Ajugnu Platforms
DPDP Act (India) Compliant • Chrome Web Store Certified

Privacy Policy

Last Updated: March 2026 • Operational Entity: Ajugnu Platforms (ajugnu.com) • Product: DeskDoor Form Copilot

1. Commitment to Privacy (Local-First Principle)

Ajugnu ("we", "our", or "us") operates DeskDoor, a productivity browser extension tailored for cyber cafés, CSC operators, and students in India. We operate on a strict Privacy-by-Design and Local-First operational model. Unlike traditional web services, candidate personal identifying data entered into DeskDoor is retained solely within the local storage of the operator’s web browser (using IndexedDB) and is never uploaded, parsed, or held in plain text on our cloud servers.

2. Data Collection and Processing Specifics

We classify processed data into two transparent categories:

A. Student / Candidate Information (Stored Locally Only)

  • Data Fields: Candidate full name, father's name, mother's name, date of birth, category/caste, gender, last 4 digits of Aadhaar/Identity card, Class 10th/12th/Graduation passing marks, roll numbers, and boards.
  • Where It Resides: Stored strictly in the user's browser client via IndexedDB.
  • Cloud Transmission: None. These details are directly populated into active exam portal DOM forms via isolated client-side scripts. Our backend infrastructure has zero visibility into student names, roll numbers, or academic transcripts.

B. Account, Billing & Cryptographic Validation Data (Cloud-Synchronized)

  • Shopkeeper Profile: Shop name, owner full name, phone number, registered email, state, district, city, and hashed security PIN (salted using bcrypt).
  • Candidate Token Hash (SHA-256): To prevent duplicate billing for the same student across a 6-month validity window, the extension computes a one-way cryptographic SHA-256 hash of the student’s 10-digit mobile number locally before initiating an API call. The server stores only this irreversible hash value (`candidate_hash`) and never receives or records the raw mobile number.
  • Billing & Ledgers: Wallet balance credits, recharge orders, transaction timestamps, and payment gateway references (Razorpay order/payment IDs).

3. Chrome Extension Permission Disclosures (Manifest V3)

DeskDoor requests minimal permissions necessary for its single-purpose workflow:

  • storage: Required to preserve local session tokens, wallet balance caches, and UI preferences.
  • activeTab & scripting: Utilized strictly when the operator triggers the "1-Click Auto-Fill" button. It injects a content script into the active examination portal tab to match form input fields with the locally selected profile. No screen recording, keystroke logging, or background scraping is performed.

4. Client-Side Image Resizing & Compression

The DeskDoor document resizer functions entirely offline utilizing client-side HTML5 Canvas technology. When candidate photographs or signatures are loaded into the resizer, all pixel manipulation and byte compression occur on the user's local CPU. Uploading documents to external image processing servers is completely bypassed.

5. Encrypted Backup Files (.cdb)

Operators exporting candidate records generate a encrypted container file (.cdb). Data inside this backup is encrypted using AES-GCM (256-bit) with a cryptographic key derived from a user-supplied password via PBKDF2 (100,000 SHA-256 iterations). Ajugnu cannot decrypt, access, or reset passwords for lost backup files.

6. Third-Party Integrations & Payment Gateway

Recharge transactions are processed via Razorpay Software Private Limited. When initiating a payment, operators interact directly with Razorpay’s PCI-DSS compliant checkout screen. Ajugnu does not collect, log, or store credit card numbers, debit card PINs, UPI PINs, or net banking passwords.

7. Data Retention & User Control

  • Local Data Purging: Clearing browser cache or deleting the Chrome extension permanently wipes all locally stored candidate records from IndexedDB.
  • Account Deletion: Shopkeepers can request permanent deactivation of their operator ID and deletion of associated audit logs by emailing our designated grievance officer.

8. Contact & Grievance Redressal

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, queries or grievances regarding data processing may be addressed to:

Data Grievance Officer: DeskDoor Compliance Team
Platform: Ajugnu Platforms (ajugnu.com)
Official Support Email: deskdoor@ajugnu.com