Effective date: 23 August 2026
1. Scope of this policy
This Privacy Policy explains how Pincode API may handle personal information when you visit pincodeapi.in, use the public API, contact us or use another service that links to this policy. Pincode API is an independent service and is not an official India Post or Government of India website.
2. Information we may receive
Website and API request information
Our hosting, content-delivery, security and API systems may process technical information needed to deliver and protect the service. This can include an IP address, request time, requested URL or API path, HTTP method, response status, browser or user-agent details, referring page and security or rate-limit information.
Information you send to us
If you email us, report a data correction, request support or make a sales enquiry, we receive the information that you choose to send, including your email address and the contents of your message.
Account and billing information
The currently available Starter plan is free. If account-based or paid plans are introduced later, we will update the relevant notice before collecting account, billing or payment-related personal information that is not covered here.
3. How we use information
- To deliver website pages and API responses.
- To apply rate limits and protect the service from misuse, fraud, attacks and abnormal traffic.
- To investigate technical errors and maintain service reliability.
- To reply to support, correction, privacy, legal and sales enquiries.
- To meet legal, regulatory or lawful government requirements where they apply.
- To understand service performance using information that is reasonably necessary for that purpose.
4. Legal basis and Indian data-protection framework
India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 use a phased commencement framework. We aim to follow clear notice, lawful-purpose, data-minimisation, security and grievance principles as the applicable provisions come into force. Where another privacy law requires a separate lawful basis, we rely on the basis that fits the purpose, such as performance of a service or contract, legitimate interests, consent or compliance with a legal obligation.
5. Search privacy
The website's directory search uses static JSON search shards in the browser. A normal directory search does not need to send the search phrase to a separate search server operated by Pincode API. Standard web requests used to load the page or the required search shard may still be visible to hosting or security infrastructure.
6. Cookies and similar technology
The website does not currently require non-essential advertising or behavioural-tracking cookies for its core directory and API documentation. Hosting or security providers may use strictly necessary cookies or similar technology for security, traffic management or service delivery. Please read the Cookie Policy for the current position.
7. Sharing and service providers
We may use hosting, CDN, security, email and infrastructure providers to operate the service. Those providers may process limited information on our behalf or under their own legal obligations. We may also disclose information where required by law, a valid legal process, a court order or a lawful government request, or where reasonably necessary to protect rights, safety or service security.
We do not sell personal information. We do not state that personal information is shared for cross-context behavioural advertising. If that changes, we will update this policy and provide any controls required by applicable law.
8. International processing
Internet infrastructure can operate across more than one country. Service providers may process technical information in locations where they operate. Where a law requires specific safeguards for an international transfer, we will use an appropriate legal mechanism or other required protection.
9. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including security, abuse prevention, troubleshooting, correspondence and legal obligations. Exact log periods can vary by infrastructure provider and configuration. Support and legal correspondence may be retained for longer when needed to resolve an issue, keep a record of a request or meet a legal requirement.
10. Security
We use reasonable technical and organisational measures intended to protect the service and information handled through it. No internet service can guarantee absolute security. If you believe you have found a security problem, please contact security@pincodeapi.in and avoid publicly disclosing sensitive details before we have had a reasonable opportunity to review them.
11. Your privacy rights
Your rights depend on the law that applies to you and to the processing. Where applicable, you may have rights to receive information about processing, request access, correction or deletion, withdraw consent, object to or restrict certain processing, obtain portable data, or raise a grievance or complaint.
For example, the EU GDPR provides rights such as access, rectification, erasure, restriction, portability and objection in relevant cases. California law may provide rights such as knowing, deleting, correcting, opting out of sale or sharing, limiting certain uses of sensitive personal information and non-discrimination when the relevant law applies to a business. These examples do not mean that every law applies to every visitor or to Pincode API in every situation.
To make a privacy request, email privacy@pincodeapi.in. We may ask for reasonable information to verify that the request relates to you. We will not ask for more information than reasonably necessary for verification.
12. Children
The service is a general postal-information resource and is not designed to collect personal information from children. If you believe a child has provided personal information directly to us in a way that should be removed, contact privacy@pincodeapi.in.
13. Changes to this policy
We may update this policy when the service, law or our data-handling practices change. The effective date at the top of the page will be updated for material revisions.
14. Contact and complaints
Privacy and data-rights requests: privacy@pincodeapi.in. Formal legal correspondence: legal@pincodeapi.in. Formal grievances: grievance@pincodeapi.in. You may also use the Grievance & Complaints page. If a privacy law gives you a right to complain to a regulator or supervisory authority, that right is not affected by this policy.