Privacy policy, Rudvanth

Who we are

Rudvanth AI Technologies Private Limited (“Rudvanth”, “we”) is a private limited company registered in India, with its registered office in Kanpur, Uttar Pradesh. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we act as a Data Fiduciary in respect of personal data collected through this website, and as a Data Processor in respect of personal data we handle on behalf of clients under a services agreement.

Questions, requests and complaints: privacy@rudvanth.com.

What we collect

Information you give us. When you submit the contact form or email us, we receive your name, email address, organisation and the content of your message. We do not require any of this beyond a name, an email address and a message.

Information collected automatically. We use privacy-preserving, cookieless analytics to understand which pages are read. This records aggregate information such as page URL, referrer, approximate country, browser and device type. It does not set cookies, does not use device fingerprinting, and does not build a profile of you across sites or sessions.

What we do not collect. This site sets no advertising cookies, runs no third-party tracking pixels, and does not sell, rent or share personal data with advertisers or data brokers. We have no interest in doing so.

Why we process it

To reply to your enquiry and, where relevant, to negotiate and perform a contract with you or your organisation.
To keep a record of business communications, which we are required to maintain for tax and corporate compliance purposes.
To understand, in aggregate, how the site is used so we can improve it.
To protect the site against abuse, spam and automated attacks.

Where the DPDP Act requires consent, we rely on the consent you give by voluntarily submitting the contact form for the stated purpose. You may withdraw it at any time, as easily as you gave it, by writing to privacy@rudvanth.com.

Who we share it with

We use a small number of processors to run this website and our correspondence, including a static hosting and content delivery provider, an email delivery provider for contact-form notifications, an email and productivity provider for our own inboxes, and an analytics provider. Each is bound by contract to process personal data only on our instructions. A current list is available on request.

Some of these providers operate infrastructure outside India. Where personal data is transferred abroad we do so in accordance with applicable Indian law and under contractual protections with the provider.

We will disclose personal data to a public authority only where we are legally obliged to, and we will tell you where we are permitted to do so.

How long we keep it

Contact-form and email correspondence: up to 24 months from our last exchange, unless it forms part of a contractual or statutory record, in which case we keep it for the period Indian tax and corporate law requires.
Analytics: aggregate only, retained for up to 12 months. It is not linked to an identifiable person.

Your rights

Under the DPDP Act you have the right to:

obtain confirmation of, and access to, the personal data we hold about you;
have inaccurate or incomplete data corrected, updated or completed;
have your personal data erased where we no longer need it for the purpose it was collected;
nominate another individual to exercise these rights on your behalf in the event of death or incapacity; and
escalate an unresolved grievance to the Data Protection Board of India.

Write to privacy@rudvanth.com and we will respond within 30 days. We do not charge for this.

Security

We apply reasonable technical and organisational safeguards, including encryption in transit, least-privilege access, multi-factor authentication on all company accounts, and periodic access review. No system is perfectly secure; if we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board as required. Our vulnerability disclosure process is described on our security page.

Client data

Personal data we handle inside a client engagement is governed by the services agreement and data processing terms with that client, not by this policy. In those engagements the client is the Data Fiduciary and Rudvanth is a Data Processor acting on documented instructions. We do not use client data to train models, to build products, or for any purpose other than delivering the engagement.

Children

This site is not directed at children and we do not knowingly collect personal data of anyone under 18. If you believe we have, write to us and we will delete it.

Changes

If we change this policy materially we will update the date at the top and, where the change affects how we use data you have already given us, contact you directly.