Governing the Collection, Storage, Processing, and Transfer of Personal Data
ISSUED BY: Launzr Private Limited
CORPORATE IDENTIFICATION NUMBER (CIN): U62012BR2025PTC080111
REGISTERED OFFICE: Launzr Private Limited, C/O- Lalit Sah, Ward no. 06, Near Pustakalaya, Dhadiya, Dharia, Kamtaul, Darbhanga, Bihar,-847304 India.
DATE OF EFFECT: February 07, 2026
DOCUMENT CONTROL NO: LPL/LEGAL/PRIVACY-2026/V3
This Master Privacy Policy (hereinafter referred to as the "Policy" or "Framework") is published in strict compliance with the statutory mandates enshrined under:
This document constitutes an "Electronic Record" within the meaning of Section 2(t) of the Information Technology Act, 2000, and the rules thereunder. This Policy requires no physical, electronic, or digital signature to be legally binding and enforceable.
By accessing the platform [www.launzr.com]/[www.launzr.in], availing of our professional services, or utilizing our proprietary software (including "NexLibrary"), the User (hereinafter "Data Principal") unequivocally acknowledges having read, understood, and agreed to the terms herein. Continued use of the Services constitutes an affirmative act of consent under Section 6 of the DPDP Act, 2023.
This Policy governs the processing of Personal Data:
In this Policy, unless the context otherwise requires, the following terms shall have the meanings ascribed to them:
Launzr adheres to the Principle of Data Minimization, collecting only such Personal Data as is strictly necessary for the specified purpose.
(a) Identity & Verification Attributes (KYC Data):
(b) Corporate & Professional Attributes:
(c) Financial & Fiscal Attributes:
(a) Device & Network Information:
Internet Protocol (IP) Address, Media Access Control (MAC) Address, Device Type (Mobile/Desktop), Operating System (OS) Version, Browser Type and Version, Time Zone Setting.
(b) Usage & Interaction Data:
Uniform Resource Locators (URLs) clickstream to, through, and from our Website (including date and time); products viewed or searched for; page response times; download errors; length of visits to certain pages; page interaction information (scrolling, clicks, and mouse-overs).
Launzr may receive Personal Data from credit reference agencies, government registries (MCA Master Data), and public databases for the purpose of verification and due diligence (Know Your Customer / Anti-Money Laundering checks).
Launzr processes Personal Data solely for the "Specified Purposes" outlined below, relying on the corresponding "Lawful Basis".
| Specified Purpose | Detailed Description of Processing | Lawful Basis |
|---|---|---|
| Contractual Performance | Drafting legal deeds, filing incorporation forms (SPICe+), developing software, hosting websites, and delivering professional advisory services. | Performance of Contract (Section 6(a) DPDP Act; Art. 6(1)(b) GDPR) |
| Statutory Compliance | Filing Annual Returns, GST Returns, TDS Returns, maintaining Statutory Registers (MGT-1, MGT-2), and complying with MCA/Income Tax notices. | Legal Obligation (Section 6(b) DPDP Act; Art. 6(1)(c) GDPR) |
| Identity Verification | Verification of identity for DSC issuance, PMLA compliance, and fraud prevention protocols. | Public Interest / Legal Obligation |
| Legitimate Business Interest | Network security monitoring, preventing DDoS attacks, improving UI/UX of NexLibrary, internal auditing, and dispute resolution. | Legitimate Interest (Section 6(c) DPDP Act; Art. 6(1)(f) GDPR) |
| Marketing & Outreach | Sending newsletters, promotional offers, and updates on regulatory changes (e.g., "New GST Rates"). | Consent (Affirmative Opt-in) |
Consent shall be free, specific, informed, unconditional, and unambiguous. By clicking "I Accept," "Register," or "Submit" on our platforms, the Data Principal provides a clear affirmative action signifying agreement to the processing of their Personal Data.
The Data Principal retains the absolute right to withdraw consent at any time. Such withdrawal must be communicated in writing to the Grievance Officer.
