DPDP Act 2023 & Global Security
Privacy & Data Protection Policy
How AllInAlls protects your identity, cryptographic credentials, and citizen documents under Indian data sovereignty laws.
Documents uploaded for signature verification or editing reside in ephemeral RAM and are wiped after processing.
Strict adherence to Indian Digital Personal Data Protection standards, local data residency, and user consent.
We never sell, rent, or lease citizen records, mobile numbers, or certificates to third-party advertisers.
1. Data Controller & Commitment
ALL IN ALL SERVICES PVT LTD ("AllInAlls") acts as the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). We process citizen applications and cryptographic document verifications with rigorous confidentiality. We understand that government certificates (such as Community, Nativity, Income, Patta, EC, and Marksheets) carry sensitive personal data and treat them with institutional diligence.
2. Ephemeral Document Sandbox Policy
When you use our PDF Enterprise Studio (e.g., verifying DSC signatures, compressing files, or rearranging pages) or Image Editor:
- In-Memory Cryptographic Parsing: Documents are decrypted and inspected in isolated worker memory to extract authentic `/Sig` dictionaries and PKCS#7 signing certificates.
- Automatic File Purging: Once verification completes and you download the verified output, temporary server-side files are automatically unlinked and erased via automated background cron jobs.
- Zero AI Training on User Files: Your uploaded photos, signatures, and certificates are NEVER used to train machine learning models or generative AI systems.
3. Information We Collect & Why
Mobile phone number (for secure 6-digit OTP dispatch) or email address. We do not store plain-text banking passwords or UPI PINs.
Order identifiers, UTR reference numbers, and token balances. Retained strictly to meet financial audit and GST invoice compliance rules under Indian tax law.
Used solely to suggest regional state administrative portals (e.g. Tamil Nadu e-Sevai) and display local currency pricing (INR for India, USD for global).
4. Your Rights Under the DPDP Act
As a citizen and data principal, you have explicit rights regarding your personal records:
- Right to Access: View all orders, token balances, and profile data in your private dashboard.
- Right to Correction: Update outdated mobile numbers, contact emails, or applicant profiles.
- Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account and associated document records by contacting our Data Protection Officer.
5. Data Protection Officer & Grievance Redressal
In accordance with the Information Technology Act, 2000 and DPDP Act 2023, queries regarding privacy may be directed to our designated officer:
Entity: ALL IN ALL SERVICES PVT LTD
Email: [email protected] | [email protected]
Corporate Address: Chennai, Tamil Nadu 600001, India.
AllInAllsTake AllInAlls
With You Everywhere
Access all services from one secure mobile app.
