Privacy Policy

Effective Date: 10 July, 2025
Last Updated: 10 July, 2025

iDharma, Inc. (“iDharma,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use our platform, services, tools, and website (collectively, the “Platform”).
By using iDharma, you agree to the practices described in this policy.

1. What Information We Collect

We collect the following types of information:


a. Information You Provide

  • Account details: name, email, company name, role, industry
  • Profile data: biography, credentials, service offerings, certifications
  • Uploaded content: proposals, documentation, deliverables, case studies
  • Payment information (processed via secure third-party payment processors)
  • Tool or solution listings, descriptions, and metadata

Automatically Collected Data

  • IP address, browser type, device information
  • Platform usage logs (e.g., clicks, messages, project views)
  • Session data, cookies, and analytics identifiers
  • Geographic and time-based access data

Third-Party Data

  • Identity verification and credential validation partners
  • Public sources (LinkedIn, GitHub, company websites)
  • Payment service providers and compliance processors

2. How We Use Your Information

We use your data to:

  • Operate and maintain the Platform
  • Enable project collaboration, tool listing, and contracting
  • Match clients with consultants, tools, or solutions
  • Provide verification, certification, and moderation services
  • Communicate updates, policy changes, and support messages
  • Monitor usage for security, compliance, and platform improvement
  • Enforce our Terms of Use and resolve disputes

We do not sell your personal data. We do not use your data to train models or run behavioral advertising.

3. Legal Basis for Processing (GDPR)

If you are located in the EEA, UK, or Switzerland, we rely on these legal bases:

  • Your consent
  • Performance of a contract
  • Compliance with legal obligations
  • Our legitimate interests (e.g., security, fraud prevention, platform improvement)

4. Sharing and Disclosure

We only share personal data with:

  • Verified users you directly engage with
  • Third-party infrastructure providers (e.g., cloud hosting, payment processors)
  • Legal authorities when required by law or enforceable request
  • Platform administrators and governance personnel for moderation and dispute resolution

Tool vendors and consultants do not gain access to user data outside the scope of an agreed project, contract, or tool transaction.

5. Data Retention

We retain data as follows:

Data Type Retention Period
Retention Period Account data Until account is deleted or inactive for 24 months
Project communications Project communications
Tool transactions Minimum 3 years for audit/legal purposes
Support tickets and logs 12–36 months, depending on type
Review and feedback records Retained unless removal is requested

You may request deletion at any time (see Section 9).

6. Cookies and Tracking

We use essential and performance-based cookies only. These include:

  • Session cookies (for login/authentication)
  • Analytics cookies (e.g., page visits, click behavior)
  • Security cookies (fraud detection and abuse prevention)

You may opt out of non-essential cookies via your browser settings.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data (“Right to be Forgotten”)
  • Object to or restrict processing
  • Request data portability (export in machine-readable format)
  • Withdraw consent at any time (if applicable)

→ Submit a Data Request

8. Data Security

  • End-to-end encryption of stored and transmitted data
  • Role-based access controls
  • Two-factor authentication (2FA) for all verified users
  • Internal audits and penetration testing
  • Geographic redundancy and disaster recovery infrastructure

9. Data Access & Deletion Requests

To access or delete your data, submit a request via:

  • Your dashboard privacy settings
  • Our Privacy Request Form
  • Email: privacy@idharma.us

We respond to most requests within 5 business days

10. Data Access & Deletion Requests

Data may be processed outside of your country of residence, including in the United States. By using the platform, you consent to such transfers, in compliance with applicable data transfer laws and safeguards (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy periodically. If we make significant changes, we will notify you by email or within the platform.
Your continued use of iDharma after an update means you accept the revised policy.

12. Contact Us

If you have questions about this policy or your data:


Email: privacy@idharma.us
Mailing Address: info@idharma.us
Support Hub Submit a Support Request

Your privacy is not a feature. It’s a foundation.
At iDharma, it’s built into the architecture.