Privacy Policy

Your trust matters to us. This policy explains, briefly, what we collect through the ACH Security console, why, and the control you have over it.

Your data is protected

We protect your information with strong, industry-standard encryption — in transit and, for sensitive details such as credentials and access information, at rest. Passwords are never stored in readable form, access to your data is limited to authorised team members, and your reports and findings are kept confidential to you.

What we collect

Only what we need to run your account and deliver your services: your contact details, account information, the requests and reports you create, and the messages you send to support. Company details are optional.

Why we collect it

To operate your account, deliver the services you request, send you notifications about them, and respond to your support requests. We use your personal data only for these purposes, and we never sell it.

Who we share it with

Only with trusted service providers who help us run the service, and only as needed to do so. We do not share your data with advertisers or unrelated third parties.

How long we keep it

For as long as your account is active, and afterwards only as long as required for legal or accounting purposes.

If something goes wrong

If a personal data breach affects you, we will notify you and the Data Protection Board of India as required under the DPDP Act, without undue delay.

Children and cross-border processing

The console is a professional tool and is not directed at anyone under 18. Where a service provider processes data outside India, we take reasonable steps to keep it protected in line with the DPDP Act.

Your rights and withdrawing consent

You can ask to access, correct or erase your data, or withdraw your consent, at any time by emailing our Grievance Officer — we will act on it within 7 business days.

Grievance Officer and DPO

ACH Security Compliance Desk
Email: [email protected]
See Grievance Redressal for response timelines.