Commitment

DeshiApp is deeply committed to upholding user privacy, digital sovereignty, and the ethical management of personal data. As an independent digital publication dedicated to chronicling India’s technology ecosystem, consumer applications, and Digital Public Infrastructure, we recognize that privacy is a foundational democratic value. We process personal information lawfully, fairly, transparently, and strictly to the extent necessary for our journalistic, publishing, cybersecurity, administrative, and operational objectives. This Privacy Policy details the exact mechanisms through which personal information is gathered, utilized, shared, stored, and safeguarded across the DeshiApp digital publication platform.

While DeshiApp is proudly anchored in India and primarily serves Indian citizens, technology professionals, and digital policymakers, our digital platform attracts an international readership. Consequently, legal rights and regulatory obligations may vary depending on the reader’s geographic location, the applicable jurisdiction, the nature of data processing, and whether the interaction relates to public-interest journalism, editorial research, technical telemetry, or commercial communications. Nothing in this policy restricts or diminishes any statutory privacy right that cannot lawfully be limited.

Who Is Responsible

DeshiApp, operating through its designated Publisher and editorial administration, acts as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDPA) and the primary controller of personal data collected through the publication website, newsletters, and reader feedback channels. Unless a distinct corporate entity is formally identified on our Publisher and Legal Information page, all references to DeshiApp signify the independent publishing entity operating the domain deshiapp.in.

Privacy inquiries, statutory data requests, and formal regulatory communications should be directed to privacy@deshiapp.in. DeshiApp does not designate a statutory Data Protection Officer unless such a formal appointment is explicitly mandated by applicable statutory thresholds under Indian data protection law and has been formally established.

Scope

This Privacy Policy governs the processing of personal data across all visitor interactions with DeshiApp, including website navigation, digital newsletters, reader contact submissions, editorial correction requests, formal complaint filings, legal grievances, rights of reply, freelance pitches, author administration, commercial inquiries, advertising sponsorships, affiliate click attribution, digital accessibility feedback, security vulnerability reports, confidential whistleblower correspondence, investigative reporting interviews, event registrations, content syndication, and related technical records.

Certain specialized services, collaborative initiatives, or investigative campaigns may feature supplementary privacy notices or data collection protocols. Where such distinct notices exist, they are construed in harmony with this primary Privacy Policy.

Personal Information

Personal information encompasses any data or digital representation through which an individual is directly or indirectly identifiable. Depending on the nature of your interaction, DeshiApp may collect names, email addresses, phone numbers, corporate affiliations, job designations, professional biographies, subscription records, email communications, correction submissions, complaint documentation, author contracts, invoice and banking data for contributors, published author photos, interview audio recordings, source corroboration records, IP addresses, browser specifications, operating system details, device identifiers, approximate geographic region derived from network data, cookie choices, server logs, referral URLs, timestamps, accessibility assistance details voluntarily provided, public records, and other data gathered during editorial investigations.

DeshiApp strictly enforces a policy of data minimization, actively refusing to collect superfluous personal information, non-essential sensitive attributes, or unnecessary identifiers from ordinary site visitors.

Sources of Information

DeshiApp gathers personal information directly from individuals through website forms, newsletter subscriptions, and email correspondence; from credentialed contributors and journalistic sources; through automated server infrastructure and security firewalls; from public registers, judicial repositories, regulatory filings, corporate registries, and gazette notifications; from social media posts and professional directories; from technical infrastructure providers, analytics platforms, and security auditors; and through rigorous, lawful investigative reporting.

The mere fact that personal information exists in the public domain does not automatically imply that its collection, republication, or processing by an online platform is fair, necessary, or proportionate. DeshiApp evaluates public-domain data with strict adherence to editorial necessity and legal standards.

