Grievance officer desk

DPDP Act 2023 §13 · statutory 30-day deadline · Grievance Officer: Ritesh Firodiya · public intake at /grievance

Open

oldest 12 days in

Identity verification

Closed · AY

Avg time-to-close

8.4 days

Kind:

Case	Kind	Submitted	Deadline	Status
grv-2026-018 data-subject (verified) · Bangalore	Erasure	2026-05-24 11:02	23 Jun 2026 30d left	action needed
grv-2026-017 data-subject (verified) · Mumbai	Data access	2026-05-21 16:33	20 Jun 2026 27d left	in progress
grv-2026-016 data-subject (unverified) · Pune	Withdraw consent	2026-05-12 09:14	11 Jun 2026 18d · escalation soon	verifying ID
No older open cases · 17 closed this AY

Reviewing

grv-2026-018

Erasure · DPDP §12 · submitted via /grievance · 4h ago

30 days · 23 Jun

Identity verification

PASSED · email OTP + signed-in session + PAN last-4 match.

user_uid_p9Kq42 · email harshita.bhat@example.com · joined 2026-02-18 · 14 docs · 2 unlocks · 1 family share

Data subject's request

"Please delete all my data. I no longer use the service. I confirm I have downloaded my Tax Review PDF for my own records and don't need anything from you. I am withdrawing consent under DPDP §6."

Data scope

• 14 documents in GCS · ~ 27 MB
• 1 Tax Review (AY 2026-27) · analyzer outputs
• 218 LedgerEntry rows (SQLite snapshot)
• 2 Razorpay payment refs (kept as financial record per IT Act 2025 · §44AA · 6 years)
• 1 family-share IRN-3919 (anonymises on her side, persists in recipient view)
• Audit log entries (retain 7 years per DPDP · cannot be erased)

Two record classes are retention-required: Razorpay payment metadata (financial) and audit log entries (DPDP §8). Erasure proceeds on user-content data + parsed outputs. Statutory records are anonymised but retained.

Response to data subject

Action

Hard delete is irreversible · cascades to family/CA views · audit log entry survives (anonymised actor).

Auto-escalation rules

>= 7 days untouched · auto-ping grievance officer in #ops Slack
<= 7 days to deadline · header banner + daily email digest
<= 48h to deadline · founder paged · auto-extension request to DPDP Board prepared
Deadline breach · automatic incident · stakeholder report

Statutory audit trail · last 5 events

2026-05-24 11:02 · grv-2026-018 received · auto-ack & case ID assigned
2026-05-24 11:03 · Identity verification PASSED (email OTP + session + PAN last-4)
2026-05-24 14:18 · Ritesh viewed case · no actions taken yet
2026-05-21 16:33 · grv-2026-017 status set to "in progress" · response template drafted
2026-05-12 09:15 · grv-2026-016 status set to "verifying ID" · 2nd reminder sent 2026-05-20

Export full audit log (DPDP §13) →

All grievances logged · response sent via email + downloadable on /grievance/{case-id} · DPDP Board appeal path disclosed in every reply.