Privacy & Data Protection Policy

In accordance with regulations issued by the Unique Identification Authority of India (UIDAI), EsyDocs strictly mandates Aadhaar Masking.

• We only ever request and record the last 4 digits of your Aadhaar card (e.g. XXXX-XXXX-1234).
• We never collect, store, or process full 12-digit Aadhaar numbers, Aadhaar biometrics, or iris scans.
• When uploading identity proof documents, customers are guided to mask the first 8 digits.

To draft legally enforceable rental agreements under the Karnataka Stamp Act, 1957, we collect the following minimal data elements:

In compliance with Indian data sovereignty standards, all customer data, drafts, and order logs are hosted exclusively within Google Cloud Platform (GCP) / Firebase data centers located in Mumbai, India (asia-south1).

All data in transit is encrypted using 256-bit TLS 1.3 encryption, and data at rest is encrypted using AES-256 standards. All online payment transactions (Cards, Net Banking, and UPI) are processed securely through RBI-authorized, PCI-DSS Level 1 compliant payment gateways (Razorpay); EsyDocs never stores, captures, or has access to your sensitive card credentials, CVV, or banking PINs.

Uploaded identity documents and draft inputs are used solely to draft and deliver the rental agreement, and temporary uploaded customer files are permanently purged from our servers following fulfillment.

Under the Digital Personal Data Protection Act, 2023, you retain full rights to:

• Access a summary of personal data processed by EsyDocs.
• Request correction or updating of inaccurate personal data prior to physical stamp paper issuance.
• Request erasure of digital order history once physical agreement delivery and statutory retention requirements are concluded.