Privacy Policy

This Privacy Policy explains how DSC Buddy collects, uses, shares and protects your information when you use our website or our services in connection with Digital Signature Certificates (DSCs), USB tokens and partner onboarding. Because issuing a DSC involves identity verification under the IT Act, 2000, certain personal and sensitive data must be collected and shared with a licensed Certifying Authority to complete issuance.

1. Introduction

We are committed to protecting your privacy and handling your personal information responsibly. This policy applies to applicants, certificate holders, website visitors and partners. By using our website or services, you consent to the collection and use of your information as described here. If you do not agree, please do not use our services.

2. Information We Collect

Depending on the service you use, we may collect:

• Contact details such as name, email address, mobile number and postal address.
• Identity information such as PAN, Aadhaar or other identity details, and a photograph.
• Supporting documents required for the application.
• eKYC and video-verification data collected during identity verification.
• Payment details processed for your order.
• Partner business details, such as firm name, GST, address and authorised-contact information, for reseller and distributor onboarding.

3. How We Use Your Information

We use the information we collect to:

• Process and facilitate the issuance of your Digital Signature Certificate.
• Carry out identity verification, including eKYC and video verification.
• Deliver the USB token and provide order updates and customer support.
• Onboard and manage partners, resellers and distributors.
• Meet our legal, regulatory and compliance obligations and prevent fraud or misuse.

4. eKYC & Sensitive Data

Aadhaar, PAN and verification data (including video-verification records) are sensitive information and are handled only for the purpose of certificate issuance, strictly as permitted by applicable law and the requirements of the licensed Certifying Authority. We do not use this data for marketing, profiling or any unrelated purpose, and we apply appropriate safeguards to protect it.

5. Sharing & Disclosure

We share your information only as necessary to deliver our services:

• With the licensed Certifying Authority, to verify your identity and issue the certificate.
• With payment gateways to process payments and with logistics partners to deliver the USB token.
• Where required by law, a court, a regulator or a government authority.

We do not sell your personal information to any third party.

6. Data Security

We apply reasonable technical and organisational safeguards to protect your information against unauthorised access, disclosure, alteration or loss. While no method of transmission or storage is completely secure, we take steps designed to keep your data safe and limit access to those who need it to provide our services.

7. Data Retention

We retain your information for as long as required by the licensed Certifying Authority and the applicable regulator, and as necessary to comply with legal, tax and audit obligations. When information is no longer required for these purposes, we take steps to securely delete or anonymise it.

8. Your Rights

Subject to applicable law and the requirements of the Certifying Authority, you may request access to or correction of your personal information, and you may raise concerns about how your data is handled. To exercise these rights, please contact us using the details below. Some information may need to be retained where required for compliance.

9. Cookies

Our website may use cookies and similar technologies to support website functionality and analytics, and to understand how visitors use our site. You can control or disable cookies through your browser settings, although some features of the site may not function as intended if cookies are disabled.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any external sites you visit.

11. Children

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, and your continued use of our website or services after changes are posted constitutes acceptance of the revised policy. Please review this page periodically.

13. Contact & Grievance Officer

If you have any questions, requests or grievances regarding this Privacy Policy or how your data is handled, please email connect@dscbuddy.com or reach us through our contact page. We will acknowledge and address your concern within a reasonable time.