Purposes

DeshiApp processes personal information to host, operate, and secure our digital publishing infrastructure; to publish investigative journalism, critical commentary, and technology news; to investigate matters of public importance across India’s sovereign tech ecosystem; to communicate with journalistic sources and industry leaders; to verify identity and authority; to manage author contracts and evaluate freelance submissions; to administer content licensing and syndicated permissions; to respond to reader inquiries; to adjudicate corrections, grievances, and rights of reply; to distribute requested email newsletters; to manage cookie preferences; to safeguard our servers against DDoS attacks and cyber threats; to investigate security disclosures; to provide accessibility accommodations; to administer commercial advertising accounts; to maintain statutory accounting and tax compliance; to defend against legal claims; and to preserve the historical integrity of our published public archive.

Personal data collected for a specified, legitimate editorial or operational purpose is never repurposed for contradictory, incompatible, or undisclosed secondary commercial agendas without prior appropriate notice and consent where legally required.

Lawful Basis

Under applicable legal frameworks—including India’s Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and international privacy principles—DeshiApp processes personal data pursuant to lawful grounds: explicit consent, contractual necessity or preparatory steps taken at the individual’s request, compliance with statutory legal obligations, legitimate publishing, administrative and security interests, public interest journalistic processing, the exercise of freedom of speech and expression, and the establishment or defense of legal claims.

The applicable legal basis differs between routine website telemetry, contributor administration, commercial advertising interactions, and public-interest investigative journalism. Where processing is grounded in consent, data principals maintain the unencumbered right to withdraw consent for future processing through accessible mechanisms. Withdrawal does not retroactively compromise the legality of prior processing.

Editorial and Journalistic Processing

DeshiApp processes personal information extensively in the exercise of public-interest journalism, investigative reporting, digital technology criticism, historical archiving, and the constitutional guarantee of freedom of speech and expression. This processing regularly encompasses corporate executives, startup founders, regulatory officials, public figures, technical experts, interviewees, and documentary subjects involved in significant market, policy, or technological events.

Standard consumer privacy rights and routine data subject access requests operate under statutory and constitutional exceptions where necessary to protect independent journalism, preserve confidential sources, maintain unreleased investigative drafts, or defend editorial integrity. Nevertheless, journalistic processing at DeshiApp remains firmly anchored in the principles of factual accuracy, proportionality, fairness, source protection, and harm minimization.

Sensitive Information

Data concerning health conditions, racial or caste origin, religious convictions, political affiliations, trade union memberships, sexual orientation, biometric credentials, genetic information, criminal proceedings, minor children, and financial account numbers receives heightened security and administrative protection. DeshiApp collects or processes such sensitive information solely when directly necessary and supported by an explicit journalistic public-interest ground, legal mandate, or unequivocal consent. Sensitive data is never casually solicited through open website forms.

Children

DeshiApp’s digital platform is an open technology publication designed for a general adult audience and does not provide dedicated children’s portals or require minor user accounts. Where investigative reporting touches upon youth technology usage, child online safety regulations, or educational software, heightened editorial scrutiny is applied to protect the privacy and identity of minors. DeshiApp does not knowingly solicit or collect personal information from children and takes into account age, guardian consent, potential harm, and long-term public interest before naming any minor.

Website Technical Data

When an individual visits deshiapp.in, our web servers, content delivery network (CDN), and security firewalls automatically process technical telemetry essential for serving web assets, mitigating cyber attacks, diagnosing performance bottlenecks, and maintaining network resilience. This technical data includes IP addresses, browser user-agent strings, operating system versions, requested URLs, referring web pages, access timestamps, approximate geographic region, server error codes, and consent status tokens.

The exact client-side storage technologies, cookie lifetimes, and optional analytics tools operating on the site are fully documented in our Cookie Policy and manageable via our interactive Cookie Settings panel.

Cookies and Similar Technologies

DeshiApp uses strictly necessary cookies and, where explicitly authorized by the visitor, optional performance, analytical, and preference cookies as detailed in our Cookie Policy. Where consent is legally mandated, optional cookies remain inactive by default until the visitor registers an affirmative choice. Visitors retain the right to reject non-essential cookies and modify preferences at any time.

