Privacy Policy

Effective Date: April 21, 2026 Last Updated: April 22, 2026 Platform: nakid.in Operated by: Lakshya Datta This Privacy Policy explains what personal data NAK-ID collects from you, why we collect it, how we use and protect it, and what rights you have over it. By using NAK-ID, you consent to the practices described in this policy. 1. Who We Are NAK-ID is a platform operated by Lakshya Datta, accessible at nakid.in. For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, NAK-ID is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data. For any privacy-related queries, contact us at: hello@nakid.in 2. What Personal Data We Collect NAK-ID collects only the data necessary to provide its services. We collect the following categories of personal data: 2.1 Account Data (via Internet Identity) When you sign in using Internet Identity (id.ai), NAK-ID receives only a unique anonymous identifier — your principal ID — specific to your NAK-ID account. Internet Identity does not share your name, email address, Google account details, or any other personal information with NAK-ID. We never see which authentication method (Google, Apple, Microsoft, or passkey) you used to sign in. Because NAK-ID does not receive your email address at sign-in, we ask you to provide a creator name when you first register a work. This name appears on your certificates and public portfolio. 2.2 Work Registration Data When you register a work on NAK-ID, we collect and store: • Work title and description (as entered by you) • Creator name (as entered by you) • File name, file size, and file category • SHA-256 hash of the file (a mathematical fingerprint — not the file itself) • The file itself, stored in Caffeine Object Storage (private, accessible only to you) • Date and time of registration • Your unique platform username (auto-generated from your name) 2.3 Payment Data When you purchase credits, payments are processed by Razorpay. NAK-ID receives a payment confirmation and the transaction ID. NAK-ID does not store your card number, UPI ID, bank account details, or any other financial credentials. These are handled entirely by Razorpay and are subject to Razorpay's Privacy Policy. 2.4 Usage Data NAK-ID may collect limited technical data to operate and improve the platform, including: • Browser type and device type (for compatibility purposes) • Approximate location (country/region, not precise location) • Pages visited and actions taken within the platform This data is used in aggregate and is not linked to your identity for marketing purposes. 3. Why We Collect Your Data and How We Use It We collect and use your personal data only for the following purposes: • To create and maintain your NAK-ID account; • To issue, store, and display your certificates of registration; • To generate your public portfolio page at nakid.in/@username; • To process credit purchases and maintain your credit balance; • To send you transactional communications (e.g. payment confirmations) — we do not send marketing emails without your explicit consent; • To respond to grievances or support requests; • To comply with applicable Indian law, including responding to lawful government requests. We do not use your personal data for targeted advertising, profiling, or sale to third parties. 4. What Is Public and What Is Private It is important to understand what NAK-ID makes publicly visible and what remains private: 4.1 Publicly Visible • Your portfolio page, including your creator name, username, work titles, descriptions, certificate IDs, and registration dates; • Your certificate page (/verify/NAK-XXXXXX), including all the above plus file name, file size, file category, and your SHA-256 content fingerprint. You accept this public visibility when you register a work. If you do not wish information to be publicly visible, do not register it on NAK-ID. 4.2 Private • Your email address — never shown publicly; • Your uploaded files — stored privately, accessible only to you when logged in; • Your payment history and transaction details; • Your Google account identifier. 5. Data Retention NAK-ID retains your personal data for as long as your account is active or as needed to provide services. Specifically: • Certificate records are written permanently to the Internet Computer Protocol (ICP) blockchain. These records cannot be deleted by you or by NAK-ID. This is a fundamental design feature of the platform and is disclosed to you before every submission. • Your uploaded files are stored in Caffeine Object Storage for as long as your account is active. • Account data (name, email) is retained for the duration of your account. If you close your account, account data will be deleted within a reasonable period, except where retention is required by law. • Payment records and transaction logs are retained for a minimum of one year from the date of the transaction, in accordance with the DPDP Rules 2025, and for