Cyber Legal Intelligence Partners · codesnag.ai

Privacy Policy

Last updated: 20 October 2026

Cyber Legal Intelligence Partners (codesnag.ai is a unit of Cyber Legal Intelligence Partners) is the data fiduciary for codesnag.ai, the Cyber Surety membership, the dashboard and our WhatsApp service. Payments for the Cyber Surety membership are received by Adly Marketing Private Limited, which uses your payment details only to process the payment and the membership. This policy explains what we collect, why, and your rights under the Digital Personal Data Protection Act, 2023.

  1. 1. What we collect

    • Your WhatsApp number, name and, if you give them, email, address, date of birth and occupation (for your membership and certificate).
    • What you ask us to check: domains, email addresses, device artifacts, and the scan results.
    • Incident and case details you share with us, and the evidence we preserve for your matter.
    • What you type into our forms (name, email, phone, organisation and message), and, for the DPDP readiness check, the website address you enter.
    • Payment references and status from Razorpay — never your card or UPI credentials.

  2. 2. Why we use it

    To run your scans and monitoring, respond to incidents, prepare complaints and notices, activate and service your membership and its cover, send receipts and reports, send you our blog updates if you subscribe, and meet legal obligations. We only email a report to an address that has been verified, or to your organisation’s admins.

  3. 3. Where it lives, and what we never do

    Your scans, findings and matter records are stored on infrastructure in India. Your data is not sold, shared or brokered, and your matter is not used to train AI models.

  4. 4. Who we share it with

    Only as needed to deliver the Service: our technical partner (Codesnag) and legal partner (VirtualVakil) on your matter; the insurer (ICICI Lombard) and the master policyholder (Adly Marketing Private Limited) under the group master policy when your cover is activated or a claim is made; Razorpay for payments; and authorities where the law requires or where you ask us to file a complaint.

  5. 5. How long we keep it

    We keep each kind of data only as long as we need it, and then erase it. You can ask us to erase your data at any time. We will do so unless a law requires us to keep it.

    • Enquiries and leads (contact, demo, DPDP check and incident forms, and your emails to us): 24 months from our last exchange with you, then erased. Newsletter email addresses: until you unsubscribe or withdraw consent.
    • Membership and certificate records: while your membership is active, and after that as required by law.
    • Incident, case and evidence records: for as long as your matter needs them, and after that as required by law.
    • Scan results and monitoring data: for as long as your membership or matter needs them, then erased.
    • Payment records (reference, amount and status): as required by tax and accounting laws.
    • Security and access logs: at least one year. The DPDP Rules, 2025, Rule 8(3), require this for the purposes in the Seventh Schedule.

  6. 6. Your rights and how to use them

    You can ask to see your data, correct it, erase it, or withdraw your consent. You can also nominate another person to exercise these rights for you if you die or cannot act.

    To make a request, email contact@codesnag.ai or message us on WhatsApp. Tell us the email address or phone number you used with us. We may ask you to confirm it is you before we act.

  7. 7. Grievance Officer

    If you have a complaint about how we handle your data, write to our Grievance Officer.

    Grievance Officer, Cyber Legal Intelligence Partners
    Email: contact@codesnag.ai (put “Grievance” in the subject)
    WhatsApp: +91 83682 43183

    We will reply to every grievance and rights request within 30 days of receiving it. Rule 14(3) of the DPDP Rules, 2025 allows a Data Fiduciary up to 90 days. We have chosen the shorter period. The Rules’ main provisions come into force on 13 May 2027, and we follow this timeline now.

  8. 8. Complaining to the Data Protection Board

    Please use our grievance process first. Section 13(3) of the Digital Personal Data Protection Act, 2023 asks you to do so before approaching the Board.

    If we do not reply within 30 days, or you are not satisfied with our reply, you may complain to the Data Protection Board of India. Complaints to the Board are made through its digital office. We will help you with the details of your case if you ask.

  9. 9. If there is a personal data breach

    If there is a personal data breach, we will inform each affected person without delay and in plain language. We will tell them what happened, what the likely effects are, what we have done, and what they can do to protect themselves. First, we contain the breach and find out what happened.

    We will also tell the Data Protection Board without delay, and give it full details within 72 hours, as Rule 7 of the DPDP Rules, 2025 requires once Rule 7 comes into force on 13 May 2027. Where the CERT-In Directions of 28 April 2022 apply to the incident, we also report to CERT-In within six hours of noticing it.

    If you find a security problem on our site, please report it as described in our security.txt.

  10. 10. Payments, refunds and cancellation

    Payments are processed by Razorpay. Every membership carries a 7-day refund guarantee — see our Refund Policy.

  11. 11. Cookies

    The site uses only the cookies needed for it to work and for login on the dashboard.

  12. 12. Changes

    We will post any update here and notify members of material changes on WhatsApp or by email.

Questions about this policy: contact@codesnag.ai · WhatsApp +91 83682 43183.