This Privacy Policy explains how DotPlus Technologies Private Limited ("Daakiaa", "we") collects, uses, keeps and protects personal data when you use daakiaa.com and the Daakiaa email service. We process personal data under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
What we collect
- Account details: name, company, domain, contact email and, if you give it, mobile number.
- Verification documents: for individuals, the front and back of the Aadhaar card and the name on it; for businesses and organisations, the GST registration certificate and GSTIN or another government registration document, with the legal name. You may upload a masked Aadhaar (only the last 4 digits shown), and we encourage it.
- Your mail and files: messages, contacts, calendars and files stored in your mailboxes.
- Security and usage records: sign-in times, IP addresses, devices, sending volume, mail delivery logs and administrator actions.
Why we use it
- To provide the Service: deliver and store your mail and keep your account working.
- To verify new accounts and prevent spam, fraud and abuse. Verification documents are used only for this purpose. We do not use Aadhaar for authentication with UIDAI and do not share it for any other purpose.
- To keep the Service and your account secure, investigate misuse, and meet our legal duties.
- To send you important messages about your account. We do not show ads, do not sell personal data, and never use the contents of your mail for advertising.
How we protect it
- Verification documents are encrypted (AES-256) before they are stored, kept in private storage that is not reachable from the internet, and can be opened only by Daakiaa's verification team. Every opening is recorded.
- Connections to webmail, phones and mail apps are encrypted. Access to systems is limited to staff who need it, protected by 2-step verification and recorded in audit logs.
How long we keep it
- Mail and files: until you or your administrator delete them, or the account is closed.
- Verification documents of approved accounts: while the account exists, and longer only where the law or an investigation requires it. Documents that were rejected or replaced: deleted after 30 days.
- Security and system logs: 180 days, as required by the CERT-In directions of April 2022. Administrator audit records: up to one year.
- Records of accounts closed for misuse: as long as needed for legal proceedings.
When we share it
We do not sell or rent personal data. We share it only with service providers that host and run our infrastructure under confidentiality obligations; with law enforcement agencies, courts, CERT-In or other authorities when the law requires it or to report suspected crime and abuse; and to protect the rights and safety of Daakiaa, our customers and the public.
Your rights
Under the DPDP Act, 2023 you may ask for a summary of your personal data, ask us to correct or erase it, withdraw consent, and nominate another person. Some data cannot be erased while the account is active or when the law requires us to keep it. Write to support@daakiaa.com or to our Grievance Officer at legal@daakiaa.com.
Cookies and analytics
This website (daakiaa.com) uses Google Analytics, a service of Google LLC, to count visits and understand which pages are useful. It sets first-party cookies (such as _ga) and sends information about your visit (pages viewed, approximate location, device and browser) to Google. We do not use advertising cookies, and we do not send names, email addresses or codes to Google. You can block these cookies in your browser or with Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
The webmail, the setup pages and your mailboxes use no analytics at all: only the cookies needed to keep you signed in securely.
Grievance Officer
For any complaint about how we handle personal data or content, write to our Grievance Officer: Mr. Amit Kr. Arun, Grievance Officer, DotPlus Technologies Private Limited, email legal@daakiaa.com. We acknowledge complaints within 24 hours and resolve them within 15 days.
Changes
We may update this policy and will publish the new version here; important changes are emailed to account administrators.