Privacy Policy | Avishkar AI

1. Who we are

This website, avishkarai.com, is owned and operated by Anjaneyaai Technologies Private Limited, a company incorporated in India on 21 April 2025 under the Companies Act, 2013. Avishkar AI is a registered trademark of Anjaneyaai Technologies Private Limited and is the brand under which we offer our products and services.

In this policy, "we", "us", "our" and "Avishkar AI" mean Anjaneyaai Technologies Private Limited. "You" means any person who visits this website, contacts us through it, subscribes to our communications, or uses our products and services.

Registered name: Anjaneyaai Technologies Private Limited

CIN: U62099KA2025PTC201685

GSTIN: 29ABCCA7283K1Z6

Udyam registration: UDYAM-KR-03-0732808

DPIIT recognition: DIPP274310

Registered office: [registered office address], Bengaluru, Karnataka, India

Operating office: [operating office address], Mangaluru, Karnataka, India

Email: arpit@avishkarai.com

2. What this policy covers

This policy explains what personal data we collect when you interact with our website and our commercial activities, why we collect it, how we use and protect it, and what rights you have over it. It applies to the website at avishkarai.com and any subdomain, landing page, product page, form or newsletter operated by us.

It does not apply to personal data that our clients ask us to process on their behalf when they use our services. Section 8 explains how that data is handled and who is responsible for it.

3. The personal data we collect

3.1 Data you give us

Identity and contact details such as your name, job title, employer, email address, phone number and country, when you fill in a contact or demo form, subscribe to our newsletter, or email us.
The content of your enquiry, including any information you choose to include about your organisation, your operations or your requirements.
Information you share during a call, demonstration, pilot or workshop, including notes we take and, where you have agreed to it in advance, call recordings and transcripts.
Billing and tax information such as billing address, GSTIN, PAN or tax identification number, and bank or payment details, where you become a client or a vendor.
Recruitment information such as your CV, work history and references, if you apply for a role with us.

3.2 Data we collect automatically

Technical data such as IP address, approximate location derived from it, browser type and version, device type, operating system, language and time zone settings.
Usage data such as the pages you view, the links you click, the time and duration of your visit, and the site or advertisement that referred you.
Cookie and similar identifiers, as described in section 6.

3.3 Data we collect from other sources

Business contact information from public sources, professional networks and business data providers, which we use for business to business outreach.
Information from analytics, advertising and email platforms about how our campaigns and messages perform.
Information from our clients or partners where you are their employee or representative and they have asked us to work with you.

We do not deliberately collect special or sensitive categories of personal data through this website, such as health data, biometric data, financial account data or government identifiers. Please do not submit such information through our web forms. Where a service requires it, we will collect it under a separate written agreement with appropriate safeguards.

4. Why we use your personal data

To respond to your enquiries, provide information you have asked for, and arrange calls, demonstrations and pilots.
To provide, operate, support and improve our products and services, and to honour our contracts with clients and vendors.
To send you newsletters, product updates and marketing communications where you have subscribed or where we may lawfully contact you as a business contact. Every such message includes a way to unsubscribe.
To carry out business to business outreach about products and services we believe are relevant to your role.
To understand how our website is used, measure the performance of our content and campaigns, and improve both.
To protect our website, systems and users against fraud, abuse, security incidents and misuse.
To meet legal, tax, accounting and regulatory obligations, and to establish, exercise or defend legal claims.
To assess applications for employment or engagement with us.

5. Our legal basis for using your data

We process personal data on the basis of your consent, where consent is required; because processing is necessary to enter into or perform a contract with you; because we have a legitimate interest in running, protecting and growing our business that is not overridden by your rights; or because we are required to process it by law.

Where Indian law applies, we act as a data fiduciary under the Digital Personal Data Protection Act, 2023 and follow the Information Technology Act, 2000 and the rules made under it. Where the General Data Protection Regulation applies because we offer services to people in the European Economic Area or the United Kingdom, we act as a controller in respect of the data described in section 3 and rely on the bases set out above. Where United States state privacy laws apply, we act as a business or controller as those laws define the term.

You can withdraw consent at any time. Withdrawal does not affect processing carried out before you withdrew, and it may mean we can no longer provide a service that depends on that data.

6. Cookies and similar technologies

We use cookies and similar technologies to make the website work, to remember your preferences, to measure traffic and to understand which content and campaigns are effective. Strictly necessary cookies are set without consent because the site cannot function without them. Analytics, performance and marketing cookies are set only where you accept them through our cookie banner or your browser settings allow them.

You can block or delete cookies through your browser settings at any time. If you block cookies we use for core functions, parts of the site may not work as intended.

7. Who we share your data with

We do not sell personal data. We share it only in the circumstances below, and only to the extent needed.

Service providers who work for us under contract, including cloud hosting and infrastructure providers, email and customer relationship platforms, analytics providers, payment processors, and professional advisers. They may process personal data only on our instructions and must keep it confidential and secure.
Model and infrastructure providers where a service we operate for you involves them, subject to section 9.
Our clients, where you are their employee, contractor or representative and the data relates to work we do for them.
Government authorities, regulators, courts and law enforcement where we are legally required to disclose data, or where disclosure is necessary to protect our rights, our users or the public.
A buyer or successor entity in connection with a merger, acquisition, financing or reorganisation of our business, subject to this policy continuing to apply to the data transferred.

