1. Is all customer data stored within the India region?
Yes, all the customer data is stored in India on the AWS servers located in Mumbai, Maharashtra.
2. What is our Data Backup Strategy?
We have data replication in place along with periodic backup of the data.
3. Do we perform any kind of analytics or profiling on customer data? If yes, please specify and justify.
We perform limited analytics on customer data to monitor system performance. This includes metrics such as feature usage, error rates, and login activity. This information is used only to ensure that customers are able to use the product efficiently. We do not carry out any profiling of customers.
4. What processes are in place to support access, correction, and erasure requests from data principals?
We have a chat support active from 10 to 7 Mon to Sat, for any query user can raise a chat. Support team post verification, will assign this ticket to tech team for further resolution, if not resolved over the chat.
The tech team will resolve all the non-critical requests within 48 hours. Once resolved, the customer will get mail for the same.
5. What is our SLA for responding to Data Principal requests forwarded by a user?
The first response is within 1 hour. Depending on the type of request, the SLA is between 1 hour to 7 days.
6. Do we have a documented grievance redressal mechanism? Provide details.
Yes, users can escalate their grievance mentioned in Ticked ID (provided at time of chat support) to the Head of Customer Success. If still not resolved then it will be forwarded to DPO.
If a user wants to escalate, the contact details of DPO are mentioned on the website.
7. Do we have a designated Data Protection Officer (DPO)?
Yes, we have a designated DPO, one can reach out to DPO via suneet@letstranzact.com
8. What is our breach notification SLA?
We will notify customers without undue delay and no later than 24 hours after detection.
9. Do our employees undergo mandatory privacy and DPDPA training? How frequently?
Yes, every quarter we provide training to employees to keep them updated.
10.How often do we run table top exercises to test your Incident Response?
We run incident response tabletop exercises twice a year.
