Our status under the DPDP Act
Livescraper is a Data Fiduciary with respect to our customer accounts (Section 2(i)). For data processed on behalf of customers running scrapes, we act as a Data Processor under Section 2(t).
We have not yet been notified as a Significant Data Fiduciary under Section 10. We voluntarily comply with the heightened standards in Section 10(2) anyway: we maintain a designated DPO, conduct DPIAs for new high-risk features, and undergo annual independent audits (SOC 2 Type II).
Notice and consent
For Indian Data Principals, our consent notice (Section 5(1)) is presented at account signup, in plain language, and lists:
- The personal data we will process (account email, billing data, usage logs)
- The purpose of processing (providing the scraping platform, billing, security)
- How to withdraw consent — in one click via Settings → Account → Delete
- How to file a grievance (see below) and contact the Data Protection Board
Consent can be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal (Section 6(4)).
Your rights as a Data Principal
You have the right to:
- Access a summary of personal data being processed (Sec. 11)
- Correction, completion, updating & erasure of personal data (Sec. 12)
- Grievance redressal — file a complaint with our DPO who responds within 7 days (Sec. 13)
- Nominate another person to exercise your rights in the event of death or incapacity (Sec. 14)
To exercise any right, email dpo@livescraper.com with the subject "DPDP Section [number] request". We respond within 7 days for grievances and 30 days for other requests.
Children & persons with disabilities
Per Section 9, we do not knowingly process personal data of children (under 18) or persons with disabilities who require a guardian. Our terms of service prohibit anyone under 18 from creating an account. If we become aware of such an account, we delete it within 7 days.
Personal data breach notification
Per Section 8(6), in the event of a personal data breach, we notify the Data Protection Board of India and affected Data Principals within timelines mandated by the Board. Our internal SLA is 1 hour for affected-customer notice and 72 hours for regulator notice — whichever is sooner.
Contact our DPO
Our designated Data Protection Officer for India is Anita Sharma. Reach us at:
- Email: dpo@livescraper.com
- Subject line for DPDP requests: "DPDP Section [number] request"
- Response SLA: 7 days for grievances · 30 days for other requests
Unresolved complaints can be escalated to the Data Protection Board of India.
Last updated: 02 May 2026 · Aligned with DPDP Act, 2023 (as enacted) and pending DPB rules.