Launzr maintains a strict "Need-to-Know" disclosure policy. Personal Data is disclosed only to the following categories of recipients:
The Data Principal explicitly acknowledges that for the provision of Corporate Services, Launzr acts as a facilitator to submit data to public registries. Data is disclosed to:
Launzr engages third-party processors under robust Data Processing Agreements (DPAs) that mandate confidentiality and security standards equivalent to this Policy.
Launzr may disclose Personal Data if required to do so by law or in the good faith belief that such access, preservation, or disclosure is reasonably necessary to:
For Data Principals located outside India, Personal Data is transferred to, stored, and processed in India. India acts as the central hub for Launzr's operations.
Launzr implements legally mandated "Reasonable Security Practices and Procedures" (IS/ISO/IEC 27001) to protect Personal Data.
Encryption:
Access Control:
Multi-Factor Authentication (MFA) enforcement for administrative access. Strict Role-Based Access Control (RBAC) ensuring employees access data only on a "Need-to-Know" basis.
Hashing:
Passwords are never stored in plain text; they are salted and hashed using bcrypt or Argon2 algorithms.
Perimeter Defense:
Deployment of Web Application Firewalls (WAF), Intrusion Detection Systems (IDS), and regular Vulnerability Assessments and Penetration Testing (VAPT).
Launzr retains Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, tax, accounting, or reporting requirements.
| Category of Data | Retention Period | Statutory Reference |
|---|---|---|
| Corporate Records (MoA, AoA, Incorporation Cert.) | Permanent | Constitutive Documents of the Entity. |
| Books of Accounts & Vouchers | 8 Years | Section 128(5), Companies Act, 2013. |
| Income Tax Records | 8 to 10 Years | Section 147/148, Income Tax Act, 1961. |
| GST Records | 72 Months (6 Years) | Section 36, CGST Act, 2017. |
| Project Source Code | 12 Months (Post-Handover) | Backup & Warranty Period. |
| Server Logs | 180 Days (Rolling) | CERT-In Directions (No. 20(3)/2022). |
Destruction Protocol: Upon expiration of the retention period, physical documents are shredded, and digital data is securely wiped (using NIST 800-88 Guidelines) to ensure it is irretrievable.
Subject to applicable laws, the Data Principal is vested with the following rights:
Exercise of Rights: Requests must be submitted to the Grievance Officer via email. Launzr shall respond within 72 hours and resolve the request within 30 days.
The Data Principal acknowledges that Launzr provides services relying on third-party infrastructure (Government Portals, Payment Gateways). Launzr shall not be liable for any breach of security, data leak, or loss of data occurring on:
Launzr shall not be held responsible for any loss, damage, or misuse of Personal Data attributable to a Force Majeure Event (acts of God, war, cyber-terrorism, failure of public utility/telecommunication networks).
This Policy shall be governed by, interpreted, and construed in accordance with the substantive laws of the Republic of India, without regard to conflict of law principles.
In the event of any dispute arising out of or in connection with this Policy, including any question regarding its existence, validity, or termination, the parties shall first attempt to resolve the dispute amicably. If unresolved within 30 days, the dispute shall be referred to Sole Arbitration in Mumbai, India, in accordance with the Arbitration and Conciliation Act, 1996. The language of arbitration shall be English.
Subject to the Arbitration clause, the Courts at Mumbai, Maharashtra shall have exclusive jurisdiction.
In accordance with Rule 5(9) of the IT Rules, 2011 and Section 13 of the DPDP Act, 2023, the contact details of the Grievance Officer are published below:
Name: Aaditya Jha
Designation: Data Protection & Grievance Officer
Email Address: privacy@launzr.com
Postal Address: Launzr Private Limited, C/O- Lalit Sah, Ward no. 06, Near Pustakalaya, Dhadiya, Dharia, Kamtaul, Darbhanga, Bihar,-847304 India.
Contact Number: 9867358861 (Available Mon-Fri, 10 AM - 6 PM IST)
The Grievance Officer shall acknowledge the complaint within twenty-four (24) hours and dispose of such complaint within a period of fifteen (15) days from the date of its receipt.
This document contains proprietary legal framework and shall not be reproduced without authorization.