Home › Privacy Policy
Privacy Policy
Last updated: 24 September 2026 · Controller: DestroCorp, India · Contact: support@destrocorp.com · Grievance: grievance@destrocorp.com
1. Who we are
This website and the brands Kirvyn (kirvyn.com), AuditScan (auditscan.sh) and Buildopsy (buildopsy.com) are operated by DESTROCORP , a remote-first studio registered in India.
2. Data we collect
2.1 Account data (all brands)
- Name, email address, phone number (where provided), password hash (never plaintext).
- Support correspondence.
2.2 Product data
- Kirvyn: club memberships, chat messages (retained 90 days, then auto-deleted), event RSVPs, city-level location for club discovery (only with permission).
- AuditScan: repository file names, scan results and triage state. Source code you point at is analysed, never executed; hosted-scan copies are deleted after the report is generated unless you save the project.
- Buildopsy: reading preferences, course enrolments and progress.
2.3 Payment metadata
Processed by our payment processor. We receive payment ID, amount, status and settlement reference. We do not collect, transmit or store card numbers, UPI PINs or net-banking credentials.
2.4 Technical data
- IP address, device/browser type, pages visited, timestamps — used for security, fraud prevention and aggregated reliability metrics.
- Hosting region: secure cloud infrastructure.
3. Legal bases
- India (DPDP Act 2023): your consent (signup checkbox, cookie banner) and legitimate use for service delivery.
- EU/UK GDPR: consent (Art. 6(1)(a)), contract (Art. 6(1)(b)) and legitimate interests in security/fraud prevention (Art. 6(1)(f)).
- Other regions: consent and contract equivalents under CCPA/CPRA (California), LGPD (Brazil), PIPEDA (Canada) and the Australian Privacy Act.
You may withdraw consent anytime via Cookie settings or by emailing grievance@destrocorp.com. Withdrawal does not affect prior lawful processing.
4. Purposes
Provide and improve the services · process payments and refunds · prevent fraud and abuse · provide support · comply with legal obligations (IT Act 2000, IT Rules 2021, tax record-keeping). We do not use your data for third-party advertising.
5. Retention
| Data | Retention |
|---|---|
| Kirvyn chat messages | 90 days, then auto-deleted |
| Account data | Until you delete your account, then 30 days for safety backups |
| AuditScan reports you save | Until you delete them |
| Payment/invoice records | 8 years (Indian tax law requirement) |
| Security logs | 12 months, then aggregated or deleted |
6. Sharing
- our payment processor (payment processing) — payment metadata only.
- Cloud/hosting providers (secure cloud infrastructure) — infrastructure only, under data-processing terms.
- Authorities — only when required by Indian law with valid process, and we disclose the minimum necessary.
We do not sell personal data. We do not share data with advertisers or data brokers. International transfers (if any) use contractual safeguards plus encryption in transit and at rest.
7. Your rights (all countries)
Access · correction · erasure · portability (machine-readable export) · consent withdrawal · grievance redressal · nomination (India DPDP Act). California residents: right to know, delete and non-discrimination; we do not sell/share personal information as defined by CCPA/CPRA. To exercise any right, email grievance@destrocorp.com or use the data-rights form. We acknowledge within 24 hours and resolve within 15 days.
8. Children
Our services are for users 18+. We do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account promptly.
9. Security
Encryption in transit (TLS), least-privilege access, secrets never in code, nightly database backups. See Security. No system is perfect — report suspected breaches to grievance@destrocorp.com and we will notify affected users and authorities as required by law.
10. Cookies
Details in the Cookie Policy. In short: strictly-necessary first-party consent storage only, unless you opt into analytics. Do-Not-Track and Global Privacy Control signals are honoured.
11. Changes
We will post changes here with a new “Last updated” date and, for material changes, notify account holders by email at least 7 days in advance.
12. Grievance Officer (IT Rules 2021)
Role: Grievance Officer, DestroCorp · Email: grievance@destrocorp.com. Acknowledgement in 24 hours, resolution in 15 days. Nodal contact for law enforcement as per the IT Rules.