Emergent | Fullstack App

Lanten Trust Infrastructure Private Limited ("Lanten", "We", "Us", or "Our") operates as a Data Fiduciary under the Digital Personal Data Protection (DPDP) Act, 2023. We are thoroughly dedicated to protecting the structural data integrity and digital privacy of our users ("Data Principals"). This Privacy Policy explains exactly how we collect, process, manage, store, secure, and erase your personal data when you interact with the Lanten scoring environment.

Categories of Personal Data We Process

To evaluate, calculate, and publish your bilateral Lanten Rental Score, we require the explicit collection and processing of the following specific personal data classes:

Identity Indicators & KYC Data

Full Legal Name, Phone Number, Email Address, PAN (Permanent Account Number), and Aadhaar information (processed strictly via approved voluntary private-use verification pipelines).

Tenant Financial Ledger Data

User-uploaded rent payment amounts, transaction dates, bank narration markers, rent receipts, and chronological payment records.

Landlord Operational Data

Property-ownership indicators, registered property addresses, tax receipts, and transactional records tracking security-deposit holdings and refund timelines.

System Log Metadata

IP Addresses, browser session trackers, active token-generation logs, device fingerprints, and security-lookup tracking timestamps.

Legal Grounds and Specific Purposes for Processing

Lanten processes digital personal data exclusively based on your unambiguous, affirmative, specific, and freely given Consent. The data is handled strictly for the following explicit lawful purposes:

To execute the algorithmic pipeline that computes and updates your 300–900 Lanten Score.
To facilitate the temporary 6-digit access-token handshake that lets authorized landlords verify a profile.
To assess conditional eligibility parameters for NBFC deposit loans or rent-guarantee insurance options inside the Marketplace dashboard.
To maintain infrastructure security, isolate account exploitation, and eliminate fraud or data-manipulation attempts on the platform.

Concrete Mechanisms for Consent Withdrawal

Under Section 6 of the DPDP Act, 2023, you maintain an absolute right to withdraw your consent for data processing at any point in time.

How to Withdraw

You can easily trigger data consent revocation directly through your profile settings page using our global "Revoke Consent & Delete Account" switch, or by emailing our data-privacy desk at dataprivacy@lanten.in.

Impact of Withdrawal

Revoking consent does not affect the legality of any data processing performed prior to the withdrawal. Upon notice of withdrawal, Lanten will instantly cease processing your personal data and direct its integrated Data Processors to execute immediate deletion, unless retaining it is mandatory to comply with overriding Indian statutory obligations.

Data Sharing and System Integrations

Lanten will never lease, trade, or distribute your raw identity details or financial transaction narratives to external third-party advertisers. Data sharing is limited strictly to the following scenarios:

The Handshake View

Authorized Landlords gain access to your Tenant Screening Report only if you manually generate and deliver your unique 6-digit access code to them.

Marketplace Integrations

If you explicitly click "Apply Now" on a financial-product option, your contact particulars, identity tokens, and core score-band metrics are securely routed to the partner NBFC or insurance broker underwriting that specific program.

Law-Enforcement Compliance

Data sets may be disclosed if required by an order under Indian law or to defend absolute legal claims before quasi-judicial tribunals.

Technical Data Security and Safeguards

In strict alignment with Section 8(5) of the DPDP Act, 2023, Lanten deploys commercial-grade technical and organizational safeguards designed to completely block unauthorized access, altering, or leakage of digital personal data:

All data records are encrypted in transit using TLS 1.3 protocols and kept encrypted at rest using AES-256 standard structural configurations.
Token registries use single-use, timed cryptographic salts.
Access-control structures are isolated using robust role-based constraints.
Database logs are securely archived and audited periodically to detect system breach signatures.

Storage Limitations and Data Erasure Guidelines

Purpose-Limitation Retention

Your personal data will be actively retained on our databases only for the period necessary to fulfill your active score calculations and maintain account profiles.

Automated Erasure

If an account exhibits complete inactivity for a rolling period exceeding 180 days, or immediately upon user-directed consent withdrawal, our system pipelines initiate an automated erasure protocol. All related records across active tables are structurally scrubbed, anonymized, or hard-deleted from production logs within 30 days, except where law requires longer retention.

Statutory Rights of the Data Principal

As a Data Principal under the DPDP Act, 2023, you hold the following explicit legal rights on the Lanten platform:

Right to Summary & Access

The right to look over an itemized summary of your processed personal data and tracking records.

Right to Correction and Erasure

The right to correct inaccurate indicators, patch incomplete profiles, or demand full erasure of historical logs.

Right to Grievance Redressal

The right to escalate an unresolved data-misuse issue directly to our specialized Grievance Officer.

Right to Nominate

The right to nominate another individual to manage your data-privacy options in the event of death or physical incapacity.

Data Breach Notification Commitments

In the event of an accidental data leak, structural hardware compromise, or malicious security bypass affecting your personal data, Lanten will fulfill its strict legal obligations under Section 8(6) of the DPDP Act, 2023. We will deliver a comprehensive Data Breach Notice containing an impact report and corrective guidelines directly to the affected users and the Data Protection Board of India (DPBI) without any undue delay.

Designated Grievance Redressal Officer

If you have any questions, wish to exercise your data-principal rights, or want to file a formal complaint regarding data-processing habits on the Platform, please contact our office directly:

Attention
Grievance Redressal Officer, Data Security & Compliance Cell

Corporate Entity
Lanten Trust Infrastructure Private Limited

Email
compliance@lanten.in

Statutory Escalation Window
We acknowledge all privacy complaints within 24 hours and resolve core data grievances within 15 business days. If you find our internal resolution unsatisfactory, you hold the explicit statutory right to escalate the matter directly to the Data Protection Board of India (DPBI).