Privacy Policy

Dellegate ("we", "us", "our") is a task management and delegation app. This Privacy Policy explains:

• What personal data we collect
• How we use and process it
• What data is transmitted to third-party service providers
• How long we retain it
• Your rights and choices

We process personal data in line with the Digital Personal Data Protection Act, 2023 (India) and other applicable laws, including the GDPR where it applies.

We use personal data to create and manage your account; send email verification codes when you register; provide task boards, assignments, reminders, and connections; send in-app and push notifications you request; prevent abuse; and comply with law.

We do not sell personal data. Dellegate does not send your content to generative AI providers.

Your data is stored using secure cloud infrastructure, including Amazon Web Services (AWS) where configured, and object storage (Amazon S3 or compatible) for profile photos you upload.

Push notifications are delivered using Google Firebase Cloud Messaging. Account verification emails are sent through our SMTP email provider.

Data is encrypted in transit using TLS. Access to production systems is restricted.

Camera / photos. Used only when you choose a profile photo.

Notifications. Used to send reminders, task updates, connection alerts, and system alerts you enable.

Biometrics. Optional local unlock after you sign in (mobile app).

Location. We do not collect precise location data.

Contacts. Dellegate does not request access to your contacts.

We process data based on:

• Your consent (for example optional photo or biometrics)
• Contractual necessity (to provide the App)
• Legal compliance obligations
• Legitimate interests in securing and improving our service

You may withdraw optional consents in App Settings or by contacting us.

We do not sell or rent your personal data.

We share personal data only with:

• Cloud infrastructure providers (including AWS where configured)
• Firebase (push notifications)
• Email delivery provider (SMTP) for account verification codes
• Razorpay, when you subscribe on the website
• Legal authorities where required

These processors are used only to operate Dellegate and are expected to maintain appropriate security protections.

Data may be processed outside India in jurisdictions where our processors operate. We implement appropriate safeguards, including contractual protections, security standards, and encryption.

We keep account and task data while your account is active.

When you delete your account from Profile → Delete account, or from https://api.dellegate.ai/api/v1/legal/delete-account, we remove your profile, tasks, connections, photos, and notification data immediately.

Upon account deletion:

• Primary account data is deleted immediately, and residual backups within 30 calendar days
• Minimal account identifiers may be retained for fraud prevention for up to 1 year
• Financial records are retained per legal requirements
• Communication logs are retained only as necessary and purged within 30 days unless legally required otherwise

You may:

• Request access to your data
• Correct inaccurate data
• Delete your account in the app or at https://api.dellegate.ai/api/v1/legal/delete-account
• Withdraw optional consents (such as biometrics or photo upload)
• File a grievance

Contact: taskmanager0009@gmail.com

We respond within statutory timelines.

We implement encryption in transit, access controls, and operational monitoring. If a data breach presents risk to users, we will notify affected users and authorities as required by law.

We may update this policy as Dellegate evolves. Material changes will be communicated via in-app notification or email before taking effect.