such longer period as may be required under applicable financial or tax laws. 6. Third-Party Services and Data Sharing NAK-ID uses the following third-party services to operate the platform. Each has access to limited data only for the purpose of providing their service: • Google (id.ai) — authentication. Governed by Google's Privacy Policy. • Caffeine / Internet Computer Protocol (ICP) — file storage and permanent certificate record storage. Certificate data stored on ICP is publicly accessible on the blockchain by design. • Razorpay — payment processing. Governed by Razorpay's Privacy Policy. • Vercel — payment verification proxy. Handles payment confirmation data transiently; does not store personal data. NAK-ID does not sell, rent, or trade your personal data to any third party for commercial purposes. NAK-ID may disclose your data if required to do so by a court order, government authority, or applicable Indian law, including under the Information Technology Act, 2000. 7. Data Security NAK-ID takes reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include: • HTTPS encryption for all data in transit; • Private file storage — your uploaded files are accessible only to you when authenticated; • Payment processing via Razorpay, which is PCI-DSS compliant; • Permanent, tamperproof certificate storage on the ICP blockchain. No system is completely secure. In the event of a personal data breach that is likely to cause harm, NAK-ID will notify affected users and the Data Protection Board of India within 72 hours of becoming aware of the breach, as required by the DPDP Rules 2025. 8. Your Rights as a Data Principal Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data: 8.1 Right to Access You may request a summary of the personal data NAK-ID holds about you and the purposes for which it is being processed. 8.2 Right to Correction You may request correction of inaccurate or incomplete personal data. Your creator name and account details can be updated from your dashboard. 8.3 Right to Erasure You may request deletion of your personal data and closure of your account. NAK-ID will delete your account data and uploaded files upon request. However, certificate records written to the ICP blockchain are permanent by design and cannot be erased — this is disclosed before every registration. Payment and transaction records will be retained for the minimum period required by law. 8.4 Right to Withdraw Consent You may withdraw your consent to data processing at any time by closing your account. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. 8.5 Right to Grievance Redressal If you have a complaint about how NAK-ID handles your personal data, you may contact the Grievance Officer (see Section 10). If unsatisfied with the response, you may escalate to the Data Protection Board of India at its official portal. To exercise any of the above rights, write to hello@nakid.in with the subject line: Privacy Rights Request. 9. Children's Data NAK-ID is intended for users aged 18 and above. NAK-ID does not knowingly collect personal data from individuals under 18 without verifiable parental or guardian consent, as required by the DPDP Act. If you believe a minor has registered on NAK-ID without appropriate consent, please contact hello@nakid.in and we will investigate and take appropriate action. 10. Cookies and Local Storage NAK-ID uses minimal browser storage (such as localStorage) to maintain your session and store functional preferences such as language choice. NAK-ID does not use tracking cookies or third-party advertising cookies. No cookie consent banner is currently displayed as NAK-ID does not serve advertising or use cross-site tracking. 11. Changes to This Privacy Policy NAK-ID may update this Privacy Policy from time to time. When material changes are made, you will be notified via email or a notice on the platform. The updated policy will display a revised 'Last Updated' date at the top of this document. Continued use of NAK-ID after notification constitutes your acceptance of the revised policy. In accordance with the IT Rules 2021, users will be informed of any change to the privacy policy at least once a year. 12. Governing Law This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the DPDP Rules 2025, and the Information Technology Act, 2000 and rules made thereunder. Any dispute shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra. 13. Grievance Officer For any privacy-related complaints or requests, please contact our Grievance Officer: Name: Lakshya Datta Email: hello@nakid.in Address: Gurugram, Haryana, India Complaints will be acknowledged within 24 hours and resolved within 15 days of receipt. If you are not satisfied with the resolution, you may appeal to the Grievance Appellate Committee (GAC) at gac.gov.in within 30 days of receiving our response. You may also approach the Data Protection Board of India for complaints related to the DPDP Act.