Privacy Policy

DATACRUX INSIGHTS PRIVATE LIMITED (“DataCrux”, “we”, “us”) operates this application (“Service”). This policy explains what personal data we collect, why we collect it, and the choices you have. We aim to comply with India’s Digital Personal Data Protection Act, 2023 (DPDP) and the EU General Data Protection Regulation (GDPR).

1. Data we collect

• Account data: name, email address, authentication provider identifiers.
• Assessment data: answers you submit to our AI assessments.
• Payment metadata: transaction ID, amount, currency, country, status. We never store card numbers or CVV — those are handled by our PCI-DSS compliant payment processor (Razorpay).
• Invoice data: billing name, email, and (if provided) GSTIN / Tax ID.
• Technical data: IP address, browser, device, page views, and error diagnostics for security and reliability.

2. Why we use your data

• To deliver the AI reports and features you request.
• To process payments and issue tax-compliant invoices.
• To operate, secure, and improve the Service.
• To send transactional emails (payment receipts, invoices, service notices).
• To comply with legal, tax, and accounting obligations.

3. Legal bases (GDPR)

We process personal data under one or more of the following legal bases: performance of a contract, our legitimate interests, your consent, and compliance with legal obligations.

4. Sharing

We share data only with service providers who help us run the Service:

• Cloud hosting and managed database.
• Payment processing (Razorpay).
• Transactional email delivery.
• AI model providers used to generate reports.

We do not sell your personal data.

5. International transfers

Some of our sub-processors operate outside your country. We rely on appropriate safeguards such as Standard Contractual Clauses where required.

6. Retention

We retain account and assessment data while your account is active and for a reasonable period thereafter. Invoice and tax records are retained for the period required by applicable tax law (typically 7–8 years in India).

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data. To exercise any right, email support@datacruxinsights.com.

8. Security

Data is encrypted in transit (HTTPS) and at rest by our managed database provider. Access is protected by row-level security policies and role-based access control. See our Security page for enabled controls.

9. Children

The Service is not directed to individuals under 18.

10. Changes

We will update this page when practices change and revise the “Last updated” date.

11. Contact

DATACRUX INSIGHTS PRIVATE LIMITED — support@datacruxinsights.com.