Legal
DPDP Act Compliance
India Data Protection Policy · Last updated: 17 July 2026
Secure, compliant platforms for banking, fintech, and wealth management where downtime is not an option.
Revenue intelligence, booking systems, and high-touch digital experiences for premium travel brands.
Adaptive learning platforms, LMS infrastructure, and AI-powered content operations for global institutions.
Smart property platforms, resident applications, and ESG reporting tools for the built environment.
ERP modernization, process automation, and data platforms that enable large organizations to operate with speed, control, and global scale.
Environmental impact tracking, ESG reporting infrastructure, and compliance platforms for responsible organizations.
Content platforms, streaming infrastructure, and monetization systems built to scale audience engagement and performance.
Legal
India Data Protection Policy · Last updated: 17 July 2026
This policy explains how Incresco Technology Solutions Private Limited ("Incresco," "we," "us," or "our") collects, uses, stores, and protects personal data under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025. Under Section 2(i) of the DPDP Act, Incresco acts as a Data Fiduciary, and individuals whose data we process are Data Principals. By using our website or services, you consent to the practices described here.
Registered Address: 1st Floor, Novel Tech Park, Krishna Reddy Industrial Area, H.S.R. Extension, Hosur Rd, Kudlu Gate, Bengaluru, Karnataka 560068.
This policy applies to all digital personal data we process in connection with our website (increscotech.com) and associated services, including all Data Principals in India. It does not apply to non-digital data, data processed for purely personal or domestic purposes, or publicly available data, as exempted under the DPDP Act.
We collect only the data necessary for the purposes described in this policy.
We process personal data only for lawful purposes for which you have given free, specific, informed, and unambiguous consent, or where processing is necessary for a legitimate use recognised under the DPDP Act:
We will not process your data for purposes beyond those stated above without obtaining fresh consent, or as otherwise permitted by law. You may withdraw consent at any time.
We retain personal data only for as long as the collection purpose requires, unless a longer period is mandated by applicable law.
| Data category | Retention period |
|---|---|
| Account & profile data | 3 years |
| Transaction & payment records | Duration of contract + 7 years |
| Customer support records | 3 years |
| Marketing preferences | 3 years |
| Resumes | 1 year |
You can request deletion of your data by contacting our Grievance Officer (Section 11).
We share personal data with trusted third-party Data Processors acting on our behalf, under written contracts that require DPDP-compliant data protection standards:
We do not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may disclose data to government authorities, law enforcement, or regulatory bodies where required by applicable Indian law or a court order.
Contact our Grievance Officer (Section 11) to exercise any of the rights below.
Obtain a summary of the personal data we process about you, the purposes of processing, and details of the Data Fiduciaries and Processors involved.
Request correction of inaccurate, incomplete, or misleading personal data, or request that it be updated or supplemented.
Request erasure of your personal data where the collection purpose is no longer served, consent has been withdrawn, or as required by law.
Where processing is consent-based, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and we will cease processing as soon as reasonably practicable.
You may nominate another individual to exercise your data rights in the event of your death or incapacity, as provided under the DPDP Act.
You may raise grievances with our Grievance Officer. If you are not satisfied with the resolution, you may escalate the matter to the Data Protection Board of India (DPBI).
We implement appropriate technical and organisational safeguards to protect your personal data against unauthorised access, loss, or disclosure, including:
Breach notification: in the event of a personal data breach likely to cause harm, we will notify the Data Protection Board of India within 72 hours of becoming aware, and will notify affected Data Principals as required by law.
Our website uses cookies and similar tracking technologies for essential functionality, analytics, and preference storage. You may control cookies through your browser settings and through our Cookie Policy. Where required under the DPDP Act, we obtain your consent before placing non-essential cookies.
Our services are not directed at individuals under 18. We do not knowingly collect personal data from children without verifiable parental consent, as required by the DPDP Act. If we become aware of such collection, we will delete it promptly. Contact our Grievance Officer if you believe this has occurred.
We primarily store and process personal data within India. To the extent data is processed by international service providers, such transfers comply with the DPDP Act and applicable government-notified restrictions.
We collect consent through a clear, affirmative action (e.g. ticking a checkbox) before processing personal data. We may update this policy to reflect changes in our practices, services, or legal obligations; material changes will be notified on our website. The date at the top of this page indicates when it was last updated.
Incresco has designated a Grievance Officer to address privacy-related complaints, questions, and data rights requests:
We aim to resolve grievances within 1 month. If you are not satisfied with our resolution, you may lodge a complaint with the Data Protection Board of India (DPBI), established under the DPDP Act.