Your data rights

• If your data is in a business's Distiqo account — for example you are a retailer of a distributor, a customer who buys on credit at a shop, or a member of a business's staff — that business decides why your data is used and is the Data Fiduciary. Ask the business first. We are its Data Processor and will help it act on your request.
• If you have your own Distiqo account, or you used this website, we are the Data Fiduciary and you can ask us directly.

If you are not sure which applies, write to us anyway and we will point you the right way.

• Information and access. A summary of the personal data we hold about you, what we use it for, and who it has been shared with.
• Correction and completion. Have inaccurate or incomplete data corrected.
• Erasure. Ask us to delete your personal data. Records the law requires us to keep — for example invoices and ledger entries, kept for 8 years — can't be erased early. We will tell you when that applies and delete everything else.
• Withdrawing consent. Where we rely on your consent (for example WhatsApp messaging or call recordings), you can withdraw it at any time, as easily as you gave it.
• Grievance redressal. Raise a complaint and get a response.
• Nomination. Nominate a person to exercise these rights for you if you die or cannot act.

Email info@distiqoai.com with the subject “Data request”, or message us on WhatsApp. Please tell us:

• your name and the phone number or email the data is held under;
• which right you want to use (access, correction, erasure, withdrawing consent);
• the business account it relates to, if you know it.

We may ask you to confirm who you are before we act, so that nobody else can use your rights against you.

• We acknowledge your request straight away and record it in our register.
• We respond within 30 days.
• If we can't fully do what you ask — for example because a legal retention period applies — we tell you what we can't do, and why.
• Everything we do on a request is recorded.

Where processing relies on consent, we record it — what it was for and which version of our notice you saw — and we make withdrawal simple. Withdrawing consent doesn't affect what we did before you withdrew, and may mean a feature that needs it (such as WhatsApp order-taking) stops working for you.

If a personal-data breach happens, we investigate quickly, tell the affected businesses and people, and report it to the authorities as the law requires — including CERT-In and the Data Protection Board of India. Our target is to notify affected parties within 72 hours of confirming a breach.

Our main database is in Mumbai. See the Privacy Policy for the providers we use and where they run. If personal data were ever transferred outside India, we would tell you and put safeguards in place first.

Write to info@distiqoai.com with the subject “Privacy grievance”. We will answer within 30 days.

Under the Act, you can complain to the Data Protection Board of India if you are not satisfied with our answer. The Board expects you to have tried the grievance route with us first.