Digital Personal Data Protection Act, 2023

Data Protection & DPDP Rights

Official Data Principal Rights Guide • Rison AI Tech (GSTIN: 06CDBPS8926D2ZE)

Rison AI Tech is dedicated to building trustworthy, secure, and privacy-first enterprise AI infrastructure. This guide explains how you can exercise your statutory rights as a Data Principalunder India's DPDP Act, 2023 and the DPDP Rules, 2025.

1. Statutory Framework & Data Fiduciary Role

India's Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) and the Digital Personal Data Protection Rules, 2025 govern the processing of digital personal data within the territory of India.

Under the Act, Rison AI Tech operates as a Data Fiduciary for all personal data collected through our public website, contact forms, AI chatbot, and direct communication channels. We collect data solely for lawful, transparent, and explicitly specified purposes (such as evaluating client requirements and providing customized AI automation proposals).

Phased Implementation Notice: The Central Government of India brings various provisions of the DPDP Act and Rules into force through official commencement notifications. Rison AI Tech proactively implements notice, consent, security, and rights-handling mechanisms to ensure full technical and operational readiness.

2. Your Rights as a Data Principal

Chapter III of the DPDP Act provides Indian citizens with specific statutory rights regarding their personal data:

Right to Access Information (Section 11)

Section 11

You have the right to request a summary of the personal data about you that is being processed by Rison AI Tech, the processing activities being undertaken, and the identities of any Data Processors or third parties with whom your data has been shared.

Right to Correction & Erasure (Section 12)

Section 12

You have the right to request the correction of inaccurate or misleading personal data, completion of incomplete data, updating of outdated records, and the erasure of personal data that is no longer necessary for the purpose for which it was originally collected.

Right of Grievance Redressal (Section 13)

Section 13

You have the right to readily available grievance redressal mechanisms regarding any act or omission of Rison AI Tech concerning your personal data. We provide an SLA-bound response to all inquiries before any escalation to the Board.

Right to Nominate (Section 14)

Section 14

You have the right to nominate any individual who shall, in the event of your death or incapacity, exercise your data protection rights in accordance with the provisions of the DPDP Act.

Right to Withdraw Consent (Section 6(4))

Section 6(4)

Where processing is based on consent, you may withdraw that consent at any time. The process of withdrawing consent is as simple as granting it and will immediately halt further non-statutory processing.

3. How to Submit a Data Principal Request

To exercise any of the statutory rights described above, please send a written request to our dedicated privacy desk:

To: hello@risonaitech.com

Subject: [DPDP Request] - [Specify Right: Access / Correction / Erasure / Nomination / Withdrawal]

Body details to include:

  • Full Name and contact details (phone number or email previously used).
  • Clear description of your request (e.g., “Request summary of personal data held” or “Request complete erasure of contact enquiry”).
  • If nominating an individual, name and verified contact details of the nominee.

Initial Acknowledgment

Within 48 Hours

Statutory Resolution

Within 30 Days

Statutory Fee

₹0 (Zero Fee)

4. Grievance Redressal Mechanism & DPBI Escalation

In compliance with Section 13 of the DPDP Act and the DPDP Rules, 2025, Rison AI Tech maintains a designated Grievance Redressal Desk to investigate and resolve data protection concerns:

Grievance Redressal Contact

Contact Person: Yogesh Kumar Wadhwa (Founder & Lead Engineer)

Entity: RisonAI Tech (GSTIN: 06CDBPS8926D2ZE)

196, Ground Floor, New RK Puram, Panipat 132103, Haryana, India

Email: hello@risonaitech.com

Phone: +91 90504 86448

Escalation to Data Protection Board of India: Under Section 13(3) of the Act, if your grievance is not resolved to your satisfaction within thirty (30) days from the date of submission, you have the statutory right to file a complaint before the Data Protection Board of India (DPBI) in the digital format prescribed under the DPDP Rules.

5. Notice in Eighth Schedule Languages

Pursuant to Section 5(3) of the DPDP Act, 2023, you have the option to receive this Data Protection Notice and summary of your personal data in English or any of the 22 languages specified in the Eighth Schedule to the Constitution of India (including Hindi, Bengali, Telugu, Marathi, Tamil, Gujarati, Urdu, Kannada, Malayalam, Punjabi, etc.). Please submit your language preference request to hello@risonaitech.com.