DPDP compliance

How TopGenie handles personal data under India's Digital Personal Data Protection Act, 2023. The Data Fiduciary is Quirky Hive Private Limited, Bengaluru.

The short version

TopGenie collects little, uses it only to run the service, deletes on request, and never sells it. The DPDP Act largely asks companies to do what this product was built to do anyway.

Notice and consent

• At signup you are told, in plain language on the form itself and in the privacy policy, what is collected and why. Creating the account is your consent to that processing.
• Your customers are never asked to consent to anything hidden, because nothing about them is collected silently. The review page works without any personal data; private feedback is given knowingly, typed by the customer, addressed to the business.
• Consent can be withdrawn by deleting the account or, for a customer's feedback, by asking the business or us to remove it.

Your rights as a Data Principal

• Access: ask what personal data we hold about you and receive a plain summary.
• Correction and completion: fix wrong or outdated details, yourself in the product or by writing to us.
• Erasure: have your personal data deleted once it is no longer needed for the service or a legal duty. Account deletion removes account data; payment records remain as tax law requires.
• Grievance redressal: raise a complaint and get a response within a reasonable time, and in any case within the timelines the Act prescribes.
• Nomination: nominate a person to exercise these rights for you if you are unable to.

To exercise any of these, write to support@topgenie.in from your account email.

Grievance officer

Grievances are handled by the founder's office at Quirky Hive Private Limited, reachable at support@topgenie.in. If you are unsatisfied with our response, you may approach the Data Protection Board of India.

Our duties, and how we meet them

• Purpose limitation: data collected at signup powers the features described in data usage, nothing else.
• Data minimisation: the review flow was deliberately designed so end customers can use it with zero personal data.
• Accuracy: you can correct your own details in the product at any time.
• Security safeguards: encryption in transit everywhere, hashed passwords, tenant isolation enforced at the query layer, rate limiting, an append-only audit trail of privileged access, and routine security review.
• Storage limitation: automatic deletion schedules, listed in the privacy policy, actually run as nightly jobs rather than living only in policy text.
• Children's data: TopGenie is a business tool and is not offered to children; we do not knowingly process children's data.

Breach notification

If a personal data breach occurs, we will notify the Data Protection Board and affected users as the Act and its rules require, plainly and without burying it.