Privacy & Terms
DPDP Act 2023 compliant · Last updated June 2025
What We Collect
We collect only what is necessary — nothing more. Every data point has a clear purpose in delivering your assessment.
Identity Data
Name, email, and phone number To create your account, deliver your report, and connect you with your consultant.
Usage data
Pages visited, time spent, and interactions To understand how our platform is used and continuously improve your experience.
Device data
IP address, browser type, and operating system To keep your session secure and ensure the platform works correctly for you.
Payment data
Billing details only — card numbers are never stored or seen by us Processed entirely through certified, secure payment partners.
Why We Use Your Data
Your data is used for one purpose — to serve you better. Nothing else.
Service delivery
To provide, maintain, and continuously improve your assessment experience on our platform.
Legal compliance
To meet our obligations under Indian law, including the Digital Personal Data Protection Act 2023.
Communication
Assessment updates, security alerts, and support — only when you have consented to hear from us.
Who We Share It With
We never sell your personal data. We never will. Sharing happens only in three limited circumstances:
How Long We Keep It
We retain your data only for as long as it serves a clear purpose. Typically, this means the duration of your active account plus three years for legal compliance. You may request deletion of your data at any time — no questions asked.
*This is a summary. For complete details, read our full Privacy Policy. Your data is never sold, never used for advertising, and always handled with the care the DPDP Act — and you — deserve.
Acceptance of Terms
By using our platform, you confirm you are at least 18 years of age — or have valid parental consent as required under the DPDP Act 2023. Continuing to use our services means you agree to these terms. If you disagree, please discontinue use.
Permitted Use
Our platform is built for lawful, legitimate business purposes. You are welcome to use it to assess, understand, and improve your DPDP compliance posture. You are responsible for keeping your account credentials secure — what happens under your login is your responsibility.
Prohibited Activities
To protect the platform and every user on it, the following are strictly not permitted: Reverse-engineering, copying, or exploiting any part of the platform Uploading malicious content, automated scripts, or spam Any activity that violates applicable Indian law or the rights of others
Intellectual Property
All content, trademarks, methodologies, and software on this platform belong to us or our licensors. Your use of the platform grants you a limited, non-transferable licence — solely for its intended purpose. Nothing here transfers ownership of any kind to you.
Limitation of Liability
We are committed to delivering a reliable, accurate platform — but to the extent permitted by law, we are not liable for indirect, incidental, or consequential damages arising from your use. Our total liability in any circumstance shall not exceed the amount paid by you in the three months preceding the claim.
Governing Law
These terms are governed by the laws of India, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023. Any disputes shall be subject to the jurisdiction of courts in India.
Changes to These Terms
We will always give you at least 15 days' notice before any changes take effect — via email or an in-app notification. Continued use of the platform after that date will be considered acceptance of the revised terms. You will never be surprised by a silent update.
* These terms exist to protect both you and us. If anything here is unclear, write to us at mail@illume.in — we're happy to explain.
Right to Access
Want to know what we hold about you? Request a complete summary of your personal data and how it is being used — at any time, without any justification needed.
Right to Correction
Found something inaccurate or incomplete in your data? Ask us to correct it. We will update your records promptly and confirm once done.
Right to Erasure
You can request deletion of your personal data at any time. We will process your request within 30 days — unless we are legally required to retain specific records, in which case we will tell you exactly why.
Right to Withdraw Consent
Changed your mind about how we use your data? You can withdraw consent for any non-essential data processing at any time. This will not affect anything we processed lawfully before your withdrawal.
Right to Grieve
If you believe your data rights have not been respected, you have two clear paths — raise a complaint directly with our Data Protection Officer, or escalate to the Data Protection Board of India. Both options are always available to you.