Privacy Policy

1. Introduction

ind.ai ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access or use the ind.ai platform, including our website, AI tools, event services, newsletters, and related communications. We comply with the India Digital Personal Data Protection Act 2023 (DPDP Act), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and applicable global privacy best practices.

2. Scope

This policy applies to personal data collected through:

• The ind.ai website and any sub-domains
• Event registrations and participation
• Newsletter subscriptions
• Project and listing submissions
• AI-powered tools and features
• Email, chat, or other communications with us

3. Categories of Personal Data Collected

We may collect the following categories of personal data. Note that project listings and related content may be publicly visible on the platform.

4. Legal Basis for Processing

We process personal data on one or more of the following legal bases under the GDPR and equivalent frameworks:

• Consent — where you have given clear, affirmative consent (e.g., newsletter sign-up, cookie preferences).
• Contractual necessity — to perform a contract with you or take pre-contractual steps (e.g., account creation, event registration).
• Legitimate interests — to improve our platform, ensure security, prevent fraud, and communicate relevant updates, provided these interests are not overridden by your rights.
• Legal obligations — to comply with applicable laws, regulations, or lawful governmental requests.

5. How We Use Data

We use personal data for the following purposes:

• Account creation and management
• Displaying directory and project listings
• Event coordination, invitations, and logistics
• Sending newsletters, updates, and service communications
• Platform security and abuse prevention
• Usage analytics and product improvement
• Compliance with legal and regulatory obligations
• Fraud detection and prevention

6. AI Tools Disclosure

ind.ai may integrate artificial intelligence features and third-party AI APIs. Please be aware of the following:

• AI-generated outputs may be inaccurate, incomplete, or misleading. You should independently verify any information provided by AI features.
• Inputs you provide to AI tools may be processed by third-party AI service providers. We recommend not submitting confidential, sensitive, or proprietary information to AI features.
• AI outputs do not constitute professional, legal, financial, or medical advice.

7. Cookies and Tracking Technologies

Cookies are small text files stored on your device when you visit a website. We and our third-party partners may use cookies and similar technologies (pixels, local storage) to operate the platform, remember your preferences, and understand how you interact with ind.ai.

Cookie Categories

Third-Party Cookies

Some cookies may be set by third-party services we use (e.g., analytics providers). These third parties have their own privacy policies governing the use of such cookies.

Managing Cookies

You can manage your cookie preferences at any time using the cookie preference centre accessible from the consent banner. You can also control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

8. Data Sharing

We may share personal data with the following categories of recipients, strictly for the purposes described in this policy:

• Hosting and infrastructure providers — to store and serve platform data.
• Analytics providers — to understand usage patterns and improve the platform.
• Email service providers — to send newsletters and transactional emails.
• AI API providers — to power AI features (inputs may be processed by these providers).
• Event partners — limited data (name, email) shared with co-organisers for event logistics, only with your consent or as necessary for the event.

We do not sell your personal data. We do not share personal data for cross-context behavioural advertising. Should this change in the future, we will update this policy and provide you with opt-out mechanisms.

9. International Data Transfers

As a globally accessible platform based in India, your personal data may be transferred to and processed in countries outside your jurisdiction. Where we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally recognised transfer mechanisms to ensure your data receives an adequate level of protection.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations. When data is no longer required, it is securely deleted or anonymised. Retention periods vary based on the type of data and the purpose of processing.

11. Data Subject Rights

Under the GDPR (EU/EEA Residents)

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

Under CCPA/CPRA (California Residents)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt-out of sale or sharing of personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your rights

Under DPDP Act (Indian Residents)

• Right to access information about your personal data
• Right to correction and erasure of personal data
• Right to grievance redressal
• Right to withdraw consent

To exercise any of these rights, please contact us at Click to reveal email. We will respond within 30–45 days. We may request verification of your identity before processing your request.

12. Do Not Sell or Share My Personal Information

For California Residents: ind.ai does not sell your personal information. We do not share your personal information for cross-context behavioural advertising purposes as defined under the CCPA/CPRA.

If we introduce advertising or marketing tools in the future that constitute a "sale" or "share" under California law, we will update this policy and provide a clear opt-out mechanism accessible from your account settings and this page.

13. Children

ind.ai is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us at Click to reveal email and we will promptly delete the information.

14. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

15. Grievance Officer (India)

In accordance with the DPDP Act 2023 and the Information Technology Act 2000, the details of the Grievance Officer are as follows:

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, through email or a prominent notice on the platform. We encourage you to review this policy periodically.