Privacy policy

1.Who we are

DigyAi Technologies (OPC) Private Limited ("DigyAi", "we", "us") is a company registered in India with corporate identity number U62099RJ2025OPC105518 and its registered office at Sardarshahar, Rajasthan 331403, India. We decide how the personal data described here is used, which makes us its controller, or data fiduciary under Indian law.

This policy covers this website and the messages you send us. Personal data we handle for a client during a project is covered by the agreement for that project, described in clause 9.

2.What this website collects

We use Google Analytics to understand how this site is used: the pages visited, how visitors arrived, the type of device and browser, an approximate location worked out from the IP address, and whether an enquiry was sent or an email, phone or WhatsApp link was used. It sets cookies whose names begin with _ga, which last up to two years. Google Analytics does not log or store IP addresses.

If your device is set to a European time zone, which covers the United Kingdom, the European Economic Area and Switzerland, Google Analytics does not load until you allow it in the notice at the foot of the page, and Google also keeps it switched off for visitors from those countries until they allow it. Elsewhere it loads when you arrive. Wherever you are, Cookie settings at the foot of every page lets you change your choice at any time, and declining removes the analytics cookies. Your choice is remembered in your browser's local storage.

We have switched off Google signals and advertising features, so this data is never used for advertising or linked to a Google account. Apart from Google Analytics, the site runs no tracking or advertising scripts, and its fonts and files are served from our own domain.

Our hosting provider keeps standard server logs, which include your IP address, the pages you request, the time and your browser details. They are used for security and to keep the site running, and we do not use them to identify or profile visitors.

3.What you send us

The project form sends us your name, your email address and your message, and, if you give them, your phone number, your company, the situation you chose and the services you picked, along with the address of the page you sent it from. It reaches us as an email. The website does not keep a copy.

The careers form sends us your name, your email address, the role, your note and any link you add, and up to two files such as a CV or cover letter, along with the address of the page you sent it from. It too reaches us as an email, with the files attached.

To stop spam, the form counts how often it is used from one connection in an hour, using a hash of the IP address made with a secret key that is replaced every day, so the address cannot be recovered from it. The count is never linked to your message, and each one is used for an hour and then deleted the next time anyone sends the form. If the form cannot reach our server, your own email app opens with the message filled in, and nothing is sent until you send it.

When you email, call or message us on WhatsApp, we receive what you choose to share, usually your name, contact details, company and a description of what you need.

4.How we use it

We use what you send only to answer you, to discuss and prepare work you have asked about, to consider your application if you applied for a role, and to run the engagement or employment that follows.

Where the GDPR or UK GDPR applies, our legal basis is the steps you have asked us to take before entering a contract, and our legitimate interest in answering the people who write to us. Where India's Digital Personal Data Protection Act applies, we use what you send for the purpose you sent it for, which the Act allows for personal data you provide voluntarily (section 7(a)). Tell us if you want us to stop, and we will.

We use analytics data only to understand which pages help visitors and to improve the site. In the United Kingdom, the European Economic Area and Switzerland our legal basis is your consent, which you can withdraw at any time in Cookie settings. Elsewhere it loads by default, and you can turn it off at any time in the same place.

We never sell or rent personal data, never share it with anyone for their own marketing, and never add you to a mailing list.

5.Who else handles it

Hostinger hosts this website and our email, so the logs and messages described above are held on its systems under its obligations to us.

Google provides Google Analytics and processes the analytics data for us under its data processing terms. For visitors in the European Economic Area, the United Kingdom and Switzerland that is Google Ireland Limited, and elsewhere Google LLC.

If you contact us on WhatsApp, your messages are also handled by WhatsApp under its own privacy policy.

Beyond these, we share personal data only when the law requires it, or with a professional adviser bound by confidentiality where we need advice.

6.Where it is processed

We are based in India, so if you write to us from another country, your details come to us in India. Our hosting and email provider may also process them in its data centres in other countries, under its obligations to us.

Google may process analytics data in the United States and other countries. For data from the European Economic Area, the United Kingdom and Switzerland, Google relies on the EU-US Data Privacy Framework and its UK and Swiss extensions, and on standard contractual clauses.

Personal data a client shares with us during a project moves only on the transfer terms of that project's data processing agreement, described in clause 9.

7.How long we keep it

An enquiry that does not lead to work is deleted within 24 months of our last exchange. If it leads to work, it is kept for the life of the engagement and then for as long as tax, accounting or legal obligations require.

A job application is kept for 12 months after we decide on it, so that we can consider you for another role, unless you ask us to delete it sooner. If you join us, it becomes part of your employment record.

Server logs are kept for the period our hosting provider sets for security and operations, and are then deleted.

Google Analytics keeps the data it collects for 14 months and then deletes it. Reports we build from it contain only totals, never individual visitors.

8.How we protect it

The site is served only over an encrypted connection, and the forms accept submissions only from this site. Access to our mailbox is limited to the people who need it to answer you.

9.Client data during a project

During a project we may be given access to systems that hold your business or personal data. That access is named, limited to the people working on your project, and revocable by you at any time.

We build inside your own environment, in your cloud or on your premises, so your data stays in your custody. Where a working copy cannot be avoided, it never lands on a laptop, and it is deleted or returned at the end of the engagement.

AI processing uses enterprise endpoints with zero data retention, or open-weight models running inside your own environment, and your data is never used to train a model.

A data processing agreement, with the EU standard contractual clauses, the UK IDTA or the UK Addendum where your data needs them, is signed before any personal data is shared, and every third party that could touch your data is named to you in writing before it does.

10.Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or complete it, delete it or limit how we use it, and ask for the data you gave us in a form you can take to someone else. Under Indian law you can also nominate someone to exercise these rights for you if you die or become unable to.

You can also object at any time to our use of your data for our legitimate interests. We will then stop, unless we have compelling grounds that override your interests or need the data for a legal claim.

Write to contact@digyai.com and we will reply within one month. We may ask you to confirm your identity first, so that we never disclose your data to someone else.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India, to the data protection authority in your country in the EU, or to the Information Commissioner's Office in the UK.

11.Children

This site is meant for businesses and job applicants, and we do not knowingly collect personal data from anyone under 18.

12.Changes to this policy

If we change how we handle personal data, for example by adding a new tool to this site, we will update this page before the change takes effect and give it a new effective date. Our Terms of use cover the rest of how the site may be used.

13.Contact and grievances

For any question or complaint about your personal data, write to contact@digyai.com with “Privacy” in the subject line. Our founder and chief executive, Gouri Shankar, is our Grievance Officer, responsible for this policy. Every privacy request is answered, and every complaint resolved, within one month of receipt.