DPDP (India)

Last updated: 10 November 2026

This page explains how Search Scanner AI follows India's Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules. It applies the Ucartz DPDP Compliance and Data Protection Policy to this app. You can ask for this notice in English or in any language of the Eighth Schedule to the Constitution: write to compliance@ucartz.com.

1. Data Fiduciary

Ucartz Online Private Limited (CIN U72200KL2017PTC048470), Near LP School, Agasthiyacodu, Anchal, Kollam, Kerala 691306, India, is the Data Fiduciary for the personal data of the app's users.

2. Notice: what we process and why

We collect nothing beyond what these purposes need, do not sell personal data, and do not use it for advertising. Full list: Privacy Policy.

3. Consent and legitimate uses

When you sign in you agree, by a clear action, to the processing for the purposes above (Section 6). The use of the service is not made conditional on anything it does not need. Security, abuse prevention and legal compliance rely on legitimate uses under Section 7. You can withdraw consent as easily as you gave it: disconnect an AI assistant in Settings, remove your sites, or ask us to close your account at compliance@ucartz.com. Withdrawal stops further processing; it does not affect processing done before.

4. Data from sites you scan

We fetch only publicly served pages of sites you add, and use them only to produce your report. If those pages contain personal data of others, you, as the site's Data Fiduciary or with its permission, decide that they are checked; we process that data for you as a Data Processor, as the Ucartz DPDP policy (section 15) describes.

5. Transfers outside India

The app's server, operated by Ucartz, is in the United States, so your data is processed there. Section 16 of the DPDP Act allows transfers except to countries the Central Government restricts; the United States is not restricted. Data travels encrypted (HTTPS).

6. Retention and erasure

We erase personal data once its purpose is served or you withdraw consent, unless a law requires us to keep it: site data when you remove the site or clear it, log events 30 days after they were last seen, homepage check records after 30 days, account data when you close the account. Security logs follow the CERT-In retention described in the Ucartz DPDP policy (section 9).

7. Security and breaches

We protect data with HTTPS, hashed tokens, restricted staff access and a crawler that cannot reach private networks (Section 8(5)). If a personal data breach happens, we will inform the Data Protection Board of India and the affected users without delay, as Section 8(6) and the rules require.

8. Children

The app is meant for people aged 18 or older. We do not knowingly process children's data and never track, profile or target advertising at children (Section 9).

9. Your rights

• Access (Section 11): a summary of your data, the processing, and who it was shared with.
• Correction, completion, updating and erasure (Section 12).
• Grievance redressal (Section 13).
• Nomination (Section 14): name someone to exercise your rights if you die or cannot act.

Send requests to compliance@ucartz.com from your account address, or open a ticket. We verify your identity and reply within 30 days.

10. Your duties

Under Section 15 you must not impersonate anyone, must not hide material facts, and must not file false or frivolous complaints.

11. Grievance Officer and the Data Protection Board

Grievance Officer and Data Protection Lead: compliance@ucartz.com (grievance desk grievance@ucartz.com), phone +91 7034004444, Opposite to Phase 3 Gate, Technopark, Trivandrum, Kerala, India. We acknowledge within 24 hours and aim to resolve within 15 days, never more than 30. If you are not satisfied, you may complain to the Data Protection Board of India.

Contact

Privacy Policy · Terms of Service · Acceptable Use · GDPR · DPDP (India) · Contact