DPDP Act 2023 compliant. 30-day response. Indian data residency.

This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under the Digital Personal Data Protection Act 2023.

1. Who We Are

Datarsoft Publishing House is a division of Datarsoft Tech Private Limited, an Indian company incorporated under the Companies Act 2013 (CIN: U62091GJ2023PTC145084), with registered office at 311, University Plaza, Navrangpura, Ahmedabad – 380009, Gujarat, India.

2. Data We Collect

We collect the following personal data:

• Account Information: name, email, ORCID iD, institutional affiliation, professional title.
• Manuscript Data: author details, abstracts, manuscript content, supplementary materials, peer review history.
• Financial Data: APC payment information (processed by Razorpay/Stripe; we do not store card details).
• Technical Data: IP address, browser type, device information, session timestamps.
• Usage Data: pages visited, articles read, search queries (analytics).

3. Legal Basis (DPDP Act 2023)

Per the Digital Personal Data Protection Act 2023, we process personal data on the following grounds:

• Consent — where you have explicitly consented (newsletter, marketing).
• Performance of contract — submitting and publishing your manuscript.
• Legal obligation — tax records, KYC, government compliance.
• Legitimate interest — site security, fraud prevention, analytics (anonymized).

4. How We Use Your Data

• To process manuscript submissions, peer review, and publication.
• To deliver editorial communications related to your work.
• To send newsletters and announcements (with your consent).
• To improve our platform and services through analytics.
• To comply with legal, regulatory, and indexing requirements.
• To prevent fraud, abuse, and security incidents.

5. Sharing Your Data

We share personal data with:

• CrossRef — for DOI registration (author names, affiliations, ORCIDs).
• Indexing Services — Google Scholar, BASE, OpenAIRE, Dimensions (published article metadata only).
• Reviewers — anonymized manuscripts to invited reviewers.
• Payment Processors — Razorpay, Stripe, PayPal (for APC processing).
• Hosting & Email — AWS, Cloudflare, SendGrid (technical infrastructure).
• Government Authorities — when required by law.

We do not sell personal data to third parties for marketing purposes.

6. Data Retention

• Published articles and associated author data — permanently (this is the public scholarly record).
• Submission records (rejected/withdrawn) — 7 years for editorial audit purposes, then anonymized.
• Reviewer records — 7 years, then anonymized to preserve aggregate statistics.
• Account data — retained while account is active; deleted on user request.
• Financial data — 8 years per Indian tax and corporate law.
• Analytics data — anonymized after 26 months.

7. Your Rights

Under the DPDP Act 2023, you have the right to:

• Access — request a copy of personal data we hold about you.
• Correction — request correction of inaccurate data.
• Erasure — request deletion of data (subject to legal retention requirements).
• Grievance — file a complaint with the Data Protection Board of India.

To exercise these rights, email privacy@datarsoft.tech with proof of identity. We respond within 30 days.

8. Cookies

See our Cookie Policy for details on tracking technologies.

9. Security

We protect personal data using:

• Encryption in transit (HTTPS/TLS 1.3).
• Encryption at rest (AES-256).
• Role-based access controls.
• Regular security audits.
• Indian data residency for sensitive data (AWS Mumbai region).
• ISO 27001 aligned practices.

10. International Transfers

Some service providers (CrossRef, AWS, indexing databases) operate internationally. Where data is transferred outside India, we ensure equivalent protection per DPDP Act 2023 cross-border transfer rules.

11. Changes to This Policy

We review this policy annually. Material changes are communicated via email to registered users 30 days before they take effect.

12. Contact

For privacy questions, complaints, or data subject rights requests:

• Email: privacy@datarsoft.tech
• Postal: Datarsoft Tech Pvt Ltd, Attn: Data Protection Officer, 311, University Plaza, Navrangpura, Ahmedabad – 380009, Gujarat, India.