Skip to main content
CompetitorX.

Legal · Last updated 2026-04-21

Privacy Policy

This policy describes how Talpro India Pvt Ltd (“Talpro”, “we”, “us”) — operating the CompetitorX consulting service on competitorx.cloud — collects, uses, shares, and retains personal data. It is aligned with the Digital Personal Data Protection Act 2023 (“DPDPA”), the GDPR where relevant, and our internal Responsible AI standard.

1. Who we are

Talpro India Pvt Ltd (CIN: U74140KA2007PTC042887, GSTIN: 29AAHCT9485A1ZX) is the Data Fiduciary under the DPDPA. CompetitorX is a trade identity of Talpro. Registered office: Bangalore, Karnataka, India.

2. Data we collect

We collect only what is necessary to respond to your enquiry, deliver the engagement, or meet a legal obligation. Specifically:
  • Lead form data: name, work email, company, optional message, selected service tier.
  • Payment data: Razorpay handles card and UPI data directly — we never receive or store payment instrument numbers.
  • Newsletter data: email + optional name, when you opt in to the Beehiiv digest.
  • Operational logs: IP address, user agent, timestamp, and page path — stored for 90 days for abuse prevention.
  • No tracking cookies: the site uses no third-party analytics cookies, no advertising pixels, and no cross-site trackers at launch.

3. Purpose and lawful basis

We process personal data for the following purposes under DPDPA §6 (consent) and §7 (legitimate use):
  • Service delivery — respond to your enquiry, scope an engagement, deliver the work, issue invoices.
  • Newsletter — send the digest if you opted in; one-click unsubscribe always present.
  • Abuse and fraud prevention — rate limiting, honeypot, and signature verification on payment flows.
  • Legal compliance — tax, accounting, and regulatory retention.

4. Data residency

All primary data is stored in ap-south-1 (Mumbai) on Oracle Cloud Infrastructure. Razorpay processing is India-based. Beehiiv (newsletter) is US-based and acts as a sub-processor under a Data Processing Addendum. No raw PII ever leaves our in-region perimeter except the email address required to deliver the newsletter.

5. Retention

  • Lead form data: 24 months from last contact, then purged.
  • Operational logs: 90 days, then purged.
  • Invoices and tax records: 8 years, per the Companies Act 2013 and Income Tax Act 1961.
  • Newsletter subscriber data: until you unsubscribe, plus a 30-day suppression window.

6. Your rights under the DPDPA

You have the right to:
  • Access a summary of the personal data we hold about you.
  • Correct or update inaccurate data.
  • Erase data we hold about you, subject to legal retention.
  • Withdraw consent for marketing at any time.
  • Nominate another individual to exercise your rights.
  • File a grievance — see section 8.

To exercise any right, email privacy@competitorx.cloud. We respond within 7 working days.

7. Sharing with sub-processors

We use a small set of named sub-processors, each under a Data Processing Addendum:
  • Razorpay Software Pvt Ltd — payment processing (India).
  • Oracle Cloud Infrastructure (Mumbai) — hosting and object storage.
  • Beehiiv Inc. — newsletter delivery (US; SCCs signed).
  • Cloudflare Inc. — CDN and DDoS protection.
We never sell personal data. Ever.

8. Grievance Officer

Per DPDPA §8(9) and the Consumer Protection Act 2019:

Grievance Officer: Bhaskar Anand

Talpro India Pvt Ltd, Bangalore, Karnataka, India

Email: grievance@competitorx.cloud

Response window: 15 working days from receipt.

9. Children

CompetitorX is a B2B service and is not directed at individuals under 18. We do not knowingly collect data from minors.

10. Changes

Material changes to this policy will be announced at least 14 days before taking effect, via email to subscribers and a banner on this page. The version date at the top always reflects the latest update.
← Back home