Privacy Policy
Last updated: May 2026
This policy describes how Decipher Consultancy Services ("we", "us", "our") collects, uses, and protects your personal data when you use Fluxeta (fluxeta.com). We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian data protection law.
1. Who We Are
Data Fiduciary: Decipher Consultancy Services
Registered Address: 295, Block C, Sushant Lok III, Sector 57, Gurugram, Haryana – 122003, India
Platform: Fluxeta — fluxeta.com
Contact: [email protected]
We operate Fluxeta, an AI-native publishing platform for creators and businesses. "You" or "Data Principal" refers to any individual whose personal data we process, including visitors, registered users, newsletter subscribers, and members of sites hosted on Fluxeta.
2. Data We Collect
We collect personal data that you provide directly and data generated through your use of the platform.
2.1 Account & Profile Data
| Data | Purpose | Required? |
|---|---|---|
| Name | Account identification, public profile | Yes |
| Email address | Login, transactional emails, newsletters | Yes |
| Password (hashed) | Authentication | Yes |
| Profile photo | Public creator profile | No |
| Bio / social links | Public creator profile | No |
2.2 Payment Data
Subscription and membership payments are processed by Razorpay. We store only the Razorpay customer ID, subscription ID, and payment status. We do not store card numbers or bank account details.
2.3 Content Data
Posts, pages, newsletters, and media you publish on the platform. If you use AI writing tools, the text you submit is processed by our AI sub-processors (see Section 5).
2.4 Usage & Analytics Data
| Data | Purpose |
|---|---|
| IP address (anonymised after 30 days) | Analytics, fraud prevention |
| Page views, referrer URLs | Dashboard analytics for site owners |
| Device type, browser | Analytics |
| Session cookies (Laravel session) | Authentication state |
2.5 Communications
If you contact us via email or our support form, we retain the content of that communication to respond to your query.
3. How We Use Your Data
- Providing the service — account management, hosting your sites, sending newsletters on your behalf, processing payments.
- AI writing features — your content is sent to AI sub-processors to generate suggestions. See Section 5.
- Analytics — aggregated, anonymised traffic data shown in your dashboard.
- Communications — transactional emails (password reset, subscription receipts), and — only with your consent — product updates and marketing.
- Security & fraud prevention — detecting abuse, rate-limiting, and maintaining platform integrity.
- Legal compliance — responding to lawful requests from Indian authorities under applicable law.
We do not sell your personal data to third parties.
4. Legal Basis (DPDP Act 2023)
Under the Digital Personal Data Protection Act, 2023, we rely on the following bases:
| Processing Activity | Legal Basis |
|---|---|
| Creating and managing your account | Consent (Section 6, DPDP Act) — given at registration |
| Processing subscription payments | Contractual necessity |
| Sending transactional emails | Contractual necessity |
| Sending marketing communications | Consent — you may withdraw at any time |
| Analytics (anonymised) | Legitimate interests of the Data Fiduciary |
| Legal compliance | Legal obligation |
5. Data Processors & Third Parties
We engage the following Data Processors under written contracts that require them to protect your data:
| Processor | Purpose | Location |
|---|---|---|
| Anthropic (Claude API) | AI writing, tone analysis, plagiarism check | USA |
| Razorpay | Payment processing, subscriptions | India |
| AWS / DigitalOcean | Hosting & file storage | India/Singapore |
| Mailgun / SES | Transactional email delivery | USA |
| Cloudflare | CDN, DDoS protection | Global |
We do not share your data with advertisers or data brokers. Third-party links on creator-published content are outside our control.
6. Your Rights as a Data Principal
Under Sections 11–14 of the DPDP Act, 2023, you have the following rights:
6.1 Right to Access (Section 11)
You have the right to obtain a summary of your personal data being processed and the processing activities. Submit a request to [email protected] and we will respond within 30 days.
6.2 Right to Correction & Erasure (Section 12)
You have the right to correction of inaccurate or incomplete personal data, and the right to erasure of personal data that is no longer necessary or that you withdraw consent for. To exercise this right to correction or right to erasure, email [email protected] or use the account deletion feature in Settings.
6.3 Right to Grievance Redressal (Section 13)
You have the right to readily available means of grievance redressal. Contact our Grievance Officer (see Section 11). We will acknowledge your complaint within 48 hours and resolve it within 30 days.
6.4 Right to Nominate (Section 14)
You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. Nominations can be submitted to our Grievance Officer.
Exercising Your Rights
To exercise any of the above rights, email [email protected] with the subject line "Data Principal Rights Request". We may need to verify your identity before processing the request.
7. Children's Privacy
Fluxeta is not intended for persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected] and we will delete the data.
Under the DPDP Act, processing of children's data requires verifiable parental consent. We do not offer services targeted at children.
8. Data Retention
| Data Category | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after deletion request |
| Published content | Duration of account (deleted on account closure) |
| Payment records | 7 years (statutory requirement under Indian tax law) |
| Analytics data (anonymised) | 24 months |
| Support communications | 2 years |
| IP addresses (full) | 30 days, then anonymised |
When retention periods expire, data is securely deleted or anonymised.
9. Security
We implement reasonable security measures to protect your personal data, including:
- Encryption of data in transit (TLS 1.2+)
- Encryption of sensitive data at rest (AES-256)
- Bcrypt password hashing
- Role-based access controls limiting internal access
- Regular dependency updates and security patches
No system is 100% secure. In the event of a personal data breach that poses a risk to your rights, we will notify you and the appropriate authority as required under the DPDP Act.
10. Cross-Border Transfers
Some of our sub-processors (Anthropic, Mailgun, Cloudflare) are located outside India. Where personal data is transferred outside India, we ensure that the recipient country or organisation provides a level of protection comparable to the DPDP Act, through contractual safeguards or the Data Protection Board's approved frameworks.
11. Grievance Officer
Grievance Officer — Fluxeta / Decipher Consultancy Services
Name: Subesh Kumar
Email: [email protected] | [email protected]
Phone: +91 9911202099
Address: Decipher Consultancy Services, 295, Block C, Sushant Lok III, Sector 57, Gurugram, Haryana – 122003, India
Response time: 48 hours acknowledgement; 30 days resolution
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once it is constituted under the DPDP Act, 2023.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address registered with your account) and by displaying a notice on the platform at least 7 days before the changes take effect. Your continued use of Fluxeta after the effective date constitutes acceptance of the revised policy.
The "Last updated" date at the top of this page reflects the most recent revision.