DPDPA Compliance Summary

Digital Personal Data Protection Act (India) Readiness

Jugaad AI (Orangelabz) is deeply committed to aligning its operations and AI infrastructure with the Digital Personal Data Protection Act, 2023 (DPDP Act). We act as a Data Fiduciary for our direct operations and a Data Processor when operating AI agents on your behalf.

1. Lawful, Fair, and Transparent Processing

We ensure that clear, affirmative consent is obtained from Data Principals where required. For outbound prospecting (e.g., WhatsApp SDR), we strictly adhere to B2B reasonable purpose standards and integrate instant opt-out/stop mechanisms into all agent scripts.

2. Purpose Limitation & Data Minimization

Our agents, such as the Deal Scorer and MemoryAgent, only retain the minimum conversational data necessary to qualify leads and progress the sales pipeline. Data is not repurposed for unrelated training without explicit, itemized consent.

3. Technical Safeguards (Security & Localization)

To prevent personal data breaches, Jugaad AI implements enterprise-grade security protocols:

• Local Hosting: Indian data residency via AWS Mumbai/local clusters for our Enterprise Tier.
• LLM Anonymization: We strip Personally Identifiable Information (PII) before routing data to public LLMs (like Claude/GPT-4o) and utilize on-prem Llama-3.3 arrays for highly sensitive workloads.
• Role-Based Access: Stringent access control restricting employee access to your isolated MemoryAgent context windows.

4. Grievance Redressal

We have established a dedicated grievance mechanism. Data Principals have the right to request access, correction, or erasure of their personal data. Please contact our appointed Data Protection Officer at compliance@orangelabz.com.