8. Data we process for our clients

When a client uses our products or engages us to build or operate a system, we often process personal data that belongs to that client or to people connected with them. Examples include images and video frames captured during a safety or compliance check, documents uploaded for verification, operational records, and messages exchanged with an assistant we have built.

In that work the client decides why and how the data is processed. The client is the data fiduciary, controller or business, and we act as a data processor or service provider on their instructions under a written agreement. If you want to know how your data is handled in one of those systems, or you want to exercise your rights over it, contact the organisation that operates the system. If you contact us instead, we will pass your request on to that organisation and support them in answering it.

Unless a client instructs us otherwise in writing, we do not use client data or the personal data within it to train our own models or to develop products for other clients. We retain client data for as long as the agreement with that client requires, and we delete or return it at the end of the engagement in accordance with that agreement.

9. Artificial intelligence and automated processing

Our products use machine learning models, including models supplied by third parties. Depending on the service, data may be sent to those providers to generate a result. Where we can, we use enterprise arrangements under which the provider is contractually barred from using submitted data to train its models, and we tell clients which providers are involved before they go live.

Our systems are decision support tools. Outputs may be incomplete or wrong, and they are meant to be reviewed by a person before any decision with legal, safety, employment or financial consequences is taken. We do not use your data for automated decision making that produces legal or similarly significant effects on you without a human review.

10. International transfers

We are based in India. Some of our service providers and model providers operate from other countries, including the United States and the European Union, so your personal data may be transferred to and stored outside your own country.

Where such a transfer takes place, we take reasonable steps to ensure the data continues to be protected, including by contract. For transfers of data from the European Economic Area or the United Kingdom, we rely on standard contractual clauses or another approved transfer mechanism. Transfers out of India are made in accordance with the Digital Personal Data Protection Act, 2023 and any restrictions notified by the Government of India.

11. How we protect your data

We maintain administrative, technical and physical safeguards designed to protect personal data against loss, misuse and unauthorised access, disclosure, alteration or destruction. These include encryption of data in transit, access controls on a need to know basis, logging, vendor due diligence and internal policies on confidentiality and secure development.

No system is completely secure. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law and without undue delay.

12. How long we keep your data

We keep personal data only as long as we need it for the purposes set out in this policy, or as long as the law requires.

Enquiry and marketing data: until you unsubscribe or ask us to delete it, and in any case not more than three years after our last meaningful interaction, unless we still have a reason to keep it.
Client, vendor and contract records, including invoices and tax records: for the period required under Indian tax, company and accounting law, which is generally eight years from the end of the relevant financial year.
Recruitment data: for the duration of the hiring process, and for up to one year afterwards if you agree to us keeping it on file.
Website logs and analytics data: typically up to 26 months.
Client data processed on a client’s behalf: for the period set out in our agreement with that client.

13. Your rights

Subject to the law that applies to you, you have the following rights over your personal data.

To ask for a summary of the personal data we hold about you and how we process it.
To ask us to correct data that is inaccurate, incomplete or out of date.
To ask us to erase data we no longer need or that we hold on the basis of consent you have withdrawn.
To withdraw consent, and to unsubscribe from marketing communications at any time.
To nominate another person to exercise your rights on your behalf if you die or become incapacitated, as provided under the Digital Personal Data Protection Act, 2023.
To complain to us, and then to the Data Protection Board of India or another competent supervisory authority.

If the General Data Protection Regulation applies to you, you also have the right to object to processing based on legitimate interests, to ask us to restrict processing, and to receive your data in a portable format. If a United States state privacy law applies to you, you have the rights that law gives you, including the right to opt out of sale or sharing of personal data and the right not to be discriminated against for exercising your rights. We do not sell personal data and we do not share it for cross context behavioural advertising.

To exercise any of these rights, write to us using the contact details in section 17. We may ask for information to verify your identity before we act, and we will respond within the period the applicable law allows.

14. Children

Our website and services are meant for businesses and for adults acting in a professional capacity. We do not knowingly collect personal data of children as defined under the Digital Personal Data Protection Act, 2023, and we do not direct any content, tracking or advertising at children. If you believe a child has given us personal data, contact us and we will delete it.

15. Links to other websites

Our website may link to sites we do not control, such as social platforms, client sites and partner sites. We are not responsible for their content or their privacy practices. Read their privacy policies before you share data with them.

16. Changes to this policy

We may update this policy as our services, our systems or the law change. The date at the top of this document shows when it was last revised. Where a change materially affects how we use your personal data, we will give you notice through the website or by email before it takes effect.

17. How to contact us

For any question, request or complaint about this policy or about how we handle personal data, contact us at the address below. We take complaints seriously and will acknowledge yours and tell you what we intend to do about it.

Grievance officer: Arpit

Designation: Director

Email: arpit@avishkarai.com

Phone: +91 916582428292

Postal address: Anjaneyaai Technologies Private Limited, [registered office address], Bengaluru, Karnataka, India

The grievance officer is appointed under the Information Technology Act, 2000 and the rules made under it, and also acts as the point of contact for questions under the Digital Personal Data Protection Act, 2023. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India or to another authority with jurisdiction over your complaint.