Legal

DPDP Act compliance

Last updated September 2026.

India: the DPDP Act, 2023

Visibility OS is operated from India and is currently offered to customers in India. Our primary law is the Digital Personal Data Protection Act, 2023 (DPDP Act), with the Information Technology Act, 2000. Under the DPDP Act we act as a Data Fiduciary for our own account, billing and security data, and as a Data Processor for the workspace content you put in.

  • We process personal data with your consent or for purposes the Act permits, such as providing the account you asked for and meeting legal obligations, and we say what we use it for.
  • You can access your data, correct it, have it erased, nominate someone to act for you, and have grievances redressed.
  • We keep data only as long as needed for the purpose or as the law requires, and we protect it with reasonable security safeguards.
  • If a breach affects personal data we tell affected people and the Data Protection Board of India as the Act requires.
  • Grievances go to our Grievance Officer through the contact form, are acknowledged within 48 hours and resolved within 30 days. You may complain to the Data Protection Board of India if you are not satisfied.

Roles

For your workspace content we are your Data Processor and you are the Data Fiduciary (see our DPA). For account, billing, security and website analytics data we are the Data Fiduciary.

Purposes and consent

  • Providing the service you asked for: account and workspace data.
  • Security, fraud and abuse prevention, and improving the product.
  • Legal obligations, such as tax and accounting records under Indian GST and income-tax law.
  • Consent: analytics cookies (Google Analytics, Microsoft Clarity). Nothing loads until you accept, and you can change your choice from Cookie settings in the footer.

Your rights as a Data Principal

  • access a summary of your personal data and how it is processed;
  • correct inaccurate or incomplete data, and update it;
  • erase your data when it is no longer needed for its purpose;
  • nominate another person to exercise your rights if you die or become incapacitated;
  • have your grievance redressed, and withdraw consent at any time, without affecting earlier processing.

How to exercise them

Workspace owners can export a workspace and delete brands or the whole account in Workspace settings. For anything else use the contact form on our website. We acknowledge requests within 48 hours and aim to resolve them within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.

Security and breaches

Measures are on our Security page. If a breach affects personal data, we tell the affected people and the Data Protection Board of India as the Act requires.

Availability

Visibility OS is currently offered only to customers in India. Visitors from other regions can join the waitlist.

Contact and grievances

Send questions, privacy requests or complaints through our contact form or email legal@visibilityos.ai. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

Grievance Officer: Ruby Rawat, ruby@garagecollective.agency.

Garage Productions Private Limited, C-102, Tower C, ATS Bouquet, Sector 132, Noida, Gautam Buddha Nagar, Uttar Pradesh 201304, India. GSTIN: 09AAGCG1126N1ZG.

Draft for launch. Have it reviewed by counsel before relying on it for DPDP Act compliance.