DPDP 2023
India data-protection aligned
GDPR
aligned for EU users
DPA
available on request
30 days
to answer rights requests
The laws we design our data-handling around, and how CIPHER supports each one.
The Digital Personal Data Protection Act, 2023 is India's core law for how personal data is collected, used and protected.
The Information Technology (Intermediary Guidelines) Rules, 2021 require reasonable security practices and a point of contact for grievances.
For users in the EU/EEA, we align our handling of personal data with the General Data Protection Regulation.
We process your data on clear legal grounds, and only for what the service needs. We do not sell personal data.
You have rights over your personal data. Here is what they are and how to use them.
How to exercise them: email hello@ciphercrm.co with your request. We verify it and respond within 30 days. Where CIPHER holds data on behalf of a customer, we route the request to that customer as the controller.
We use a small set of vetted sub-processors, each under contractual data-protection safeguards.
We can provide the canonical named list - with purpose and region - on request, and we commit to reasonable notice of material changes. International transfers, where they occur, are covered by mechanisms such as Standard Contractual Clauses (SCCs). A Data Processing Agreement covering Article 28 processing terms is available on request.
If a personal-data breach affects your data, we investigate, act to contain it, and notify affected customers and relevant authorities as required by contract and applicable law - including within statutory timelines such as the GDPR's 72-hour reporting window where it applies.
See our Security page for how we monitor for and respond to incidents.
Under India's IT Rules, 2021 and the DPDP Act, 2023, you can raise a data or privacy grievance with our Grievance contact at CIPHER Craft Pvt. Ltd.
✉️ hello@ciphercrm.co 📞 +91 97122 00017 📍 CIPHER Craft Pvt. Ltd., Rajkot, Gujarat, India
We acknowledge grievances and work to resolve them within the timelines set by applicable law.
For our EU/EEA users, CIPHER CRM aligns its personal-data handling with the GDPR: we process data on a lawful basis, honour data-subject rights, use sub-processors under contractual safeguards, and support international-transfer mechanisms such as Standard Contractual Clauses where relevant. We do not claim any certification; we can provide a Data Processing Agreement on request.
Yes - CIPHER Craft Pvt. Ltd. is a registered Indian company and we align our practices with India's Digital Personal Data Protection Act, 2023 and the IT Rules, 2021. We collect only the data we need, process it for clear purposes, support access/correction/erasure, and provide a grievance contact.
CIPHER CRM runs on reputable, industry-standard cloud infrastructure with provider-managed network and physical security controls. For the specific hosting region or data-residency arrangement for your organisation, contact us and we will confirm the details.
Yes. We offer a Data Processing Agreement covering how we process personal data on your behalf, our sub-processors, and international-transfer safeguards. Email hello@ciphercrm.co with the subject "DPA request" and we will share it.
Email hello@ciphercrm.co with your request (access, correction, deletion, portability or objection). We verify the request and respond within 30 days. If CIPHER holds the data on behalf of a customer, we route the request to that customer as the data controller.
We use vetted sub-processors for cloud hosting, transactional email and product analytics, each under contractual data-protection safeguards. We can provide the canonical named list, with purpose and region, on request and commit to reasonable notice of material changes.
Free demo · no card · live in 1-3 days · join 192+ businesses on CIPHER CRM.