Privacy Policy
How Sudhosan Skill Solutions Pvt. Ltd. protects and handles your personal data across the MyForge platform.
1. Data Fiduciary & Overview
Under the Digital Personal Data Protection (DPDP) Act, 2023 of India, Sudhosan Skill Solutions Pvt. Ltd. (Parent Entity) together with its technology division RootHub (Technology & Platform Operator) acts as the Data Fiduciary for personal data collected through MyForge.
We believe in minimal data collection. We only ask for information necessary to authenticate your account, secure your escrow pledges, and deliver physical pre-order products to your doorstep.
2. Information We Collect
- Account Information: When you sign in via Google, we receive your verified name, email address, and profile picture avatar.
- Shipping Information (Physical Products): When you pre-order a physical manufactured product, we collect your recipient name, phone number, and street delivery address within India.
- Payment Security & Cashfree Gateway: RootForge does not store, capture, or retain raw credit/debit card numbers, CVVs, or UPI PINs. All payment transactions and vendor escrow settlements are encrypted and processed by PCI-DSS Level 1 compliant, RBI-authorized payment aggregator Cashfree Payments.
- Storage & Third-Party Infrastructure: Authenticated identity via Google Firebase Auth, application data on MongoDB Atlas, campaign video/image storage via Cloudflare R2 (encrypted at rest), and transactional escrow verification with Cashfree Payments.
- Creator Verification Data: For creators launching campaigns, we collect Government ID, PAN, GSTIN registration numbers, and banking details required for direct escrow payout disbursals.
3. Purpose of Processing & Sharing
We use your data solely for:
- Authenticating your user session and managing your Creator / Backer dashboard.
- Providing creators with delivery addresses only for successfully funded physical orders.
- Automating 100% full escrow refunds if a campaign does not meet its funding target.
- Complying with statutory accounting and tax reporting obligations in India.
Sudhosan Skill Solutions Pvt. Ltd. does not sell, rent, monetize, or trade your personal data or phone number to third-party telemarketers or external advertising networks.
4. Security Measures & Data Storage
All traffic between your browser and MyForge is encrypted using TLS 1.3 encryption. Backer databases and escrow records are maintained in Indian data center regions compliant with Indian sovereignty and regulatory norms.
5. Your Legal Rights (Access, Correction, Erasure)
As a Data Principal under Indian law, you have the right to:
- Request an export summary of all personal data held about you.
- Correct incomplete, inaccurate, or outdated shipping addresses.
- Request deletion of your account and personal data (subject to statutory financial retention requirements for past transaction audits).
6. Grievance Officer & Inquiries
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the Grievance Officer for MyForge is: