1. 🔌 Developer API
  3. ⚖️ Statutory Privacy API
MudraHQ AppAdmin ConsoleGitHub
  • 🔌 API Reference Overview
  • 🧾 Invoices API
  • ⚖️ Statutory Privacy API

⚖️ Statutory Privacy API

REST API endpoints for DPDP Act Section 5 privacy notices, Section 13 grievance officer details, and Section 12 erasure requests.

Loading documentation…

🧾 Invoices API< Previous

Powered by heyo-docs

On this page

1. Get Statutory Privacy NoticeResponse (HTTP 200 OK)2. Get Grievance Redressal OfficerResponse (HTTP 200 OK)3. Submit Customer Erasure RequestRequest BodyResponse (HTTP 200 OK)

The Privacy API enables automated compliance verification for audits by the Data Protection Board (DPB) of India, CERT-In, and tax authorities.

1. Get Statutory Privacy Notice

GET /api/privacy/notice

Returns the official machine-readable and human-readable statutory privacy notice satisfying Section 5 of the Digital Personal Data Protection Act 2023.

Response (HTTP 200 OK)

json
{  "statutoryFramework": "Digital Personal Data Protection Act (DPDP Act 2023) & CGST Act 2017",  "dataFiduciary": "MudraHQ Invoicing Hub",  "processingPurposes": [    "Goods and Services Tax (GST) invoice generation and preservation",    "Customer accounts receivable ledger accounting",    "Statutory record preservation under Section 36 of CGST Act (72 months)"  ],  "retentionPeriod": "72 months from the annual return due date pursuant to CGST Act Section 36",  "grievanceOfficer": {    "name": "Data Protection & Grievance Redressal Officer",    "email": "support@mudrahq.tech",    "turnaroundSLA": "Under 30 days"  }}

2. Get Grievance Redressal Officer

GET /api/privacy/grievance

Returns contact details for the designated Grievance Redressal Officer required under DPDP Act Section 13.

Response (HTTP 200 OK)

json
{  "officer": "Designated Grievance Redressal Officer",  "contactEmail": "support@mudrahq.tech",  "sla": "30 days resolution window",  "escalationBody": "Data Protection Board of India"}

3. Submit Customer Erasure Request

POST /api/privacy/erasure-request

Initiates an automated Right to Erasure execution under DPDP Act Section 12.

Request Body

json
{  "customerId": "cmudcust001",  "reason": "Customer withdrawn consent for non-statutory processing"}

Response (HTTP 200 OK)

json
{  "success": true,  "action": "ANONYMIZED_AND_SCRUBBED",  "statutoryNote": "Customer PII has been scrubbed to anonymized state. Financial totals preserved under CGST Section 36.",  "auditLogId": "cmudaudit0098"}