Privacy Notice

Last updated: 26 October 2026

Defendz (“we”, “us”) is a cybersecurity firm based in Hyderabad, Telangana. This notice explains what personal data we collect when you use defendz.in, why, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act). We are the Data Fiduciary for this data.

What we collect and why

Data When Why
Website address you submit Free DPDP check To run the check you asked for
Email address, and your name if you give it Free DPDP check, contact form To send you your result or reply to your enquiry
Phone, business name, message Contact form (optional fields) To reply to your enquiry
A one-way scrambled (hashed) form of your IP address Free DPDP check To prevent abuse (limits on how many checks can be run)
Check results Free DPDP check To show you your report and send you the link
Payment ID, order ID, amount When you buy a report To unlock your report, keep accounts and handle refunds
Your choice about tips and offers Free DPDP check To send DPDP tips and offers only if you ticked the box

We do not receive or store your card, UPI or bank details. Razorpay handles payments directly.

We do not use advertising or tracking cookies, and we do not sell your data.

Who we share it with

We use these service providers (Data Processors) to run the service. They may only use your data to provide their service to us:

  • Cloudflare (website hosting, database, bot protection with Turnstile)
  • Razorpay (payments)
  • Brevo (sending emails)
  • Telegram (instant alerts to our team about new enquiries and checks)

Some of these providers may process data outside India. We may also disclose data if required by law.

How long we keep it

  • Free check data: 12 months, then deleted.
  • Purchase records: as long as tax and accounting law requires.
  • Contact enquiries: 24 months after our last conversation.
  • Tips and offers: until you unsubscribe or withdraw consent.

How we protect it

The site is served only over HTTPS with strict security headers. Report links are long, random and private. Database access is restricted to our team, and we do not store IP addresses in readable form.

Your rights

Under the DPDP Act you can:

  • access a summary of the personal data we hold about you and how we use it;
  • correct, complete, update or erase your data;
  • withdraw consent at any time (for example, by clicking “unsubscribe” in any email or by writing to us). Withdrawing is as easy as giving consent, and it doesn’t affect anything we did before you withdrew;
  • nominate someone to exercise your rights if you die or become unable to;
  • raise a grievance with us.

To use any of these rights, email privacy@defendz.in (or support@defendz.in) from the email address you used. We will reply within 30 days.

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Children

Our services are for businesses. We do not knowingly collect personal data from anyone under 18.

Changes

If we change this notice, we will update the date above and, for significant changes, tell people who have an account or have bought from us.

Contact

Grievance contact: Defendz, Hyderabad, Telangana, India · privacy@defendz.in · +91 93464 67034