Privacy Policy

1. Introduction

ALGIONS AI LABS PRIVATE LIMITED (“Algions,” “Company,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of visitors, clients, and partners. This Privacy Policy outlines how we collect, process, store, and safeguard personal information obtained through our official websites (https://www.algions.in and https://www.algions.com) and related digital communication channels.

We process personal data lawfully, fairly, and transparently for specified, legitimate business purposes in accordance with applicable Indian laws, including the Information Technology Act, 2000, and the phased implementation framework of the Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025.

2. Information We Collect

We collect only the personal information strictly necessary to fulfill your requests, evaluate technology requirements, coordinate partnerships, or verify corporate credentials. The specific categories collected across our website include:

• Contact and Consultation Inquiries: Full name, professional email address, organization or company name, estimated budget category, target timeline, requested service type, and project scope or objectives submitted through our inquiry forms.
• Partner Programme Inquiries: Full name, email address, telephone number, partner classification (individual, agency, consulting firm, or technology company), and introductory inquiry message.
• Employee Profile Verification: Authorized corporate identifier (public identifier), full name, professional title/designation, official corporate email, professional photograph, and approved professional social links (e.g., LinkedIn, GitHub) specifically published for credential verification purposes.
• Technical Logs and Security Telemetry: Standard HTTP request headers, IP address, browser user-agent string, timestamps, and requested endpoint URLs, collected automatically by our web server and reverse proxy infrastructure for cybersecurity defense and uptime monitoring.

3. How We Collect Information

We collect personal data through two primary channels:

• Direct Submissions: Information you voluntarily enter when completing our Technology Consultation form, Contact form, or Partnership Enquiry form, or when directly corresponding with us via email or telephone.
• Automated Technical Interaction: Technical access logs generated automatically when your browser interacts with our web application servers, content delivery network, or security firewalls.

4. Purpose of Processing

We process collected personal data exclusively for specified, explicit, and legitimate corporate purposes:

• To evaluate project feasibility, formulate preliminary engineering proposals, and respond to your technology inquiries.
• To coordinate consultations between prospective clients and our principal software architects.
• To review partnership inquiries and onboard qualified referral partners into our official referral network.
• To operate digital credential verification for authorized Algions personnel and protect against corporate misrepresentation.
• To maintain website security, prevent spam through automated honeypot defenses, mitigate distributed denial-of-service (DDoS) threats, and ensure high availability.
• To fulfill statutory, regulatory, tax, accounting, and legal compliance obligations under Indian law.

5. Partner Programme Information

The public Partner Programme page on this website serves as an informational overview and an inquiry channel for prospective referral partners. Forms on this corporate website collect only the applicant’s own business contact information.

Actual client referral registrations, project tracking, attribution records, and reward ledgers are managed separately through the dedicated Partner Portal or direct coordination with an assigned Project Manager. Referral partners are expressly required to confirm that they have obtained appropriate authorization from any third-party prospective client before submitting their contact information through official referral channels.

6. Employee Information & Verification

Algions operates an online employee verification service accessed via QR code or public identifier. This service serves to protect clients, vendors, and the public from unauthorized individuals falsely claiming affiliation with Algions AI Labs Private Limited.

Only authorized public profile fields (name, designation, corporate email, approved photograph, verified status, and approved professional social links) are rendered through this service. Internal identifiers, payroll data, government identity numbers, and personal residence details are strictly excluded from public verification endpoints. Furthermore, public profile visibility is governed by internal administrative controls and employee consent, which may be modified or revoked in accordance with internal corporate policies and legal requirements.

7. Use and Sharing of Information

Algions does not sell, trade, rent, or lease personal information to data brokers, marketing aggregators, or unauthorized third parties. Personal data is shared strictly on a confidential need-to-know basis with trusted service providers who support our technological infrastructure:

• Cloud Hosting & Compute: Vercel Inc. (frontend delivery and serverless computing) and dedicated production application servers.
• Database Infrastructure: Managed MongoDB database infrastructure operating within access-controlled network boundaries for contact and inquiry persistence.
• Object Storage: Cloudflare R2 object storage hosting employee profile media.
• Legal Authorities: Where required by applicable Indian law, judicial decree, subpoena, or lawful governmental directive, we may disclose limited information necessary to comply with statutory mandates.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the specific purposes for which it was collected, or to satisfy legal, statutory, accounting, or reporting requirements.

