Manage my data

Manage My Data

How to exercise your rights over your personal data, and what happens after you ask.

Version
2.0
Effective
26 July 2026
Applies to
Anyone whose personal data Shasam Technologies holds

Access, correction, and deletion requests should be clear.

Use this page to route privacy and data-handling requests to the Shasam team. Account-linked deletion requests may be verified against the corresponding account before execution.

What you can request

Access to account data, correction of inaccurate details, deletion review, or clarification on permissions.

What happens next

Requests are logged, validated against available account identifiers, and reviewed by the authorized operations team.

Before you submit

Include the mobile number or reference linked to your account if the request relates to an active profile.

Request form

Requests are sent to support@shasamtechnologies.com.

Scope

This is a general, company-level document. It covers this website and the way Shasam Technologies handles information as a company. No Shasam Technologies product is currently available to the public, so nothing here describes a consumer app. When a product ships it will publish its own notice, which will add to this document and override it only where it says so explicitly.

Cost
Free. No reason required.
Response
Within 30 days of a verified request.
Erasure completed
Within 30 days, except records law requires us to keep.
Data in a client’s system
Ask that organization - it decides, not us.

01What you can ask for

These are your rights as a Data Principal under the Digital Personal Data Protection Act, 2023. Exercising any of them is free, and you do not need to give a reason.

RightWhat you get
AccessA summary of the personal data we hold about you, what we are doing with it, and who we have shared it with.
Correction and completionInaccurate or misleading data corrected, and incomplete data completed.
ErasureYour data deleted, except records the law requires us to keep - we will tell you exactly which and why.
Withdraw consentProcessing we do on the basis of your consent stopped. As easy to withdraw as it was to give.
NominateAnother person authorised to exercise these rights for you if you die or become incapacitated.
GrievanceA complaint answered by a named Grievance Officer, before you need to involve anyone else.

02Make sure you are asking the right organization

This matters more than anything else on the page, because asking the wrong party wastes weeks.

  • Ask us if you contacted us through this website, applied for a job with us, or dealt with us directly as a client, supplier, or partner.
  • Ask the other organization if your data sits inside a system we built or operate for someone else. That organization decides what is collected and how long it is kept - it is the Data Fiduciary, and it holds the authority to act. We are only its processor.

If you are not sure which applies, ask us anyway. If it turns out we are only the processor, we will pass your request to the organization responsible and tell you we have done so, rather than leaving you to work it out. What we will not do is act on it ourselves, because we have no right to.

03What happens after you submit

  1. We acknowledge. You get confirmation that the request arrived, with a reference.
  2. We verify it is you. Handing your data to someone impersonating you would be a breach, so we confirm identity first - using the least information that makes us confident, usually just a reply from the address the data is associated with.
  3. We search what we hold. Across mailboxes, project records, and any system we run on our own behalf.
  4. We act, and we tell you what we did. Including anything we could not delete, which record it was, and the legal obligation that required it.
  5. We close it in writing, within 30 days. Verified erasure completes within 30 days.

Deleted data can persist in encrypted backups until those age out on their normal cycle. It is not used or restored in the meantime, and deletions are re-applied if a backup is ever restored - the retention policy explains why this is unavoidable.

04What helps us answer faster

  • Write from the email address the data is associated with, if you can. It is the quickest way to verify you.
  • Say which right you are exercising, in whatever words you like.
  • If it relates to a specific exchange, include a date or reference.
  • If your request is about a system we operate for another organization, name that organization.

Please do not send identity documents unless we ask for them. If we need more to verify you, we will say precisely what, and we delete verification material as soon as the request closes.

05If you are not satisfied

Tell us first - most problems are a misunderstanding we can fix quickly. Reply to the thread, or write to support@shasamtechnologies.com marking it for the Grievance Officer.

If we still have not put it right, you may complain to the Data Protection Board of India. You are not required to come to us first, but it is usually faster.

06Grievances and how to reach a person

If anything in this document, or anything we have done with your information, is not right, raise it with our Grievance Officer. You do not need to use any particular form of words.

We acknowledge grievances within 48 hours and aim to resolve them within 15 days, in line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

If you are not satisfied with our response on a personal-data matter, you may complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023. Approaching us first is not a precondition, but it is usually faster.

Have a question or an idea worth moving?