Correspondence

Whenever you communicate with DeshiApp via email, contact forms, or editorial desks, we retain records of the sender’s details, message content, technical attachments, dates, routing logs, editorial responses, and actions taken. This information is utilized solely to assess, investigate, and respond to your communication. Sensitive information such as financial passwords, banking PINs, Aadhaar card scans, or confidential medical records should never be transmitted through unencrypted contact channels.

Corrections, Complaints and Rights of Reply

To investigate and adjudicate factual correction requests, editorial grievances, or formal right-of-reply applications, DeshiApp processes the applicant’s name, professional credentials, contact information, the disputed URL, supporting documentary evidence, and internal newsroom review notes. Published corrections and right-of-reply statements are drafted to minimize unnecessary personal information. Confidential journalistic source identities are never revealed during complaint investigations.

Authors and Contributors

For credentialed staff journalists, contributing columnists, and freelance writers, DeshiApp maintains administrative records including real name, public byline, biographical summary, contact details, verified credentials, conflict-of-interest declarations, banking information for fee remittances, tax identifiers (such as PAN where required by Indian law), pitching history, article drafts, editorial communications, and publication records. Public author profiles display only information voluntarily submitted and approved for public disclosure.

Newsletters

When you subscribe to DeshiApp digital newsletters, daily technology roundups, or policy digests, we collect your email address, subscription preferences, consent timestamp, and delivery status logs. Subscribers may unsubscribe at any time via the one-click unsubscribe link embedded in every email footer or by contacting privacy@deshiapp.in. Unsubscribed addresses are maintained on a restricted suppression register to guarantee that further unwanted emails are never dispatched.

Commercial Enquiries

Records pertaining to corporate sponsorships, advertising campaigns, software partnerships, and affiliate programs include company name, representative identity, business email, proposal documentation, billing addresses, tax numbers, contract agreements, creative assets, and campaign performance data. Necessary billing records are shared with certified accounting and legal advisors under strict confidentiality terms.

Security and Accessibility Reports

Security vulnerability disclosures submitted to DeshiApp are treated with strict confidentiality, preserving the researcher’s handle or real name, communication logs, technical proof-of-concept details, and remediation verification records. Such data is accessible solely to authorized security personnel.

Accessibility feedback submitted by readers includes the affected page URL, description of the digital barrier, assistive technology utilized, and any disability-related context voluntarily shared. Such data is utilized solely to rectify accessibility barriers and improve platform usability.

Public Sources and Social Media

In reporting on India’s technology ecosystem, regulatory bodies, and corporate maneuvers, DeshiApp reporters lawfully access public records, regulatory filings, corporate announcements, patent databases, and public social media posts. Our editorial team critically evaluates authenticity, context, reasonable expectations of privacy, the public interest, and potential harm before republishing personal information retrieved from public forums.

Sharing

DeshiApp shares necessary personal data with verified technical infrastructure providers that support our web hosting, cloud infrastructure, content delivery networks, email delivery services, cybersecurity firewalls, consent management software, accounting, and legal counsel. These external vendors receive only the data strictly necessary to execute their contracted functions and are bound by stringent data protection and confidentiality agreements.

Personal data may also be disclosed to competent law enforcement agencies, judicial tribunals, or regulatory authorities pursuant to valid legal process, statutory mandates, or court orders under Indian law, or to protect the vital security of our staff, readers, and journalistic sources. DeshiApp does not sell personal data to data brokers, advertisers, or marketing firms under any circumstances.

International Processing

While DeshiApp is headquartered in India, our global readership and distributed digital infrastructure—including edge caching networks and cloud security firewalls—may involve the transmission and storage of technical data across international servers. Where cross-border data transfers occur, DeshiApp ensures compliance with applicable statutory transfer restrictions, contractual safeguards, and data protection requirements under Indian law.

