Privacy Policy

Last updated: 15 October 2026

DRAFT for founder review. Replace all [PLACEHOLDERS] and have an qualified attorney review this page before launch.

This policy explains how AskRefund ("we", acting as a "Data Fiduciary") handles your personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules, as we understand them. [ADVOCATE TO CONFIRM CURRENT RULES]

1. What we collect

• Your answers about your problem (company, dates, amounts, order or ticket IDs, free text).
• Your name, email, city/state and the contact registered with the company, collected when you buy a pack.
• Payment status from Razorpay. We do not receive or store your card or UPI details.
• If you use "Talk to a human": your name, email, phone and case summary.
• Basic technical data (for example logs) needed to keep the site secure.

2. Why we use it (purpose)

Only to produce your letter and guidance, take payment, contact you about your order, operate and secure the service, and, if you ask for it, refer your case to a partner agency. We do not sell your data.

3. Consent and notice

We ask for your consent at the point of collection and tell you why we need the data. You can withdraw consent at any time by emailing hello@askrefund.com; withdrawal does not affect earlier lawful use.

4. Sensitive details we try not to collect

We do not need passwords, OTPs, CVVs, full card numbers, Aadhaar or PAN. If you type them in free text, our system tries to mask them automatically, but please don't enter them.

5. AI processing

Your answers may be sent to an AI service provider to draft your letter. [NAME PROVIDER(S) AND DATA LOCATION BEFORE LAUNCH]. We ask providers not to use your data to train their models where their terms allow.

6. Sharing

We share data only with service providers who help us run the service (hosting, payments, email, AI) and, with your explicit consent, a partner agency. We may disclose data if required by law.

7. Retention

We keep case data for [90 days] after your purchase so you can re-open your pack, and payment records for as long as the law requires. Lead-form data is kept until your matter is closed plus [6 months]. Then it is deleted or anonymised. [CONFIRM PERIODS]

8. Your rights

You can ask us to give you a summary of your data, correct it, erase it, or nominate someone to exercise your rights if you die or cannot act. Email hello@askrefund.com. We aim to reply within [timeline].

9. Children

The service is for adults. We do not knowingly collect data from children under 18.

10. Security

We use reasonable safeguards such as encrypted connections and access controls. No system is perfectly secure. We will notify you and the Data Protection Board of India of a personal data breach as required by law.

11. Grievances

Contact our grievance officer: [NAME], [EMAIL], [ADDRESS]. If you are not satisfied, you may complain to the Data Protection Board of India once it is operational for this purpose.