CERT-In’s investigation found that DeepSeek tracks user behaviour in ways that go beyond standard data collection practices.