Privacy Policy

About us

So, what is all the buzz about for OTPLESS? Here is why.

OTPLESS is the world’s first privacy first identity app.

With otpless.com, you can control:

• Who, where, when, how, and why you share your personal information to websites and apps.

Not only that, you are in full control of your sessions across websites and apps. Online privacy is super important, especially in a bustling digital landscape like India.

Here’s why OTPLESS is the coolest and the first privacy-first identity app

Take back control of your data. With OTPLESS, you become the master of your own data universe. You have complete control over what information you share, when you share it, and with whom. No more worrying about your personal data being misused or sold without your consent.

Privacy first, always. At OTPLESS, we take privacy seriously. We’ve designed the app with a privacy-first mindset, ensuring that your personal information remains confidential and secure.

No unwanted ads. We don’t believe in selling your data to advertisers for profit. Our focus is on providing a secure and seamless identity solution.

Rock-solid security. OTPLESS implements state-of-the-art security technologies, including encryption and secure protocols, to safeguard your personal information from unauthorized access.

User-friendly experience. No complex OTPs, passwords, or confusing processes - just a simple, one-tap authentication experience.

Trust and transparency. Our Privacy Policy is easy to understand and explains how we handle your data in a way that aligns with Indian data protection regulations.

Empowering Indian websites and apps. By integrating OTPLESS, Indian businesses can offer their users a secure and privacy-friendly authentication solution. Together, we can foster a culture of privacy and trust in the Indian digital ecosystem.

Download OTPLESS from the App Store or Google Play Store and become a privacy superhero. With OTPLESS by your side, you can reclaim your online privacy and embark on a journey to secure digital India.

Respecting your privacy

Welcome to OTPLESS, the world’s leading privacy-first identity app. This document (“Terms of Use & Privacy Policy”) sets out the policies and practices of OTPLESS Solutions Private Limited (“OTPLESS” or “we” or “us” or “our”) in collecting, processing, storing, or transferring personal data and information by OTPLESS, and our refund policy on cancellation of the subscription of OTPLESS services.

This Terms of Use & Privacy Policy outlines how we collect, use, and disclose your data when you use our services, regardless of your location. You consent to OTPLESS collecting, receiving, storing, using, dealing with, handling, managing, processing, providing access to, sharing, disclosing and analysing information shared by you in the manner set forth in this Terms of Use & Privacy Policy. By accessing the app, using the services, or by otherwise providing any information on the app, you will be deemed to have read, understood and agreed to the terms and conditions outlined in this Terms of Use & Privacy Policy.

This Terms of Use & Privacy Policy has been published, inter alia, in compliance with the provisions of the Information Technology Act, 2000 and the rules and regulations made thereunder, including: (i) The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and (ii) The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

At OTPLESS, we deeply respect the significance of privacy in the digital age. Our commitment to privacy guides everything we do, from the design of our app to the implementation of robust security measures.

Our approach to data protection

State-of-the-art security measures. We employ industry-leading practices, including encryption, firewalls, and secure protocols, to protect against unauthorized access, disclosure, alteration, or destruction of your data.

Privacy by design. Privacy considerations are integrated into our app’s design and functionality from the outset. We proactively assess privacy risks and implement measures to mitigate them.

Data minimization. We only collect the personal information necessary to provide you with our services. We do not collect excessive or unnecessary data.

Anonymization and pseudonymization. When feasible and appropriate, we anonymize or pseudonymize your personal information to further protect your privacy.

Data Protection Officer

OTPLESS has appointed a Data Protection Officer (DPO) responsible for data privacy oversight.

Information we collect

Personal information. Personal information means information that, by itself or in combination, can identify a natural person. To provide our services, we may collect certain personal information from you, including but not limited to your name, email address, phone number, and any additional information you choose to provide voluntarily.

Usage information. We may collect information about your interactions with OTPLESS, such as the features you use, the websites and apps you authenticate with, and your preferences for such usage.

Device and log information. When you access OTPLESS, we may collect certain information about your device, such as your device type, operating system, IP address, and browser type. We may also gather log information, including details about your interactions with our app, timestamps, and system activity.

Cookies and similar technologies. We use cookies and similar storage technologies on otpless.com to keep the site functional and to understand how visitors use it. You can review and change your choices at any time using the “Cookies” link in the footer. Specifically:

• Strictly necessary. Required for the site to load, route between pages, and submit the contact form. These cannot be disabled.
• Analytics (optional). Google Analytics 4 (measurement ID G-Z7EFW2MHRM), with IP anonymization enabled and Google Signals disabled. We use it only to count page views, measure top-level engagement, and identify pages that need improvement. Loaded only after you grant consent via Google Consent Mode v2.
• Marketing (optional, currently unused). We reserve the option to add advertising-measurement pixels in the future. None are running today, and none will load without your explicit consent.

Consent is stored locally in your browser under the key otp_consent_v1 and is honored across all pages on this domain. Withdrawing consent stops future data collection; previously collected analytics data is retained per the retention periods described below.

How we use your information

Providing and personalizing services. We use your personal information to verify your identity, securely share your authenticated details with integrated websites and apps, and grant you access to the services you require.

Communication. We may use your information to communicate with you about important updates, service-related announcements, and new features. We may also send you promotional materials and exclusive offers. You have the option to opt out of receiving such communications at any time by adjusting your preferences in the app.

Personalization and recommendations. We may utilize your information to personalize your OTPLESS experience. These personalized recommendations are based on automated processing and do not involve any automated decision-making that significantly affects you.

Service improvement. Your data helps us improve and optimize OTPLESS by analyzing aggregated data and usage patterns.

Fraud detection and security. We process your information to detect and prevent fraud, security breaches, or any misuse of OTPLESS.

Legal compliance. We may process your personal information as required by applicable laws, regulations, or legal proceedings, including responding to lawful requests and cooperating with law enforcement authorities.

Storage of your information

Your information which is in the possession and control of the Company is stored in accordance with applicable laws. Storage and transfer of such information is carried out in compliance with all applicable laws, including without limitation, the Information Technology Act, 2000 and the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011.

The services have reasonable security measures in place to protect the loss or misuse of your information. Whenever you change or access your information, OTPLESS offers the use of a secure server. However, you acknowledge that transacting over the internet has inherent risks, which can only be avoided by you following reasonable security practices, such as not revealing such information to any other person and informing the customer care of OTPLESS or the Privacy Team about any suspicious activity.

Sharing your information

Third-party service providers. To provide our services effectively, we may engage trusted third-party service providers who assist us in collecting and transmitting personal information. These service providers can only access your personal information to the extent necessary and are subject to security requirements no less stringent than the measures taken by us.

Integrated websites and apps. When you choose to authenticate with integrated websites and apps through OTPLESS, we securely share your authenticated details (such as your name, email, or phone number) as necessary to facilitate the authentication process.

Compliance with legal requirements. We may disclose your personal information if required to do so by law or in response to a valid request from a governmental or regulatory authority.

Business transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of the transaction.

Consent and preferences. We will not share your personal information with any third parties for their marketing purposes without your explicit consent. You can revoke consent or modify your preferences at any time through the app’s settings.

International data transfers

OTPLESS’ services can be used globally, which means that your personal information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your jurisdiction.

Regardless of where your information is transferred, we take appropriate safeguards to ensure the security and confidentiality of your personal information and ensure that the security requirements of such persons are no less stringent than the measures used by us. These safeguards include requirements mandated by applicable laws for any cross-border transfer of personal information.

Your rights and choices

Access and control. You have the right to access, correct, update, or delete your personal information held by OTPLESS. If you encounter any difficulties, you may contact our Privacy Team for assistance.

Data portability. You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format.

Consent withdrawal. You can manage your consent preferences by contacting us via email at [email protected]. Withdrawal will not affect the lawfulness of any processing that occurred prior to the withdrawal.

Objection and restriction. You have the right to object to certain processing activities or request restrictions. We will assess your request and comply unless there are compelling legitimate grounds.

Communication preferences. You can opt out of promotional communications, newsletters, and non-essential notifications at any time within the app or by contacting our Privacy Team.

Right to lodge a complaint. If you believe that OTPLESS has not adequately addressed your privacy concerns, you have the right to write to us your grievances at the contact details below.

Children’s privacy

OTPLESS is not intended for use by individuals under the age of 16 (or the equivalent minimum age as defined by applicable data protection laws). We do not knowingly collect or process personal information from children without appropriate parental consent. If we become aware that we have collected personal information from a child without parental consent, we will take immediate steps to delete such information from our systems.

Data security

We have implemented comprehensive measures to protect your personal information from unauthorized access, use, or disclosure. These measures include encryption, firewalls, secure protocols, access controls, and ongoing security assessments.

While we strive to maintain the highest level of data security, please be aware that no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security, and you should take appropriate precautions to protect your own information.

Retention of personal information

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Terms of Use & Privacy Policy, unless a longer retention period is required or permitted by applicable law. Once your personal information is no longer required, we will securely delete or anonymize it.

Updates to the Privacy Policy

We may update this Terms of Use & Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. We will notify you of any changes by prominently posting a notice within OTPLESS or by other means as required under applicable laws. Apart from such publication, OTPLESS shall be under no obligation to inform or intimate you of any such change, modification, addition or deletion. Your continued use of OTPLESS after the effective date of any changes signifies your acceptance of the updated policy.

Restrictions

While accessing or using the app or the services, you shall ensure that you do not host, display, upload, modify, publish, transmit, update or share any information that:

• You do not have a right to make available under any law or contractual or fiduciary relationship.
• Is defamatory, vulgar, obscene, pornographic, paedophilic, invasive of another person’s privacy, libellous, racially or ethnically objectionable, or relates to money laundering or gambling.
• Is harmful to minors and children.
• Infringes patent, trademark, copyright, or other proprietary rights or intellectual property rights of any person or entity.
• Violates any applicable law, regulation, or generally accepted practices or guidelines in India or any other relevant jurisdiction.
• Deceives or misleads any other user, or knowingly communicates false or misleading information.
• Impersonates any person or entity, or falsely states or misrepresents your affiliation.
• Threatens the unity, integrity, defense, security or sovereignty of India, friendly relations with foreign States, or public order.
• Contains viruses, trojan horses, worms, spyware, or other malicious code.
• Is patently false and untrue, written or published with intent to mislead or harass for financial gain or to cause injury.

Without limiting the foregoing, you agree that you shall not:

• Decompile, reverse-engineer, or disassemble the contents of the website or app, or modify, copy, distribute, transmit, display, perform, reproduce, publish, license, or sell any information obtained from them.
• Engage in any activity that would interfere with another person’s use or enjoyment of the website, app, or services, including disruptive attacks such as denial-of-service.
• Access or use the website, app, or services in any manner that could damage, disable, overburden, or impair OTPLESS’s servers or networks.
• Disrupt or interfere with the security of the website, app, or services, or gain unauthorized access to user accounts, passwords, servers, or networks.
• Use deep-links, page-scrape, robots, spiders, or other automated devices to access, acquire, copy, or monitor any portion of the website or app.
• Use the website, app, or services for purposes not permitted by these Terms of Use & Privacy Policy or any applicable law.

You shall not (a) use the services for commercial purposes of any kind unless agreed with OTPLESS in writing; (b) advertise or sell the services, domain names, or solicit others (including for contributions or donations) without written agreement; or (c) use the services in any way that is unlawful or harms OTPLESS. You shall not upload any information or data that infringes the intellectual property rights of any third person.

Termination

OTPLESS may terminate your access where:

• You commit a breach of, or fail to comply with, any provision of this Terms of Use & Privacy Policy.
• You fail to comply with applicable law.
• You upload or provide information or data that violates any applicable law or this policy.
• You commit a breach of the intellectual property rights of OTPLESS or any third person.
• OTPLESS ceases to carry on its business or the app is taken offline.
• OTPLESS has reasonable grounds for suspecting illegal, fraudulent, unethical, or abusive activity.
• OTPLESS is investigating any complaints or alleged violations.
• OTPLESS believes, in its sole discretion, that your actions are causing or may cause legal liability for other users or OTPLESS.

OTPLESS shall have the right to immediately: (a) terminate your right of access; (b) investigate and take appropriate action; (c) file a complaint with the appropriate governmental, regulatory, or law-enforcement bodies; and/or (d) take any other action deemed appropriate under applicable law.

Cancellation and refund policy

We can cancel your subscription of OTPLESS services at any time you place such a request with OTPLESS. You agree that no refund shall be provided by OTPLESS for the cancellation of services for which money has already been paid. Notwithstanding anything, the cancellation and refund policy is subject to any agreement executed specifically with the customer.

Warranties

No warranty of any kind, implied, express, or statutory, including but not limited to the warranties of non-infringement of third-party rights, title, merchantability, satisfactory quality, or fitness for a particular purpose, is given in conjunction with the website, app, or its services. While OTPLESS may apply such technology as it deems fit to ensure security and prevent unauthorised access, the Company does not warrant that products/services or any content/data will be provided uninterrupted or free from errors. OTPLESS provides the website, app, services, and other products on an “as is”, “where is”, “with all faults” basis.

ALL OTHER WARRANTIES, WHETHER LEGAL, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY EXPRESS OR IMPLIED WARRANTIES OF MERCHANTABILITY, OF FITNESS FOR A PARTICULAR USAGE OR FOR THE INTENDED USE THEREOF ARE EXPRESSLY EXCLUDED IN CONNECTION WITH THE USE OF THE PLATFORM, THE WEBSITE, OR THE SERVICES OF OTPLESS.

Indemnification

You agree to indemnify, defend and hold harmless OTPLESS and its parent, subsidiaries, affiliates, partners, officers, directors, agents, contractors, licensors, service providers, subcontractors, suppliers, interns and employees (“Indemnified Parties”), from all claims, demands, losses, costs, fees suffered or incurred by the Indemnified Parties due to or arising out of your breach of this Terms of Use & Privacy Policy or the documents they incorporate by reference, or the violation of any law or the rights of a third party by you.

Exclusion of liabilities

Notwithstanding anything to the contrary, OTPLESS, its successors, agents, assigns, and each of their directors, officers, employees, associates, agents, and representatives shall in no event be liable to you for:

• Any indirect, incidental, special, consequential, punitive, or economic loss, expense, or damage arising from or in connection with any access, use, or the inability to access or use the website, app, or services.
• Any downtime costs, loss of revenue or business opportunities, loss of profit, loss of anticipated savings or business, loss of data, loss of goodwill, or loss of value of any equipment including software.
• Any loss or damage arising as a result of disclosure or hacking of your login details and password, or improper usage, failure, or malfunction of any computer or mobile phone, electricity outage, or other telecommunications equipment.
• Acts or omissions of any third party including participants, interviewers, equipment or software providers, service providers, or network providers.
• Theft or loss of your computer, mobile phone, data, login details, password, or hardware.

NOTWITHSTANDING ANYTHING TO THE CONTRARY, IN NO EVENT SHALL OTPLESS OR ANY OF ITS DIRECTORS, EMPLOYEES, AGENTS AND/OR PERSONNEL BE LIABLE TO THE USER OR ANY PERSON FOR ANY DAMAGES, LIABILITIES, LOSSES, AND CAUSES OF ACTION ARISING OUT OF OR RELATING TO: (I) THESE TERMS OF USE & PRIVACY POLICY, THE WEBSITE, APPLICATION OR OTPLESS SERVICES, OR ANY REFERENCE SITE, APP, SERVICES; OR (II) YOUR USE OR INABILITY TO USE THE WEBSITE, APPLICATION OR OTPLESS SERVICES OR ANY REFERENCE SITE; OR (III) ANY OTHER INTERACTIONS WITH THE COMPANY; HOWEVER CAUSED AND WHETHER ARISING IN CONTRACT, TORT INCLUDING NEGLIGENCE, WARRANTY OR OTHERWISE, BEYOND OR IN EXCESS INR 1,000, OR ANY LOWER AMOUNT AS MAY BE PERMITTED UNDER APPLICABLE LAWS, WHICHEVER IS LESS.

Governing law and jurisdiction

This Terms of Use & Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to conflict-of-law principles. Further, this Terms of Use & Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts located in New Delhi, and you hereby accede to and accept the jurisdiction of such courts.

Contact us

If you have any questions, concerns, or inquiries regarding this Terms of Use & Privacy Policy, please contact our Privacy Team. We are here to assist you and address any privacy-related issues you may have.

We value your trust and appreciate your decision to use OTPLESS. We will continue to uphold the highest standards of data privacy and security as we strive to deliver a seamless and trustworthy user experience.