DPDP

DPDP stands for the Digital Personal Data Protection Act — India's data privacy law, passed in 2023. For marketplace sellers, it governs how you collect, store, and process buyer personal data.

The high-level requirements: notice + consent, purpose limitation, accuracy, retention limits, security safeguards, breach notification, and rights for data principals (the people whose data you hold).

Robnu is DPDP-aligned by design — buyer PII stays in India, the token vault protects credentials with KMS, audit trails are kept on credential reads, and your sellers' data never crosses borders for processing. See /security for the full architecture.