and issues a cryptographic Certificate of Erasure & Statutory Archival Sequestration.
Right to Grievance Redressal	Section 13	Direct grievance submission to our DPO at techowish.com@gmail.com with guaranteed acknowledgment within 24 hours.

7. Cookies & Analytical Technologies

We use essential cookies to maintain user authentication sessions, remember printer layout choices, and preserve security tokens (CSRF). Anonymous aggregated performance analytics may be processed to optimize server load across Indian logistics peaks (e.g. festive sales). No third-party behavioral profiling or cross-site tracking cookies are deployed without user notification.

8. Grievance Redressal & Data Protection Board Escalation

If you have questions, statutory compliance inquiries, or feel your data principal rights were not addressed satisfactorily, please contact our DPO:

Data Protection Officer: Compliance & Legal Cell
Email: techowish.com@gmail.com
Website: https://labelinvoice.com
Jurisdiction: Republic of India

Under Section 13(4) of the DPDP Act 2023, if you are not satisfied with the resolution provided by our Data Protection Officer, you have the right to register a complaint with the Data Protection Board of India.