LEGAL

Privacy Policy

Effective July 1, 2026

This Privacy Policy explains how Janaka AI Technologies Pvt. Ltd. (“Janaka”, “we”, “us”) collects, uses, discloses and protects personal data of individuals (“you”, “Data Principal”) who interact with our websites, products and services (the “Services”). This policy is issued as a notice under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, where applicable, the GDPR and other international data protection laws.

1. Data Fiduciary

For the purposes of the DPDP Act, Janaka AI Technologies Pvt. Ltd. is the Data Fiduciary for personal data collected via our Services. Grievance and Data Protection Officer contact details are provided at the end of this policy.

2. Personal data we collect

  • Contact data: name, email, phone, organisation, role.
  • Account data: credentials, preferences, communication history.
  • Product data: data you input into our Services, subject to your organisation's terms.
  • Technical data: IP address, device and browser attributes, cookies, log data.
  • Marketing data: submissions to demo requests, newsletters and campaigns.

We do not knowingly collect personal data of children under 18 without verifiable parental consent, in accordance with Section 9 of the DPDP Act.

3. Lawful basis and purposes

We process personal data on the following lawful bases under the DPDP Act (Sections 4–7):

  • Consent — for marketing, newsletters and optional cookies.
  • Legitimate Uses — to provide, secure and improve the Services; comply with law; respond to enquiries; and safeguard operations.
  • Contractual necessity — where processing is required to deliver contracted Services.

4. How we use personal data

  • Provide, operate, secure and improve the Services.
  • Respond to enquiries, demo requests and support tickets.
  • Send transactional and (with consent) marketing communications.
  • Comply with legal obligations, including tax, audit and law-enforcement requests lawfully made.
  • Detect, investigate and prevent fraud, abuse and security incidents.

5. Sharing and disclosure

We share personal data only with (a) authorised employees on a need-to-know basis, (b) vetted Data Processorswho process data on our behalf under contractual safeguards, (c) professional advisors, (d) authorities where legally required, and (e) in the event of a corporate transaction, subject to confidentiality. We do not sell personal data.

6. International transfers

Where we transfer personal data outside India, we do so in compliance with Section 16 of the DPDP Act and any restrictions notified by the Central Government. For EEA/UK data subjects, we rely on Standard Contractual Clauses or equivalent safeguards.

7. Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law. When retention is no longer required, we erase or anonymise the data in line with our internal retention schedule.

8. Your rights as a Data Principal

Under the DPDP Act you have the right to:

  • Access the personal data we hold about you (Section 11).
  • Correct, complete, update or erase your personal data (Section 12).
  • Nominate another individual to exercise rights in the event of death or incapacity (Section 14).
  • Grievance redressal through the mechanism below (Section 13).
  • Withdraw consent at any time, without affecting prior lawful processing (Section 6(4)).

Additional rights may apply under other laws (e.g., GDPR access, portability, restriction and objection rights).

9. Security

We implement reasonable technical and organisational safeguards — including encryption in transit and at rest, access control, continuous monitoring, and periodic audits — commensurate with the risk. Details are in our Security page.

10. Cookies

We use strictly necessary cookies to operate our website, and, with consent, analytics cookies to understand usage. You may manage cookies through your browser settings.

11. Data breaches

In the event of a personal data breach we will notify the Data Protection Board of India and affected Data Principals as required under Section 8(6) of the DPDP Act and applicable rules.

12. Grievance redressal

You may raise a grievance or exercise your rights by writing to our Grievance Officer / Data Protection Officer:

Grievance Officer / DPO
Janaka AI Technologies Pvt. Ltd.
Email: privacy@janaka.ai

If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of Indiaconstituted under the DPDP Act.

13. Updates to this policy

We may update this policy from time to time. Material changes will be notified via the Services or by email where appropriate.