Terms of Service

By accessing or using dpdpaready.in (the Platform), creating an account, downloading a template, or using any free utility we publish, you agree to be bound by these Terms of Service (Terms) and our Privacy Policy. If you are entering into these Terms on behalf of an organisation, you confirm that you are authorised to bind that organisation.

If you do not agree with any part of these Terms, please do not use the Platform. We may update these Terms from time to time; material changes will be notified by email or via an in-platform banner at least seven days before they take effect.

DPDPAReady provides a suite of tools designed to help Data Fiduciaries operate in alignment with the Digital Personal Data Protection Act, 2023 (DPDPA). The current scope includes:

• Consent collection forms and consent lifecycle management
• Encrypted data principal vaults and rights-request handling workflows
• Audit logs, evidence packs and DPO-ready reporting
• Editorial articles, explainers and reference material on DPDPA compliance
• Free tools, including the Penalty Calculator and the Consent Form Generator

Specific features may be added, modified or retired as the Platform evolves. We will give reasonable notice before sunsetting any paid feature.

To register for an account you must:

• Be at least 18 years old and competent to contract under the Indian Contract Act, 1872
• Sign up using a valid business email address (personal email providers may be blocked at our discretion)
• Be duly authorised to represent the organisation under whose name the account is created
• Provide accurate, current and complete information and keep it updated

You are responsible for safeguarding your credentials and for all activity that occurs under your account. Notify us promptly at security@dpdpaready.in if you suspect unauthorised access.

Our free tools — including but not limited to the Penalty Calculator and the Consent Form Generator — are provided as practical aids to help you understand the shape of DPDPA obligations.

• The Penalty Calculator produces an estimate based on the penalty bands set out in the Schedule to the DPDPA. It is not a prediction of what the Data Protection Board of India will actually impose in any given case.
• The Consent Form Generator outputs template language intended as a starting point. You remain responsible for tailoring the form to your actual processing activities and for ensuring it meets Sections 5 to 7 of the DPDPA.

Neither the outputs nor the underlying tools constitute legal advice. For advice on your specific circumstances, please consult qualified Indian counsel.

Articles, guides, case notes and other editorial content published on the Platform are produced for general informational purposes only. They reflect our reading of the DPDPA, allied rules and publicly available regulatory commentary as at the date of publication.

Editorial content does not constitute legal opinion, does not create an advocate-client relationship, and should not be relied upon as a substitute for professional advice. See our full Disclaimer page for further detail. Where an article cites a statutory provision, please verify the current text on the official India Code repository before acting on it.

The Platform — including its source code, user interface, branding, editorial content, datasets and audit logic — is owned by Memorylane Digital LLP and protected by Indian and international copyright, trademark and database-rights law.

• Free templates: consent forms, notices and policy templates we publish at no charge are licensed under the MIT License. You may copy, modify, distribute and use them commercially, with attribution preserved in the template source.
• Paid templates and modules: licensed separately under the commercial licence delivered with the purchase. Redistribution, sub-licensing or resale is not permitted without written consent.
• Your content: you retain all rights in the data and content you upload. You grant us a limited, non-exclusive licence to process it solely to provide the services.

You agree to operate the Platform in good faith and in compliance with applicable law, including the DPDPA, the Information Technology Act, 2000 and any sectoral regulator requirements that apply to your business.

You acknowledge that using DPDPAReady does not absolve you of your independent statutory duties as a Data Fiduciary — including the duties to obtain valid consent, to provide notice, to respond to data principal rights requests, to notify breaches, and to appoint a Data Protection Officer where required. Our tools assist you in discharging these duties; they do not discharge them on your behalf.

You will not use the Platform to process data in violation of law, to send unsolicited commercial communications, or to attempt to reverse-engineer, scrape, or stress-test the Platform without written permission.

Our verification badge (the DPO Stamp) is a separate, opt-in program with its own eligibility criteria, audit methodology and revocation policy. Use of the badge is governed by the supplementary terms published at /blog/tools/dpo-stamp/, which form part of these Terms when you enrol.

We reserve the right to revoke a badge if the underlying compliance posture materially deteriorates or if the badge is misused in marketing material. Revocation decisions are reviewable on written request.

Access to free tools and editorial content is provided at no charge. Paid tiers — covering advanced vault capacity, multi-entity audit workflows and premium templates — are scheduled for release in Q3 2026.

When paid tiers go live, pricing will be displayed in Indian Rupees (INR), exclusive of applicable GST. Invoices will be raised by Memorylane Digital LLP and payable within the period stated on the invoice. Late payments may attract interest at the rate notified under Section 16 of the MSMED Act, 2006, where applicable. We will give existing users at least 30 days' notice before any feature they currently use becomes paid.

Each party may receive non-public information from the other in the course of using the Platform. The receiving party will:

• Use confidential information only to perform its obligations or exercise its rights under these Terms
• Protect it with the same degree of care it uses for its own confidential information, and no less than reasonable care
• Not disclose it to third parties except to employees, contractors and advisors who are bound by equivalent confidentiality obligations and who need to know

These obligations survive termination for a period of three years, or indefinitely for information that constitutes a trade secret under Indian law.

To the maximum extent permitted by law, neither party will be liable to the other for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, goodwill or data, arising out of or in connection with these Terms — even if advised of the possibility of such damages.

Each party's aggregate liability arising out of or related to these Terms, whether in contract, tort or otherwise, will not exceed the total fees paid or payable by you to DPDPAReady in the twelve (12) months preceding the event giving rise to the claim. For users on free tiers, aggregate liability is capped at INR 10,000.

Nothing in this clause limits liability for fraud, wilful misconduct, or any liability that cannot be excluded under Indian law.

The indemnity below is mutual.

• You agree to indemnify DPDPAReady against third-party claims arising from your unlawful processing of personal data, your breach of these Terms, or your misrepresentation of the verification badge.
• DPDPAReady agrees to indemnify you against third-party claims that the Platform, as supplied and used in accordance with these Terms, infringes the intellectual property rights of a third party in India.

The indemnifying party's obligations are conditional on the indemnified party promptly notifying it of the claim, granting reasonable control of the defence, and providing reasonable cooperation. Settlements affecting the indemnified party's rights require its prior written consent, not to be unreasonably withheld.

Either party may terminate these Terms:

• For convenience: by giving the other party thirty (30) days' written notice
• For cause: immediately, if the other party commits a material breach and fails to cure it within fifteen (15) days of written notice
• For insolvency: immediately, if the other party becomes insolvent, enters liquidation or has a resolution professional appointed under the Insolvency and Bankruptcy Code, 2016

On termination, your access to paid features will cease. We will retain your data for thirty (30) days to allow export, after which it will be deleted in line with our retention schedule, except where retention is required by law. Clauses on intellectual property, confidentiality, limitation of liability, indemnification and governing law survive termination.

These Terms are governed by and construed in accordance with the laws of India, without regard to conflict-of-laws principles.

Any dispute, controversy or claim arising out of or relating to these Terms — including their existence, validity, interpretation, performance, breach or termination — will be referred to and finally resolved by arbitration under the Arbitration and Conciliation Act, 1996.

• Number of arbitrators: one, appointed jointly by the parties; failing agreement within thirty days, appointed in accordance with the Act
• Seat and venue of arbitration: New Delhi
• Language: English

Subject to the arbitration clause above, the courts at New Delhi will have exclusive jurisdiction over any matters not subject to arbitration, including applications for interim relief. Memorylane Digital LLP can be contacted at legal@dpdpaready.in for any notices under these Terms.