Glossary · Compliance
DPDP
Digital Personal Data Protection, India's data privacy law.
DPDP stands for the Digital Personal Data Protection Act, India's data privacy law, passed in 2023. For marketplace sellers, it governs how you collect, store, and process buyer personal data.
The high-level requirements: notice + consent, purpose limitation, accuracy, retention limits, security safeguards, breach notification, and rights for data principals (the people whose data you hold).
Robnu is DPDP-aligned by design, buyer PII stays in India, the token vault protects credentials with KMS, audit trails are kept on credential reads, and your sellers' data never crosses borders for processing. See /security for the full architecture.

