India · Policy version 2026-11-04
Acceptable use policy
Draft for operator and legal review. Business identity, contact, provider details and retention arrangements are not yet finalized. Production registration remains closed until the operator completes and approves these policies.
Operator: Not yet specified
Privacy and grievances: Contact to be published before launch
Authorized financial records
Upload only records you own or are authorized to process. Minimize personal information and do not upload credentials, authentication secrets, or card security codes.
Prohibited activity
Do not attempt unauthorized access, credential stuffing, malware distribution, denial of service, data extraction from other accounts, unlawful profiling, fraud or circumvention of access restrictions. Do not intentionally submit misleading remarks or use output to deceive auditors or regulators.
Responsible reporting
Report suspected vulnerabilities privately to the operator’s published contact. Avoid accessing other people’s records or disrupting the service. Permission for security testing requires a written scope from the operator.
Enforcement
The operator may investigate abuse, restrict accounts and preserve records where legally required. Automated flags alone do not establish fraud or legal wrongdoing. Enforcement and grievances must follow applicable Indian law.
Indian data protection obligations have phased effective dates. The operator must confirm which provisions apply to its deployment and processing activities. Official MeitY DPDP Rules.