Privacy Policy

Last updated: 27 September 2026

This Privacy Policy explains what personal data we collect through https://databrainzai.com, why we collect it, how we look after it and what choices you have. We have written it in plain English so that it is easy to read. Our practices are designed to help meet India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

Who we are

Data Brainz AI is the brand name of DataBrainzAI LLP, a limited liability partnership based in India. For the personal data described in this policy, DataBrainzAI LLP is the Data Fiduciary, which means we decide why and how your personal data is processed.

  • Address: E 301, Shreewoods Society, Siddharth Nagar, Dhanori, Pune 411015, Maharashtra, India
  • Email: contact@databrainzai.com
  • Phone and WhatsApp: +91 77805 94658

What we collect

We only collect personal data from visitors through our enquiry form. You do not need to create an account to use this website.

Information you give us

When you send an enquiry, we collect:

  • your name
  • your email address
  • your phone number (optional)
  • your company or organisation (optional)
  • the type of enquiry you are making
  • what you are interested in, such as a service or a training
  • your message
  • your consent, given by ticking the box "I agree to be contacted about my enquiry. See our Privacy Policy."

Please do not include sensitive information, such as financial, health or identity document details, in your message. We do not need it to answer an enquiry.

Technical information collected with your enquiry

When the form is submitted, we also record:

  • a salted, one-way hash of your IP address, which cannot be turned back into your IP address and is used only to prevent spam and limit repeated submissions
  • your browser's user-agent (the type and version of browser and device)
  • the page address from which you sent the form
  • the date and time of your enquiry and of any later updates to it

Why we use it

We use your personal data only for the following purposes:

  • to read and respond to your enquiry
  • to contact you about the service, training or topic you asked about
  • to keep a record of our conversation with you so that we can follow up properly
  • to protect the website and the form from spam, abuse and automated attacks

We do not use your personal data for any other purpose without asking you first. We do not sell your personal data, we do not add you to marketing lists, and we do not use your data for profiling or automated decision-making.

Our lawful basis

We process enquiry data on the basis of your consent, which you give by ticking the consent box before you submit the form. The notice you see at that point, together with this policy, tells you what we collect and why. You can withdraw your consent at any time, as explained below.

How long we keep it

We keep enquiries for 24 months from the date we receive them. After that, we delete them. If you ask us to erase your data earlier, or withdraw your consent, we will delete it sooner unless we must keep a specific record to meet a legal obligation.

Who processes it for us

We use a small number of trusted service providers, known as Data Processors, to run this website. They process personal data only on our instructions and only to provide their service to us.

  • Supabase stores enquiry data in its hosting region in Mumbai, India (ap-south-1).
  • Resend delivers the email notifications that tell us an enquiry has arrived, and any confirmation email sent to you.
  • Vercel hosts the website. Its server functions run in Mumbai, India, and it uses a global content delivery network to serve pages quickly.

Because some of these providers operate internationally, limited data (for example, while an email is in transit or a page is served from a nearby location) may be processed outside India. Any such transfer is made only in line with Indian law, including any restrictions the Government of India notifies.

We may also disclose personal data if the law requires us to, for example in response to a valid order from a court or a government authority.

How we protect it

We take reasonable security safeguards to protect your personal data, including:

  • encryption of data in transit and at rest provided by our hosting providers
  • access to enquiries limited to authorised staff, protected by strong passwords and, for the owner account, multi-factor authentication
  • database rules that stop the public from reading enquiry data
  • hashing of IP addresses rather than storing them in readable form
  • keeping records of access and changes where our systems support it

If something goes wrong

If we become aware of a personal data breach that affects you, we will inform the Data Protection Board of India and the people affected, in the manner and within the time required by the DPDP Act and Rules. We will explain what happened, what it may mean for you and what we are doing about it.

Your rights

You have the right to:

  • access a summary of the personal data we hold about you and how we have used it
  • correct, complete or update personal data that is inaccurate or incomplete
  • have your personal data erased when it is no longer needed for the purpose you gave it for, or when you withdraw consent
  • withdraw your consent at any time, as easily as you gave it; withdrawing does not affect anything we did lawfully before you withdrew
  • nominate another person to exercise your rights on your behalf if you die or become unable to do so
  • have your grievances about our handling of your personal data addressed

To use any of these rights, email contact@databrainzai.com from the email address you used in your enquiry, or tell us how else we can confirm it is you. We will not charge you for making a request.

Children

Our services and this website are not directed at children under 18. We do not knowingly collect personal data from children, and we do not seek verifiable parental consent because we do not intend to process children's data. If we learn that a person under 18 has sent us an enquiry, we will delete it. If you believe a child has contacted us, please let us know.

Cookies and analytics

The public website does not set advertising or tracking cookies. We use Vercel Web Analytics and Speed Insights to understand how the site is used and how quickly it loads. These tools are cookie-free and do not identify individual visitors.

The admin area, which only our staff use, sets strictly necessary cookies to keep staff signed in securely. These cookies are not used on the public pages for visitors.

Grievance Officer

If you have a question or a complaint about how we handle your personal data, please contact our Grievance Officer:

  • Email: contact@databrainzai.com
  • Post: Grievance Officer, DataBrainzAI LLP, E 301, Shreewoods Society, Siddharth Nagar, Dhanori, Pune 411015, Maharashtra, India

We will acknowledge your grievance within 7 days and aim to resolve it within 30 days.

Complaining to the Data Protection Board

If you are not satisfied with our response after using our grievance process, you have the right to complain to the Data Protection Board of India.

Changes to this policy

We may update this policy when our services, our providers or the law change. We will publish the updated version on this page and change the "Last updated" date at the top. If a change affects how we use personal data you have already given us, we will tell you before the change applies to that data.