This Data Protection Policy describes how PSYBUG (“we,” “our,” or “us”) ensures the protection, security, and lawful handling of personal data and business data processed through our websites, software platforms, applications, and services (collectively referred to as the “Services”).
We are committed to safeguarding data in accordance with applicable data protection laws, industry best practices, and platform requirements, including but not limited to data protection principles under global privacy regulations, advertising platform policies, and API usage standards.
1. Purpose of This Policy
The purpose of this Data Protection Policy is to define our approach to data protection, outline our responsibilities, and explain the technical and organizational measures we implement to protect personal and business data against unauthorized access, misuse, loss, or disclosure.
This policy complements our Privacy Policy and applies to all data processed in connection with our Services.
2. Scope and Applicability
This policy applies to all personal data, business data, and operational data processed by PSYBUG, whether collected directly from users, generated through platform usage, or accessed via authorized third-party integrations.
It applies to all employees, contractors, partners, service providers, and systems that process data on our behalf.
3. Data Protection Principles
We process data in accordance with core data protection principles. Data is processed lawfully, fairly, and transparently, and only for specific, legitimate purposes. We ensure that data collected is relevant, limited to what is necessary, accurate, and kept up to date where required.
Data is retained only for as long as necessary to fulfill its purpose and is protected using appropriate security measures throughout its lifecycle.
4. Lawful Basis for Data Processing
We process data based on one or more lawful grounds, including user consent, contractual necessity, compliance with legal obligations, and legitimate business interests such as service improvement, security, and fraud prevention.
Where consent is required, users are provided with clear information and meaningful choices.
5. Data Categories Covered
This policy covers personal identification data, contact information, account credentials, business and operational records, transaction data, communication data, technical and usage data, and any other information processed in connection with the Services.
Sensitive data is processed only where necessary and with additional safeguards.
6. Data Security Measures
We implement appropriate technical and organizational measures to protect data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures include access controls, encryption, secure authentication mechanisms, network security practices, regular system monitoring, and internal policies governing data access and handling.
Access to data is limited to authorized personnel who require it to perform their duties.
7. Data Storage and Retention
Data is stored securely using reliable infrastructure and service providers that adhere to recognized security standards.
We retain data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, meet contractual obligations, comply with legal requirements, or resolve disputes. When data is no longer required, it is securely deleted, anonymized, or archived.
8. Data Sharing and Transfers
Data may be shared with trusted third-party service providers who support hosting, analytics, communication, payment processing, advertising, or infrastructure management. Such providers are bound by contractual obligations to protect data and process it only according to our instructions.
Where data is transferred across borders, we ensure appropriate safeguards are in place to maintain an adequate level of protection.
We do not sell personal data.
9. Third-Party Platforms and Integrations
Our Services may integrate with external platforms, APIs, and tools. Data accessed through such integrations is processed only with user authorization and strictly for the intended purpose.
We are not responsible for the independent data protection practices of third-party platforms, which are governed by their own policies.
10. User Rights and Requests
Users may have rights under applicable laws to access, correct, delete, restrict, or object to the processing of their personal data.
Requests related to data protection or privacy may be submitted through our contact channels. We may require identity verification before processing requests and will respond within a reasonable timeframe.
11. Data Breach Management
In the event of a data breach that poses a risk to user rights or data security, we will take appropriate steps to contain, investigate, and remediate the incident.
Where required by law, affected users and relevant authorities will be notified in a timely manner.
12. Employee and Partner Responsibilities
All employees, contractors, and partners with access to data are required to adhere to confidentiality obligations and internal data protection policies.
Training and awareness measures are implemented to ensure responsible handling of data.
13. Policy Review and Updates
This Data Protection Policy may be updated periodically to reflect changes in legal requirements, technology, or business practices. Updated versions will be published on our website with a revised date.
Continued use of the Services after updates constitutes acceptance of the revised policy.
14. Contact Information
For questions, concerns, or requests related to data protection, please contact us at:
Email: contact@psybug.in
Website: https://psybug.in
Last updated: 09/01/2026
