Y&A Legal

Private Limited vs LLP vs OPC: Which Structure Is Right for Your Startup in India?

Choosing the right legal structure is one of the first and most consequential decisions a startup founder in India makes. Get it wrong and you may find yourself restructuring just before a funding round, or worse, dealing with a cap table that no investor will touch. This guide, written from the perspective of a startup […]

Private Limited vs LLP vs OPC: Which Structure Is Right for Your Startup in India? Read More »

Vendor and SaaS Agreements: What Startups Must Check Before Signing

A modern startup is a thin layer of product on top of a thick stack of vendors. Cloud infrastructure, payment gateways, payroll software, customer support tools, analytics SDKs, AI APIs, marketing platforms — each one is governed by a contract that the founder usually clicked through without reading. Most of the time, that is fine.

Vendor and SaaS Agreements: What Startups Must Check Before Signing Read More »

Why Your Startup Needs a Strong Terms of Service and Privacy Policy

Open the footer of almost any Indian startup website and you will find two links: “Terms of Service” and “Privacy Policy.” Click them and you will often find documents that are awkwardly worded, copy-pasted from a competitor, or wildly mismatched with what the product actually does. These two documents are doing more legal heavy lifting

Why Your Startup Needs a Strong Terms of Service and Privacy Policy Read More »

Founder Agreements: Protecting Your Startup Before It Takes Off

Most founder disputes are entirely predictable in hindsight. One co-founder feels she is doing more work. Another wants to slow down. A third wants to pivot or quit. Without a clear, written agreement signed early, these tensions become legal disputes — sometimes existential ones. A well-drafted Founders’ Agreement is an inexpensive, high-leverage piece of insurance

Founder Agreements: Protecting Your Startup Before It Takes Off Read More »

POSH Compliance for Startups: Why It’s Non-Negotiable Even for Small Teams

Many founders treat POSH compliance as something to think about “once we hit 50 people.” That is a mistake — both legally and culturally. The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 — popularly called the POSH Act — kicks in much earlier than most founders realise, and the consequences

POSH Compliance for Startups: Why It’s Non-Negotiable Even for Small Teams Read More »

Penalties Under the DPDP Act 2023: What Non-Compliance Could Cost Your Business

When the Digital Personal Data Protection Act, 2023 was enacted, the headline that travelled fastest in startup circles was the ₹250 crore figure. It is, deservedly, a wake-up call. But the penalty structure under the DPDP Act is more nuanced than a single big number — and understanding the gradient of penalties is essential to

Penalties Under the DPDP Act 2023: What Non-Compliance Could Cost Your Business Read More »

DPDP Compliance Checklist for Startups: A Step-by-Step Guide

“Where do we even start?” That is the most common question founders ask once they realise the Digital Personal Data Protection Act, 2023 applies to them. The Act looks deceptively short — just over 40 sections — but its operational footprint inside a startup is enormous. From engineering to HR to vendor management, almost every

DPDP Compliance Checklist for Startups: A Step-by-Step Guide Read More »

Data Principal Rights Under DPDP Act: What Your Customers Can Demand

Until recently, an Indian customer who wanted to know what data a company held on her had little real recourse. The Digital Personal Data Protection Act, 2023 changes that. The Act gives every “data principal” — your user, employee, or customer — a clear bundle of rights, and it places the burden of honouring those

Data Principal Rights Under DPDP Act: What Your Customers Can Demand Read More »

Digital Personal Data Protection Act, 2023 – Research memo on statutory obligations of a “Data Fiduciary”

This memorandum summarizes the statutory obligations of a “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). It focuses on Chapter II (Obligations of Data Fiduciary) and related provisions, and notes enforcement and penalties. A short commencement status is included to clarify timing of in‑force provisions. Statutory citations refer to the DPDP

Digital Personal Data Protection Act, 2023 – Research memo on statutory obligations of a “Data Fiduciary” Read More »