Grievance Registry & Data Retention

In accordance with the Digital Personal Data Protection (DPDP) Act, 2023, and the subsequent implementation guidelines by the Data Protection Board of India (DPBI), MudraForge provides full transparency regarding Data Principal rights, grievance redressal, and our sovereign data retention architecture.

1. Official Grievance Officer

2. Data Retention Policy

MudraForge acts primarily as a Sovereign Data Engine (Data Processor) on behalf of our B2B clients (Data Fiduciaries). We employ strict deterministic logic gates to manage data lifecycles:

• Transient Session Data: Chat logs processed by the MudraForge AI agents are held in secure, volatile memory (RAM) and purged natively upon session termination or within 24 hours (whichever is earlier) unless specifically mandated by the Client Fiduciary.
• Sovereign Backup Sync: All data physically stored is confined to secure, domestic servers located exclusively in Mumbai and Delhi, preventing cross-border liability.
• Back-Office Protection: All back-office engagements involving sensitive SMEs data are governed by a signed Data Processing Agreement (DPA) establishing strict purpose limitation and liability scope.
• Zero-Knowledge Training: MudraForge strictly prohibits the use of user-generated endpoint data (Data Principal inputs) for training foundational Large Language Models.

3. Data Principal Rights (Subject Access)

Any Indian citizen interacting with a MudraForge-powered AI Agent has the right to:

• Request a full audit of their personal data processed during the session.
• Request instantaneous erasure (Right to be Forgotten).
• Register a formal grievance if they believe "Sovereign Logic" violated DPDP boundaries.

All structured queries should be directed via email to the Grievance Officer. Statutory response time is 72 hours.