Contact and grievances

DRAFT — prepared with AI assistance, not reviewed by a lawyer. Do not publish before legal review.

Version: 0.1 (draft) · Last updated: [date of publication] Available in: English (this version) and Hindi.

LAMP is run by Agentic Genie LLP. This page tells you whom to contact about your personal data, a complaint, or a security problem, what to include, and how quickly we will answer.

1. Grievance Officer

One named person handles privacy questions, rights requests and complaints about LAMP.

2. What you can contact us about

• Your LAMP account data: to see it, correct it, delete it, withdraw consent, or name someone to act for you. Our Privacy Notice explains these rights.
• A complaint about how LAMP has handled your personal data, how an AI agent in LAMP behaved, or anything else about the service.
• Business data held for a business that uses LAMP, for example your details in a supplier's or employer's records. That business decides about that data, so we pass your request to it (section 5).
• A security problem you have found. Write to [security email].

3. How quickly we answer

The outer limits the law sets today are one month for complaints about personal data under the IT Rules 2011, and, once the DPDP Rules 2025 are in force (around 13 May 2027), 90 days for grievances under the DPDP Act. We aim to be much faster than either.

4. How to make a rights request

1. Choose a route.
   • In LAMP: [Settings → Privacy] in web chat, or send "privacy" in any Channel. [Product: build before publishing.]
   • Email [email].
   • Post to the address in section 1.
2. Say who you are. Give the mobile number or email address registered with LAMP. That identifier is how we find your account.
3. Say what you want. For example: a summary of my data; correct my name; delete my account; withdraw my consent; name my nominee.
4. Confirm it is you. We send a one-time code to your registered number or email. We ask for more only if we cannot confirm your identity that way, and we never ask for your PIN.
5. Get our answer. Our reply tells you what we did, and gives the Grievance Officer's contact details so you can follow up.

Acting for someone else. A nominee, or anyone with the person's written authority, can make a request for them. Send proof of that authority with the request.

5. Requests about a business's data

When a business uses LAMP, the business decides about the personal data of its customers, suppliers and employees. LAMP acts only on its instructions. If your request is about that data:

• write to the business first, if you can; or
• write to us with the name of the business. We pass the request to the business within 72 hours, tell you we have done so, and give the business the tools to act on it.

Some records cannot be erased at once. A business must keep its GST records, such as the name and GSTIN on an invoice, for the period tax law sets (72 months after the due date of the annual return for that year).

6. If you are not satisfied

1. Ask for a review. Reply to our answer and ask the Grievance Officer to look again. We treat this as a new complaint with the same timelines.
2. Go to the Data Protection Board of India. Once the relevant parts of the DPDP Act are in force (expected around 13 May 2027), you can complain to the Board if our answer does not satisfy you. The law asks you to use our grievance route first. [LAWYER: add the Board's online complaint route once it is published, and any remedy that applies before commencement.]

7. Security incidents and official requests

• Report a security problem to [security email]. We acknowledge within 24 hours. Please give us a reasonable time to fix it before you disclose it publicly.
• Cyber incidents. LAMP reports cyber incidents to CERT-In, India's national cyber-security agency, within 6 hours of noticing them, as the law requires. Our named contact for CERT-In is [Grievance Officer name].
• Government and law-enforcement requests go to [email] with the order attached. We respond as the law requires.