India's largest legal & tax compliance platform+91 70110 19451

Legal

Privacy Policy

Last updated: 24 October 2026 · Version 2.0-draft

Draft for review. Company details, retention periods and the named Grievance Officer require confirmation before this policy is finalised. Not legal advice.

This draft explains how Bluedex collects and uses personal data on bluedex.in, its dashboard, Bluedex AI and related services.

Legal entity name, CIN / LLPIN and GSTIN: pending confirmation by Bluedex. The registered entity responsible as Data Fiduciary must be identified before publication of a final policy.

Office address: Yamuna Vihar, Karawal Nagar, Delhi – 110094.

This page reflects the client-supplied DPDP policy draft. Business particulars, retention periods, grievance arrangements and legal applicability still require confirmation. Use Privacy Requests below to contact the existing support channel.

1. Personal data we collect and why

We collect only the data needed for the stated purpose. We do not sell your personal data.

DataPurposeBasis described in client draft
Name, phone, emailRespond to enquiries, create accounts and send service updatesConsent
Business name, address, PAN and GSTINPrepare and file applications you orderConsent
Identity documents, photos, signatures and DSC detailsGovernment filings; Aadhaar only where legally required for a filingConsent
Transaction ID, UPI ID and refund bank detailsProcess payments and refunds; card numbers are handled by the payment gatewayConsent / applicable legal obligations
Uploaded documentsDeliver the service you orderedConsent
Bluedex AI chat contentAnswer your questionsConsent
IP address, browser, pages visited and cookiesSecurity and fraud prevention; optional analytics and advertisingApplicable law for security; consent for non-essential tracking
Marketing preferencesSend offers and reminders only if you opt inConsent

3. Who we share data with

Government authorities and portals (MCA, GSTN, Income Tax Department, FSSAI/FoSCoS, IP India, EPFO, ESIC and others) to file your applications.

CA, CS and legal professionals assigned to your request. Written confidentiality arrangements require confirmation by Bluedex before this draft is finalised.

Payment gateways (Razorpay, PhonePe) and banks to process payments and refunds.

Technology providers for hosting, CRM, email, SMS and WhatsApp messaging as needed for service delivery. The final provider list and processor contracts must be confirmed.

OpenAI powers Bluedex AI when enabled. Do not enter Aadhaar, PAN, bank or password details in chat.

Meta Pixel and Google Analytics through Firebase Analytics load only if you accept the corresponding advertising or analytics category.

Law enforcement or regulators where required by law. Some providers may process data outside India, subject to applicable transfer restrictions.

4. Cookies

Essential cookies run login, security and privacy preferences. Non-essential analytics and advertising scripts are blocked by default.

Use Accept all, Reject non-essential or Customise in the banner. Change your choice at any time using Cookie Settings in the footer. Reject is as easy to select as Accept. Withdrawing a cookie choice stops future tracking; it does not retrieve data already transmitted.

5. Your rights

Subject to applicable law, you may request access to a summary of your personal data and sharing, correction or updating, erasure, withdrawal of consent, grievance redressal, or nomination of a person to exercise your rights in case of death or incapacity.

Use /privacy-request or email support@bluedex.in. We may verify your identity before acting. Response period: pending confirmation by Bluedex; applicable statutory deadlines take precedence. Requests do not automatically delete records or change account access before verification.

6. Security

The final policy must describe safeguards actually implemented and verified by Bluedex, including transport encryption, access controls, access logs, backups and confidentiality arrangements.

The client draft proposes retaining security and access logs for at least one year. Log coverage, retention and operational processes must be verified before claiming compliance. Never send passwords or OTPs in an enquiry or privacy request.

7. How long we keep data

The periods below are from the client draft and require operational and legal confirmation. They are not an automated deletion schedule.

This website does not persist AI conversation transcripts in its application store; the live chat holds messages in browser memory. OpenAI processing and retention depend on the configured provider account and terms. Confirm provider settings before finalising the policy.

When the purpose ends and no law requires retention, data should be deleted, with any notice required by applicable law. This implementation records consent and privacy requests for handling; their approved retention period also needs confirmation.

DataRetention — awaiting confirmation
Enquiry / lead data without an orderProposed: 12 months from last contact
Account and order dataAccount duration plus a period to be confirmed
Documents, filings, invoices and tax recordsApplicable company, income-tax and GST record requirements; client draft proposes 6–8 years, subject to legal review
Bluedex AI chatsBrowser memory during the session; provider retention requires confirmation
Security and access logsProposed minimum: 1 year; validate coverage and applicability
Consent records and privacy requestsPeriod and disposal process to be confirmed

8. Personal data breach

Bluedex must establish its breach-response process before finalising this policy. Where required by applicable law, affected individuals and the relevant authority will be informed with details of the incident, likely impact, response and protective steps.

9. Grievance Officer

Name and designation: pending confirmation of a named individual by Bluedex. The support team is an interim contact and is not presented as a named Grievance Officer.

Email: support@bluedex.in

Dedicated privacy inbox: privacy@bluedex.in — proposed in the draft, not yet confirmed active.

Address: Yamuna Vihar, Karawal Nagar, Delhi – 110094

Phone: +91 70110 19451

Hours proposed in the client draft: Monday to Saturday, 10 AM to 6 PM. Proposed acknowledgement within 48 hours and resolution within 15 days require approval.

Escalation to the Data Protection Board of India is subject to applicable law and the relevant grievance process.

10. Children

Our services are intended for persons aged 18 and above. We do not knowingly collect personal data of children. If a child has provided data, contact support@bluedex.in so the matter can be verified and addressed.

12. Changes to this Policy

Updates appear on this page with a revised date and version. Significant changes should be communicated to registered users through email or a dashboard notice. Fresh consent will be requested where required.

13. Governing law

This draft refers to Indian law, including the Digital Personal Data Protection Act, 2023, DPDP Rules, 2025, and the Information Technology Act, 2000 and applicable rules. Commencement, obligations and deadlines require final legal review; this draft is not a claim of compliance.

Jurisdiction city: pending confirmation. Any jurisdiction clause is subject to applicable consumer-protection and data-protection rights.