Privacy Policy

1. Who we are

AI FTW is [ENTITY TYPE, e.g. a partnership firm or private limited company], with its registered address at [REGISTERED ADDRESS]. For the purposes of the DPDP Act, AI FTW is the Data Fiduciary: we decide why and how your personal data is processed.

You can reach us about anything in this policy at ftw.ai719@gmail.com.

2. What we collect

We only collect what you give us, plus the basic technical data any website receives.

• Contact form: your name, your business name (optional), your email address, your phone or WhatsApp number (optional), and the message you write.
• Booking a video call: your name, business name (optional), email address, phone or WhatsApp number, your time zone, the time you choose and anything you write about what you want to automate.
• Email, WhatsApp and calls: your name, email address or phone number, and whatever you choose to tell us.
• Technical data: our website host automatically records standard server logs, such as your IP address, browser type, the page requested and the time. We do not use this to identify you.

We do not ask for passwords, bank or card details, health information or any other sensitive personal data. Please do not send it through the form or in messages.

3. Why we use it, and on what basis

We use your personal data to:

• reply to your enquiry, and book, hold and remind you about a video call;
• prepare a quote, and deliver the project if you hire us;
• send invoices and keep the business and tax records the law requires;
• keep the website working and secure.

Our legal basis is your consent, given when you submit the form or contact us, and the legitimate use of data you have voluntarily provided for a specific purpose, as the DPDP Act allows. We do not use your data for any unrelated purpose, and we never sell it.

You can withdraw your consent at any time by emailing ftw.ai719@gmail.com. Withdrawal does not affect anything we did before it, and we may keep data the law requires us to keep.

4. How long we keep it

• Enquiries and video call bookings that do not become projects: deleted [RETENTION PERIOD, e.g. 12 months] after our last contact.
• Client project records, invoices and contracts: kept for as long as the engagement lasts, and afterwards for [RETENTION PERIOD, e.g. 8 years] to meet accounting and tax law.
• Server logs: kept by Vercel, our website host, for [HOST'S LOG RETENTION PERIOD].

When a retention period ends, we delete the data or anonymise it so it no longer identifies you.

5. Who we share it with

We share personal data only with the service providers that help us run this website and reply to you. They process it on our behalf and only for that purpose:

• Resend, which sends contact form submissions to our inbox by email.
• Google (Gmail, Google Calendar and Google Meet), which hosts our email and calendar and creates the video link for a call.
• Cal.com, which holds our availability, records your booking and sends your confirmation, calendar invite and reminders.
• CallMeBot, which delivers a WhatsApp alert to us when you book, cancel or move a call. The alert includes your name, business, contact details, the time and your note.
• WhatsApp (Meta Platforms), if you message us there. WhatsApp's own privacy policy also applies.
• Cloudflare (Turnstile), which checks that a form is being sent by a person rather than a bot, using technical signals from your browser. It is only loaded once you start filling in one of the forms.
• Vercel, which hosts this website, runs the form and booking functions, and keeps its server logs.

Some of these providers store data outside India. The DPDP Act permits this except to countries the Government of India restricts, and we will not transfer data to any restricted country.

We may also disclose personal data where the law requires it, for example in response to a lawful request from a court or a government authority.

6. Cookies and analytics

This website does not use advertising cookies, trackers or analytics at present.

To keep bots out of the contact and booking forms, Cloudflare Turnstile runs a short check in your browser once you start filling one in. It is not loaded at all if you only read the site, and it does not track you across sites.

It stores one small, non-personal value in your browser's session storage: your position on the home page, so a refresh returns you to the same place. It is cleared when you close the tab.

If we add analytics in future, we will update this section first and name the provider.

7. Your rights

Under the DPDP Act you have the right to:

• Access: a summary of the personal data we hold about you and what we do with it.
• Correction: have inaccurate or incomplete data corrected, completed or updated.
• Erasure: have your data deleted once it is no longer needed, unless the law requires us to keep it.
• Withdraw consent: at any time, as easily as you gave it.
• Grievance redressal: complain to us and get a response.
• Nominate: name someone to exercise these rights on your behalf if you die or become unable to.

To use any of these rights, email ftw.ai719@gmail.com. We may ask you to confirm your identity first. We will respond within [RESPONSE PERIOD, e.g. 30 days].

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

8. Grievance officer

As required by the IT Act and the SPDI Rules, our grievance officer is:

• Name: [GRIEVANCE OFFICER'S NAME]
• Email: ftw.ai719@gmail.com
• Address: [REGISTERED ADDRESS]

We acknowledge complaints within 48 hours and aim to resolve them within one month.

9. How we protect it

We follow reasonable security practices and procedures, as the SPDI Rules require. The website is served over an encrypted (HTTPS) connection, access to enquiries and client data is limited to the people at AI FTW who need it, and the accounts that hold them are protected with strong passwords.

No system is completely secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires.

10. Children

Our services are for businesses, and this website is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us their data, email ftw.ai719@gmail.com and we will delete it.

11. Changes to this policy

When we change this policy, we will update it here and change the date at the top. If a change is significant, we will also email clients and anyone with an open enquiry before it takes effect.