This draft explains how Bluedex collects and uses personal data on bluedex.in, its dashboard, Bluedex AI and related services.
Legal entity name, CIN / LLPIN and GSTIN: pending confirmation by Bluedex. The registered entity responsible as Data Fiduciary must be identified before publication of a final policy.
Office address: Yamuna Vihar, Karawal Nagar, Delhi – 110094.
This page reflects the client-supplied DPDP policy draft. Business particulars, retention periods, grievance arrangements and legal applicability still require confirmation. Use Privacy Requests below to contact the existing support channel.
1. Personal data we collect and why
We collect only the data needed for the stated purpose. We do not sell your personal data.
| Data | Purpose | Basis described in client draft |
|---|---|---|
| Name, phone, email | Respond to enquiries, create accounts and send service updates | Consent |
| Business name, address, PAN and GSTIN | Prepare and file applications you order | Consent |
| Identity documents, photos, signatures and DSC details | Government filings; Aadhaar only where legally required for a filing | Consent |
| Transaction ID, UPI ID and refund bank details | Process payments and refunds; card numbers are handled by the payment gateway | Consent / applicable legal obligations |
| Uploaded documents | Deliver the service you ordered | Consent |
| Bluedex AI chat content | Answer your questions | Consent |
| IP address, browser, pages visited and cookies | Security and fraud prevention; optional analytics and advertising | Applicable law for security; consent for non-essential tracking |
| Marketing preferences | Send offers and reminders only if you opt in | Consent |
2. Consent
We ask for consent through clear, unticked checkboxes on enquiry and account-creation forms. Each consent request identifies the data and purpose. Marketing consent is optional.
You may withdraw consent through Privacy Requests at /privacy-request, an unsubscribe link where provided, or support@bluedex.in. Withdrawal does not affect processing already completed. If you withdraw consent needed for an ongoing service, we may not be able to complete that service.
5. Your rights
Subject to applicable law, you may request access to a summary of your personal data and sharing, correction or updating, erasure, withdrawal of consent, grievance redressal, or nomination of a person to exercise your rights in case of death or incapacity.
Use /privacy-request or email support@bluedex.in. We may verify your identity before acting. Response period: pending confirmation by Bluedex; applicable statutory deadlines take precedence. Requests do not automatically delete records or change account access before verification.
6. Security
The final policy must describe safeguards actually implemented and verified by Bluedex, including transport encryption, access controls, access logs, backups and confidentiality arrangements.
The client draft proposes retaining security and access logs for at least one year. Log coverage, retention and operational processes must be verified before claiming compliance. Never send passwords or OTPs in an enquiry or privacy request.
7. How long we keep data
The periods below are from the client draft and require operational and legal confirmation. They are not an automated deletion schedule.
This website does not persist AI conversation transcripts in its application store; the live chat holds messages in browser memory. OpenAI processing and retention depend on the configured provider account and terms. Confirm provider settings before finalising the policy.
When the purpose ends and no law requires retention, data should be deleted, with any notice required by applicable law. This implementation records consent and privacy requests for handling; their approved retention period also needs confirmation.
| Data | Retention — awaiting confirmation |
|---|---|
| Enquiry / lead data without an order | Proposed: 12 months from last contact |
| Account and order data | Account duration plus a period to be confirmed |
| Documents, filings, invoices and tax records | Applicable company, income-tax and GST record requirements; client draft proposes 6–8 years, subject to legal review |
| Bluedex AI chats | Browser memory during the session; provider retention requires confirmation |
| Security and access logs | Proposed minimum: 1 year; validate coverage and applicability |
| Consent records and privacy requests | Period and disposal process to be confirmed |
8. Personal data breach
Bluedex must establish its breach-response process before finalising this policy. Where required by applicable law, affected individuals and the relevant authority will be informed with details of the incident, likely impact, response and protective steps.
9. Grievance Officer
Name and designation: pending confirmation of a named individual by Bluedex. The support team is an interim contact and is not presented as a named Grievance Officer.
Email: support@bluedex.in
Dedicated privacy inbox: privacy@bluedex.in — proposed in the draft, not yet confirmed active.
Address: Yamuna Vihar, Karawal Nagar, Delhi – 110094
Phone: +91 70110 19451
Hours proposed in the client draft: Monday to Saturday, 10 AM to 6 PM. Proposed acknowledgement within 48 hours and resolution within 15 days require approval.
Escalation to the Data Protection Board of India is subject to applicable law and the relevant grievance process.
10. Children
Our services are intended for persons aged 18 and above. We do not knowingly collect personal data of children. If a child has provided data, contact support@bluedex.in so the matter can be verified and addressed.
11. Links to other websites
The Platform links to government portals and other websites. Their privacy practices are governed by their own policies.
12. Changes to this Policy
Updates appear on this page with a revised date and version. Significant changes should be communicated to registered users through email or a dashboard notice. Fresh consent will be requested where required.
13. Governing law
This draft refers to Indian law, including the Digital Personal Data Protection Act, 2023, DPDP Rules, 2025, and the Information Technology Act, 2000 and applicable rules. Commencement, obligations and deadlines require final legal review; this draft is not a claim of compliance.
Jurisdiction city: pending confirmation. Any jurisdiction clause is subject to applicable consumer-protection and data-protection rights.