ToolBharat
ToolsPricingBlogAboutContact
ToolBharat

Free online tools built for India. Fast, private, mobile-first.

Tools

  • PDF Tools
  • Image Tools
  • Data Tools
  • India Tools
  • All Tools

Company

  • About
  • Blog
  • Contact
  • Pricing

Legal

  • Privacy Policy
  • Terms of Service
  • DPDP Compliance

© 2026 ToolBharat. All rights reserved.

Made with 💙 in India

Home/DPDP Compliance

DPDP Compliance

Last updated: 17 July 2026

Our Privacy Policy covers what we collect and why. This page is narrower: it lays out specifically how ToolBharat meets its obligations under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), for anyone who wants that detail without reading through the whole privacy policy.

1. Our role under the Act

ToolBharat acts as a Data Fiduciary for the personal data we collect from users of our website, meaning we’re the one deciding why and how that data is processed, and we’re accountable for it. Where we use third-party infrastructure providers, such as Neon for our database or Render for hosting, they act as our Data Processors and only handle data on our instructions.

2. The personal data we actually handle

We’ve kept this list short on purpose, because we’ve tried to build ToolBharat to need as little personal data as possible. If you create an account, that’s an email address, an optional name, and a hashed password. If you don’t create an account, which is most people, since almost every tool works without signing in, we hold nothing that identifies you beyond a hashed IP address kept briefly to prevent abuse. We also use PostHog, configured narrowly (no session recording, no autocapture, anonymized IPs), to count visitors and see which pages get used — it never sees file contents and isn’t linked to your account. Full detail, including our plans to add Google Analytics behind a cookie-consent banner for organic-search reporting, is in the Privacy Policy.

3. Consent

We ask for your consent before collecting personal data that requires it, mainly at signup, and we explain what that data is used for at the point we ask. You can withdraw consent at any time by closing your account from your Profile page or by writing to us. Withdrawing consent won’t affect anything you did while it was active, but it will stop future processing tied to your account.

4. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

  • Get a summary of the personal data we hold about you and how it’s being used.
  • Ask us to correct, complete, or update inaccurate data.
  • Ask us to erase data that we no longer need for the purpose it was collected, or that you’ve withdrawn consent for.
  • Nominate another individual to exercise these rights on your behalf if something happens to you.
  • Register a complaint if you think we’ve mishandled your data, both with us directly and, if unresolved, with the Data Protection Board of India.

To exercise any of these, use your Profile page for the things it supports directly, or write to connect@toolbharat.com. We aim to respond within a reasonable time and won’t make you jump through hoops to do something the law already entitles you to.

5. Grievance redressal

If you have a complaint about how your personal data has been handled, email us at connect@toolbharat.com with the word “Grievance” in the subject line so it doesn’t get lost in the regular inbox. A real person on our team reads and responds to these, not a support queue that goes nowhere. If you remain unsatisfied with how we’ve handled a complaint, you’re entitled to escalate it to the Data Protection Board of India once it is operational.

6. Where your data is processed

We’re not going to tell you your data stays in India when it doesn’t. Our database currently runs on Neon’s Singapore region, the closest region Neon offers to India, and our application servers run on Render. The DPDP Act restricts cross-border transfer only for specific categories of data that the Government of India may separately notify from time to time; as of this writing, no such restriction applies to the kind of data ToolBharat processes. If that changes, or if we move infrastructure, we’ll update this page.

7. How long we keep data

We keep account data for as long as your account is active, and delete it within a reasonable period after you close your account, aside from anything we’re required to retain for legal or accounting reasons. Files you process through our tools are generally never stored at all, since the processing happens in your browser. See the Privacy Policy for the small number of exceptions we plan to build, and how those will be handled once they exist.

8. Data breach notification

If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required under the Act and its rules. We don’t currently have a specific incident to report, and we hope to never need this section for anything other than reference.

9. Children’s data

ToolBharat isn’t designed for children. We don’t knowingly collect personal data from anyone under 18 without verifiable consent from a parent or lawful guardian, and we don’t show behavioural advertising or track children for the purpose of targeted content, largely because we don’t run tracking advertising on the site at all.

10. Keeping this page current

The DPDP Act’s rules are still being finalised in parts, and our own product keeps changing too. We’d rather update this page as things actually change than publish something once and let it go stale. If you spot something here that no longer matches how ToolBharat actually works, tell us, we mean that genuinely.