Data policy (DPDP Act, 2023)
Last updated 30 October 2026
Our role
For documents you send through the API, you are the Data Fiduciary and MoharDocs acts as your Data Processor: we process the data only to perform the operation you request. For your account data, MoharDocs is the Data Fiduciary.
Purpose limitation and minimisation
We process document contents only to produce the requested output. Logs contain metadata, never contents. IP addresses are stored only as hashes.
Storage limitation
Files uploaded to the free website tools, and their results, are deleted after one hour. For the API, inputs and outputs are deleted after one hour by default (configurable from 0 to 24 hours per API key). Expired files are removed automatically.
Security safeguards
API keys and sign-in codes are stored as one-way hashes. Documents are processed in isolated environments. Access to production systems is restricted and logged.
Rights of Data Principals
Individuals can request access, correction or erasure of their personal data and can nominate another person to exercise these rights. Write to our Grievance Officer at support@mohardocs.com; we respond within the timelines required by law.
Breach notification
If a personal data breach occurs we will inform affected customers and the Data Protection Board of India as the Act requires.