Retention

DeshiApp retains personal information solely for the duration required to accomplish the legitimate purposes for which it was gathered, to fulfill statutory tax, accounting, and legal requirements, to preserve public-interest journalistic archives, to defend legal claims, and to protect source confidentiality. Routine editorial pitch records are pruned periodically; newsletter records remain active until unsubscribed; financial transaction data is retained for legally mandated statutory audit periods; and published investigative journalism remains part of the permanent historical record.

Personal data that has exhausted its operational utility, legal retention requirement, or journalistic relevance is securely deleted, overwritten, or irreversibly anonymized through systematic periodic reviews.

Security and Incidents

DeshiApp employs defense-in-depth technical and organizational security controls, including SSL/TLS encrypted data transit, multi-factor authentication for administrative accounts, role-based access restrictions, least-privilege permissions, automated system patching, routine vulnerability assessments, encrypted backups, and isolated source communications. While no internet-connected platform can guarantee invulnerability, our security posture is designed to effectively mitigate risks.

In the event of a verified or suspected personal data breach, DeshiApp will immediately execute its incident response protocol: containing the compromise, assessing potential harm to affected data principals, engaging technical remediation, notifying competent regulatory bodies such as CERT-In and the Data Protection Board of India where legally mandated, and communicating directly with affected individuals when required by law.

Rights

Under applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA), data principals enjoy defined statutory rights: the right to access a summary of personal data being processed; the right to correction and updating of inaccurate information; the right to erasure of personal data that is no longer necessary; the right to grievance redressal; and the right to nominate an authorized representative in the event of death or incapacity. These rights may be limited where necessary for public-interest journalism, source confidentiality, or compliance with statutory obligations.

Exercising Rights

To exercise your statutory data privacy rights, please submit a formal written request to privacy@deshiapp.in specifying your full name, contact details, the precise nature of your request, and the specific data or processing activity involved. DeshiApp applies proportionate identity verification procedures to prevent unauthorized data exposure. We respond to all valid requests within statutory timelines.

Deletion and Published Journalism

A fundamental legal and constitutional distinction exists between an individual’s right to request the deletion of private operational records (such as newsletter subscriptions) and demands to alter, de-index, or expunge accurate, lawfully published public-interest journalism. Requests concerning published articles are adjudicated by our senior editorial leadership, balancing individual privacy interests against historical truth, freedom of speech, journalistic archives, and the public’s right to know. Potential editorial remedies include factual updates, anonymization of minor details, or archival notes where warranted.

Direct Marketing and Automated Decisions

Readers possess an unconditional right to opt out of or object to direct electronic marketing communications at any time. DeshiApp immediately honors all marketing opt-out requests. Essential administrative notices, security alerts, and responses to direct reader inquiries are not classified as marketing.

DeshiApp does not deploy automated decision-making engines or machine-learning profiling systems to make consequential, legally binding decisions concerning readers, journalistic subjects, or contributors. All significant editorial, grievance, and publishing determinations are made through accountable human judgment.

External Links and Policy Changes

DeshiApp articles regularly contain hyperlinks to external third-party websites, official government portals, software repositories, and partner platforms. We do not control and cannot be held responsible for the privacy practices, tracking scripts, or content of external sites. Readers are advised to inspect the privacy statements of third-party platforms.

This Privacy Policy may be updated periodically to accommodate amendments in data protection legislation, regulatory directives from the Data Protection Board of India, new technical features, or organizational changes. Material changes will be highlighted via an updated effective date and a prominent notice across our digital platform.

Contact and Complaints

For privacy inquiries, rights requests, or data handling questions, contact privacy@deshiapp.in. For technical security vulnerability disclosures, contact security@deshiapp.in. For formal legal notices, contact legal@deshiapp.in. If you believe your privacy rights have not been adequately addressed, you have the right to lodge a formal complaint with the Data Protection Board of India or competent supervisory authority under applicable law.