Your Data Rights
Last Updated: Oct 11, 2026
Under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), you are a Data Principal and RAMKRISHNA BARMAN, operator of IRWCMS Extension, is the Data Fiduciary for your personal data. This page explains your rights and how to use them.
1. What we process, and on what basis
- Account data (name, email, profile photo from Google): with your consent, to create and secure your account.
- Usage and credit data: to provide the service you purchased and enforce credit limits.
- Payment records (order and payment IDs, amount, plan): to fulfil purchases and to meet tax and accounting law. We never receive card, UPI or bank details.
- Marketing email: only if you separately opt in. You can withdraw at any time.
- Analytics: only if you accept analytics cookies.
2. Your rights
- Access: get a summary of your personal data and how it is processed (s.11).
- Correction and erasure: correct, complete, update or delete your data (s.12).
- Withdraw consent: as easily as you gave it (s.6(4)). Processing done before withdrawal remains lawful.
- Grievance redressal: complain to our Grievance Officer (s.13).
- Nominate: name a person to exercise your rights in case of death or incapacity (s.14).
- Escalate: if you are not satisfied with our response, complain to the Data Protection Board of India.
3. How to make a request
- Signed in: go to Dashboard → Privacy & Data. You can download a copy of your data instantly, or submit a request.
- By email: write to ram.entirelore@gmail.com from your registered email address.
- We acknowledge requests promptly and resolve them within 30 days.
4. Retention and deletion
- Account data is kept while your account is active and deleted after an erasure request is completed.
- Payment and invoice records are kept for up to 8 years, as required by Indian tax and accounting law (e.g. Income-tax Act, GST law), even after account deletion.
- Deleting your account permanently forfeits any unused credits, as described in the Credits Consumption Policy.
5. Children
The service is intended for users aged 18 and above. We do not knowingly process the personal data of children. If you believe a child has created an account, contact us and we will delete it.
6. Data breaches
If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by the DPDP Act and its Rules.
See also: Privacy Policy · Grievance Redressal · Cookie Policy