Privacy Policy
Version 2.0 · Last updated September 23, 2026
In plain English
- Jakuraa Commercial Pvt Ltd is the data fiduciary/controller. Contact our Grievance Officer at satelinknetwork@gmail.com.
- We collect account and sign-in details, API usage and IP/device data, wallet addresses, payment metadata from Dodo (never card numbers), enquiries, and cookies.
- We keep data only as long as needed for each purpose (see the retention table) and use a small set of named sub-processors.
- You can access, correct, or erase your data, and raise a grievance. On-chain data is public and permanent.
This Privacy Policy explains how Jakuraa Commercial Pvt Ltd, 38/39 Malaviya Street, Ram Nagar, Coimbatore 641009, Tamil Nadu, India ("Satelink") collects, uses, shares, and protects personal data, and your rights under the Digital Personal Data Protection Act, 2023 and its 2025 Rules, the Information Technology Act, 2000 and the SPDI Rules, the EU/UK GDPR, and the CCPA/CPRA where applicable.
1.Controller and Grievance Officer
The data fiduciary and controller is Jakuraa Commercial Pvt Ltd, 38/39 Malaviya Street, Ram Nagar, Coimbatore 641009, Tamil Nadu, India. For privacy requests and grievances under the DPDP Act, contact the Grievance Officer at satelinknetwork@gmail.com. (The named officer will be designated before this policy is published.)
2.Data we collect, by category
| Category | Examples |
|---|---|
| Account | Name, email, password hash, organization |
| Auth provider profile | Basic profile from Google sign-in (email, name) |
| API usage | Requests, endpoints, keys used, call counts, timestamps |
| Device / network | IP address, user agent, coarse location derived from IP |
| Wallet | Public wallet addresses used on the x402/USDT rail |
| Payment metadata | From Dodo: amount, currency, status, last-4/brand — never full card numbers |
| Enquiries | Contact-sales, support, and feedback submissions |
| Cookies / storage | Theme preference and, where enabled, cookieless analytics |
3.Purposes and lawful basis
We process personal data to provide and meter the Services (performance of a contract), to secure the platform and prevent abuse (legitimate interests / legal obligation), to process payments (contract, via Dodo), to respond to enquiries (consent / legitimate interests), and to comply with law. Under the DPDP Act, processing is based on your consent or on legitimate uses as defined by the Act.
4.Consent and withdrawal
Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out. You can manage sign-in methods and delete your account from the console.
5.Retention
We keep each category only as long as necessary:
| Category | Retention |
|---|---|
| Account | For the life of the account, then up to 90 days after deletion |
| API usage logs | Up to 12 months, then aggregated or deleted |
| Payment metadata | As required for tax/audit (typically up to 8 years) |
| Enquiries | Up to 24 months from last contact |
| Security logs | Up to 12 months |
6.Sub-processors
We use a small set of processors to run the Services. On-chain data is public and permanent and is not controlled by any processor. The current list is maintained at /sub-processors and includes Vercel, Railway, Dodo Payments, Google, our email provider, the x402 facilitator, and the blockchain networks we settle on.
7.Cross-border transfers
Some processors are located outside India. Where personal data is transferred internationally, we rely on the transfer mechanisms permitted by applicable law and take steps to ensure an adequate level of protection.
8.Security safeguards
We use TLS in transit, store API keys hashed, enforce least-privilege access and 2FA for administrative access, and log administrative actions. No method is perfectly secure; see the Security page for what we do and do not claim.
9.Breach notification
In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act and its Rules, and other regulators where applicable.
10.Your rights
Subject to applicable law, you may request access to, correction of, or erasure of your personal data; nominate another person to exercise your rights (DPDP); and, under the GDPR, object to or restrict processing and request portability. We aim to respond within the timelines set by the applicable law. To exercise a right or raise a grievance, contact the Grievance Officer.
11.Children and automated decisions
The Services are not directed to individuals under 18, and we do not knowingly process children's data. We do not make decisions producing legal effects solely by automated means.
12.Changes and contact
We will post changes here with a new version and date. Contact: satelinknetwork@gmail.com.
Version history
- v2.0 · September 23, 2026 — DPDP Grievance Officer, data-category and retention tables, sub-processors, breach notification, and expanded rights added.
- v1.0 · May 19, 2026 — Initial privacy notice.