Privacy policy

1. Information We Collect

We collect information in the following ways:

• Information you provide directly: when you fill out a contact or demo form, or reach out via email. This includes your name, email address, company name and the content of your message.
• Usage data: we collect standard analytics data (pages visited, time spent, referral source) to improve our website. This data is aggregated and not linked to individuals by default.
• Client operational data: for clients using our AI products (e.g., VELOS), we may process patient or customer data on your behalf as a data processor. In these cases, you remain the data controller and we act solely on your instructions.

2. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries, demo requests, and consultation bookings
• Deliver the services and AI products you have engaged us for
• Send you project updates, invoices, and service communications
• Improve our website, products, and service quality
• Meet our legal and contractual obligations

We do not use your personal data for advertising targeting, profiling for third parties, or any purpose other than those listed above.

3. Data Sharing

We do not sell, trade, or rent your personal information to any third party, ever.

We may share your information with:

• Service providers: tools we use to operate our business (e.g., email services, analytics platforms, payment processors). These providers are bound by confidentiality agreements and may not use your data for their own purposes.
• Legal requirements: where disclosure is required by applicable law, court order, or regulatory authority.

4. Data Storage & Security

Your data is stored on secure servers. Where our products process patient or customer data (e.g., VELOS operating in the EU), we ensure data residency and handling comply with applicable regulations including GDPR.

We implement industry-standard security measures including encrypted data transmission (HTTPS), access controls, and regular security reviews. No method of online transmission is 100% secure. We will notify you promptly of any data breach that affects your personal information.

5. Data Retention

We retain your contact information for as long as necessary to provide services and meet legal obligations, or until you request deletion. Client project data is retained for a period of 3 years after project completion unless otherwise agreed.

Newsletter subscribers' data is retained until you unsubscribe. You can unsubscribe at any time using the link in any email we send.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your personal data (subject to legal retention requirements)
• Object to processing for direct marketing
• Port your data to another service provider in a machine-readable format

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Cookies

Our website uses essential cookies to function correctly (e.g., session management). We use analytics cookies (aggregated, non-personal) to understand how visitors use the site. We do not use advertising or tracking cookies.

You can disable cookies in your browser settings, though this may affect website functionality.

8. Third-Party Links

Our website may link to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised effective date. For material changes, we will notify active clients and subscribers via email.

10. Contact

For questions, requests, or concerns about this Privacy Policy or your personal data:

[email protected]

Sanskriti Labs Private Limited, C/O Regus World Trade Center, Unit No 2201A, 22nd Floor, World Trade Center, Brigade Gateway Campus, Malleswaram (W), Bangalore - 560055, Karnataka, India