DPDP Compliance
Draft — not yet published
A plain-language summary of how FILTER approaches India's Digital Personal Data Protection Act. We are building toward full compliance and will state clearly here what is and isn't yet in place — not overclaim a certification we don't hold.
Purpose limitation
Phone numbers submitted to FILTER are used only to perform the validation check requested. We do not sell, rent, or repurpose them for any other use.
Notice, per DPDP Act Section 5
Our Privacy Policy serves as the notice required under Section 5 of the DPDP Act: it describes the personal data we process, the purpose of processing, how to exercise your rights, and how to reach our Grievance Officer.
Data minimisation
We hash submitted numbers rather than storing them — see our Privacy Policy, Section 5. This is a structural choice, not a policy we could quietly reverse.
Your customers' consent
If you are submitting phone numbers you collected from your own customers, you are responsible for having a lawful basis to process and validate those numbers. Our Terms of Service require this of every account.
Data Principal rights
Access, correction, erasure, consent withdrawal, nomination, and grievance redressal — the full list, and how to exercise each right, is in our Privacy Policy, Section 8.
Breach notification
In the event of a personal data breach, the DPDP Act requires notifying the Data Protection Board of India and affected Data Principals. We commit to doing so without undue delay upon confirming a breach affecting personal data we hold, using the contact information on file for affected accounts.
Significant Data Fiduciary status
The DPDP Act allows the government to designate certain fiduciaries as "Significant Data Fiduciaries," subject to extra obligations based on factors like data volume and sensitivity. We are not currently classified as one; we will revisit this statement as our scale changes.
Deletion and grievances
Account-holders can request data deletion or raise a grievance using the contact details on this site. We currently handle these manually; we intend to automate this as volume grows.