Data Rights

    Your Data Rights

    Under the Digital Personal Data Protection Act, 2023, you have specific rights regarding your personal data. Here's how to exercise them.

    Last updated: April 26, 2025

    Overview

    The Digital Personal Data Protection Act, 2023 (DPDP Act) is India's landmark data protection legislation. As a Data Principal (a person whose data is processed by us), you are granted a set of enforceable rights that we are legally obligated to honour.

    Spirehub Softwares, as the Data Fiduciary for Spirehub AI Agent, is committed to upholding your rights in full compliance with the DPDP Act, 2023. This page explains each right you hold and how to exercise it effectively.

    • These rights apply to all personal data we hold about you as a registered user
    • Some rights may be limited where retention or processing is required by Indian law
    • You may exercise multiple rights simultaneously in a single request
    • We will never charge a fee to process a rights request

    Right to Information

    01

    Under Section 11 of the DPDP Act, 2023, you have the right to obtain from us a summary of your personal data that we process and the processing activities undertaken with respect to your data.

    This right covers:

    • A summary of the personal data we hold about you
    • The purposes for which your data is being processed
    • The identities of all Data Fiduciaries and Data Processors with whom your data has been shared
    • Any other information related to the processing of your personal data

    Right to Correction & Completion

    02

    Under Section 12 of the DPDP Act, 2023, you have the right to request correction of inaccurate or misleading personal data and completion of incomplete personal data.

    This right covers:

    • Correct any inaccurate or misleading personal data we hold
    • Complete any incomplete personal data in our records
    • Update outdated personal information
    • Restrict processing pending correction

    Right to Erasure

    03

    Under Section 12 of the DPDP Act, 2023, you have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where consent has been withdrawn.

    This right covers:

    • Deletion of personal data that is no longer necessary for the original purpose
    • Deletion following withdrawal of consent where no other legal basis exists
    • We will process erasure requests within 30 days, subject to legal retention obligations
    • Certain data may be retained to comply with Indian tax, legal, or regulatory requirements

    Right to Nominate

    04

    A unique right under Section 14 of the DPDP Act, 2023 — you may nominate another individual who shall exercise your data rights in the event of your death or incapacity.

    This right covers:

    • Designate a trusted individual to act on your behalf
    • The nominee can exercise all your rights under the DPDP Act
    • Submit a nomination by writing to grievance@spirehubs.com
    • You may update or revoke your nomination at any time

    Right to Grievance Redressal

    Under Section 13 of the DPDP Act, 2023, you have the right to file a grievance if you believe your rights as a Data Principal have been violated. You also have the right to escalate to the Data Protection Board of India (DPBI) if your grievance is not resolved satisfactorily.

    1

    File with our Grievance Officer

    Email grievance@spirehubs.com. We will respond within 30 days.

    2

    Internal Escalation

    If unsatisfied, request escalation to senior management. Allow 15 additional working days.

    3

    Data Protection Board of India

    File an appeal with the DPBI if the grievance remains unresolved after internal escalation.

    How to Exercise Your Rights

    To exercise any of your rights under the DPDP Act, 2023, follow these steps:

    Email Request (Recommended)

    Send an email to grievance@spirehubs.com with the subject '[Data Right]: [Right Name]' (e.g., 'Data Right: Request for Erasure'). Include your full name, registered email address, account ID, and a clear description of the right you wish to exercise.

    Self-Service via Dashboard

    Some rights can be exercised directly. Go to Dashboard → Settings → Privacy & Data to access, correct, or download your personal data.

    Written Request

    Address a written request to the Grievance Officer, Spirehub Softwares, India. Include your contact details and a description of the right you wish to exercise.

    Verification

    To protect your personal data, we may ask you to verify your identity before processing a rights request. This may include confirming your registered email address or providing additional identifying information.

    Response Timelines

    We are committed to responding to all data rights requests within 30 days of receipt, as required by the DPDP Act, 2023.

    Right to Information

    Within 30 days

    Right to Correction

    Within 30 days

    Right to Erasure

    Within 30 days

    Withdraw Consent

    Within 7 working days

    Grievance Acknowledgement

    Within 24 hours

    Grievance Resolution

    Within 30 days

    Contact Us

    To exercise your data rights or for any privacy-related query:

    Grievance Officer

    grievance@spirehubs.com

    Privacy Email

    privacy@spirehubs.com

    Response Time

    Within 30 days

    Company

    Spirehub Softwares