Contact and consultation inquiry records are maintained in our inquiry management database for business evaluation and follow-up. Where an inquiry does not materialize into an active engagement, or upon receipt of a valid erasure request, data is archived or securely deleted in accordance with our data lifecycle procedures, unless retention is required to defend legal claims or fulfill statutory record-keeping duties under Indian corporate law.

9. Data Security Safeguards

We implement comprehensive technical, administrative, and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, accidental loss, or destruction:

• Transport Layer Security: HTTP Strict Transport Security (HSTS) headers and TLS encryption across communications between client browsers and our servers.
• Cookie Isolation: Administrative authentication utilizes RFC 6265bis compliant __Host- prefixed cookies configured with HttpOnly, Secure, and SameSite=Lax protections.
• Security Headers: Comprehensive HTTP headers including Content Security Policy directives, X-Frame-Options (DENY), X-Content-Type-Options (nosniff), and Referrer-Policy controls.
• Defensive Architecture: Automated rate limiting across public endpoints, coupled with honeypot fields that intercept automated spam submissions without exposing internal application logic.

10. Cookies and Similar Technologies

We maintain a privacy-respecting website architecture. The public sections of our corporate website do not employ third-party advertising cookies, behavioral tracking pixels, or cross-site tracking scripts.

Cookies on this website are limited strictly to essential administrative session tokens (__Host-adminToken) generated exclusively for authenticated portal administrators. For typography, web fonts are loaded from Google Fonts via encrypted CDN links. Because no non-essential marketing or tracking cookies are utilized on public routes, we do not subject visitors to intrusive or decorative cookie consent banners.

11. User Rights and Privacy Requests

In accordance with applicable data protection laws, including the phased commencement of the Digital Personal Data Protection Act, 2023, data principals have rights concerning their personal data:

• Right to Access: The right to request confirmation of whether your personal data is being processed and an overview of such data.
• Right to Correction: The right to request correction, updating, or completion of inaccurate or incomplete personal information.
• Right to Erasure: The right to request deletion of personal information where the purpose of collection has been fulfilled and retention is no longer required by law.
• Right to Withdraw Consent: Where processing is based on affirmative consent, you have the right to withdraw such consent at any time without retroactive impact on lawful processing prior to withdrawal.
• Right to Grievance Redressal: The right to submit grievances regarding the processing of your personal data directly to our designated privacy desk.

To submit a privacy query or exercise these rights, please review our Privacy Requests page.

12. Grievance Redressal Desk

For any concerns, inquiries, or grievances regarding the processing of your personal data or compliance with data protection standards, please contact our Privacy & Grievance Desk:

We review formal privacy inquiries and endeavor to respond expeditiously in accordance with statutory guidelines.

13. Protection of Children

Our corporate website, software engineering services, and partner programs are designed strictly for commercial enterprises, founders, technology professionals, and individuals of legal age (18 years and older). We do not knowingly solicit or collect personal data from children. If you believe a minor has submitted personal information through our website, please notify us immediately at privacy@algions.in, and we will take immediate steps to remove such records.

14. Third-Party Services

Our website integrates only production-essential third-party cloud services:

• Vercel Inc.: High-performance serverless edge hosting and dynamic routing.
• MongoDB Inc.: Secure database infrastructure operating within controlled network boundaries.
• Cloudflare Inc. (R2 Storage): Private S3-compatible object storage for employee profile photographs.
• Google LLC (Fonts): Web typography stylesheets served over secure connections.

Our website may contain external links to third-party platforms such as LinkedIn. We do not control and are not responsible for the privacy practices or content of external websites.

15. Updates to This Privacy Policy

We may revise this Privacy Policy periodically to reflect changes in our operational practices, technological enhancements, or statutory requirements under applicable Indian law. When modifications are made, the revised policy will be posted on this URL with an updated effective date. Continued use of our website following any update signifies your acknowledgement of the revised terms.

16. Corporate Contact Information

For general corporate questions or formal legal notices, please write to: