Legal · Compliance
Compliant by design
HRAReceipt.in is architected so that document data never leaves your browser.
Below: precise claims for India's DPDP Act 2023, each linked to the technical guarantee that supports it.
— Some things should never leave your browser.
In this section
Last reviewed: September 2026
What we receive when you generate a document: nothing.
Every field you type — your name, your landlord's PAN, your salary, your GSTIN — is processed in your browser and rendered to PDF on your device. No document field is ever transmitted to us, logged, or stored. There's no document-data breach surface because there's no document data to breach.
The only data we get to know is that a payment has been made, and that too through our payment-gateway partner. We never receive or store the contents of any document you create.
India · Digital Personal Data Protection Act 2023
DPDP Act 2023
India's Digital Personal Data Protection Act 2023 (the "DPDP Act") regulates how Data Fiduciaries process personal data of Data Principals (individuals) in India. The DPDP Rules 2025 were notified in November 2025; their obligations phase in by schedule, with full compliance required by 13 May 2027.
HRAReceipt.in's architectural posture is compliant by design: the categories of personal data the DPDP Act regulates (name, address, PAN, financial details, employment data) are processed entirely in your browser and never transmitted to us. We cannot disclose, sell, lose, or breach data we never receive.
DPDP Act §5 Notice:
The DPDP Act requires a Data Fiduciary to provide notice (Section 5) of personal data being collected and its purpose. Because document fields are processed entirely in your browser and never reach us, no §5 notice is required or rendered at the document forms. For the payment step, Razorpay is a separate Data Fiduciary and issues its own notice under its privacy policy.
For the legal text, see the Ministry of Electronics & Information Technology DPDP framework and the Act text via PRS Legislative Research.
Service providers: Razorpay (payments), Vercel (hosting and cookieless analytics), Cloudflare (CDN).
Disclosure and contact
HRAReceipt.in is operated from India. The claims above describe architectural invariants of the live site as of the last-reviewed date. For DPDP-related requests or audit inquiries, contact [email protected]. See also our Privacy Policy.
References
Last reviewed: 28 September 2026