Privacy Policy & Data Protection Notice

The Indus Pulse ("Platform", "we", "us", or "our") is dedicated to safeguarding your personal data, privacy, and digital trust. This Privacy Policy details our comprehensive standards for collecting, processing, storing, and protecting your personal data when you access theinduspulse.com, our market feeds, and digital news intelligence services.

We operate as a Data Fiduciary in full compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), the Information Technology Act, 2000 (IT Act, 2000), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

1. Data Collection Principles & Categories of Data

We adhere strictly to the foundational principles of purpose limitation and data minimization. We collect only the minimum personal data necessary to deliver high-quality news reporting, live market feeds, and secure platform performance:

2. Lawful Grounds & Purposes of Processing

Under Section 4 and Section 6 of the DPDP Act 2023, The Indus Pulse processes personal data strictly pursuant to lawful grounds, including express consent and legitimate uses:

• Service Delivery: To deliver real-time news content, live equity benchmarks, bullion tickers, and search query responses.
• Editorial Communication: To investigate and respond to reader-submitted corrections, right-of-reply inquiries, and newsroom feedback.
• Platform Security & Fraud Prevention: To prevent distributed denial-of-service (DDoS) attacks, detect automated content scraping, and enforce our Terms of Use.
• System Diagnostics & Latency Monitoring: To monitor application health, resolve runtime server errors, and optimize edge caching.

3. Statutory Rights of Data Principals (DPDP Act, 2023)

As a Data Principal under Indian law, you are entitled to exercise the following statutory rights regarding your personal data:

1. Right to Access Summary of Personal Data: You have the right to request a summary of personal data being processed by us and the identities of any Data Processors with whom it has been shared.
2. Right to Correction & Erasure: You may request the correction of inaccurate or incomplete personal data, or the erasure of personal data that is no longer necessary for the purpose for which it was collected.
3. Right of Grievance Redressal: You have the right to register a grievance with our designated Grievance Officer regarding any act or omission by us concerning our data obligations.
4. Right to Nominate: You have the right to nominate an individual who, in the event of your death or incapacity, shall exercise your rights as a Data Principal.

To exercise any of these rights, submit a written request to our Data Protection & Privacy Desk at privacy@theinduspulse.com.

4. Third-Party Advertising & Google AdSense Cookie Disclosures

The Indus Pulse partners with third-party advertising networks, including Google AdSense, to serve contextual and display advertisements when you visit our Platform. To ensure full compliance with Google Publisher Policies, the Digital Personal Data Protection Act, 2023, and international privacy standards, we disclose the following operational practices:

• Third-Party Vendor Cookies: Third-party vendors, including Google, use cookies, web beacons, and device identifiers to serve advertisements based on your prior visits to this Platform or other websites across the internet.
• Google Advertising Cookies: Google's use of advertising cookies (such as DoubleClick cookies and related identifiers) enables Google and its authorized partners to serve ads to our users based on their visits to theinduspulse.com and other sites on the internet.
• Personalized & Non-Personalized Ads: Depending on your geographic region and consent preferences, ads displayed may be personalized (tailored to your inferred interests) or non-personalized (contextual to the article content being viewed).

5. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personally identifiable information (such as your name or email address) to third parties.

To ensure reliable global availability, data processing is handled through vetted infrastructure partners and ad technology vendors bound by strict confidentiality and data protection obligations:

• Edge Hosting & CDN Infrastructure: Vercel Inc. (global edge content delivery and serverless compute).
• Advertising & Monetization Partners: Google LLC / Google AdSense (display advertising technology and programmatic ad serving).
• Database & Structured Storage: Supabase and Upstash Redis (encrypted database storage and low-latency cache management).
• Telemetry & Uptime Monitoring: BetterStack (structured server error logs and uptime observability).
• Legal & Regulatory Authorities: We disclose personal data only when strictly required by applicable Indian law, court order, or formal request from a law enforcement agency under Section 69 of the IT Act.

6. Data Security Standards & Storage Limitation

We implement comprehensive technical and organizational safeguards in accordance with Section 8 of the DPDP Act 2023 and Rule 5(8) of the SPDI Rules:

• Encryption in Transit & at Rest: All web traffic is strictly encrypted using Transport Layer Security (TLS 1.3). Database stores are protected by AES-256 encryption at rest.
• Access Control: Administrative access to backend infrastructure is restricted via multi-factor authentication (MFA) and least-privilege role boundaries.
• Storage Limitation: Server logs and telemetry records are automatically pruned and retained only as long as necessary for technical diagnostics and statutory record-keeping.

7. Protection of Children's Privacy

The Indus Pulse does not knowingly track, profile, or collect personal data from individuals under eighteen (18) years of age without verifiable parental consent, in strict compliance with Section 9 of the DPDP Act 2023. If we become aware that personal data of a minor has been collected without verified consent, we take immediate steps to permanently delete such information from our systems.

8. Grievance Officer & Regulatory Redressal

In accordance with the DPDP Act 2023 and Rule 11 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, our designated Resident Grievance Officer for privacy and data protection is:

If you are not satisfied with the resolution provided by our Grievance Officer, you retain the statutory right to file a complaint before the Data Protection Board of India under the DPDP Act, 2023.

For related policies, please review our Cookie Policy, our Terms of Use, our Editorial Standards, or our Corrections Policy.