Privacy Policy

A privacy company should be able to describe its own website in a page you can finish. So this says what we collect, what we deliberately do not, and what you can make us do about it. If something here is vague, that is a defect. Tell us and we will fix the wording.

Scope. This notice is about this website only. The TruPriv platform is a separate matter: when an organisation deploys it, that organisation is the Data Fiduciary for the personal data it processes and TruPriv acts as a Data Processor under the agreement between us. Nothing on this page governs that relationship.

What we collect

• Enquiries. Your name, organisation, organisation email address, the topic you pick and the message you write, when you use the contact form.
• Early access applications. Your name, organisation, organisation email address and what you tell us about where consent hurts in your business.
• Newsletter. Your email address, and only on an affirmative opt-in you performed yourself.
• Your consent decision. Which purposes you allowed or refused, the version of this notice you were shown, the language it was shown in and when you decided. All of it is held in your own browser, not on our servers.
• Server logs. Our hosting provider records the usual request data (IP address, timestamp, the page requested, browser user-agent) to serve the site and defend it from abuse. We do not build profiles from it.

What we do not collect

This list is longer than the one above, and it is the more useful of the two.

• No analytics. There is no Google Analytics, no tag manager, no page-view counter, no session recorder and no heatmap on this site.
• No cookies. This website sets none at all. See the Cookie Policy for what it does store.
• No tracking, profiling or fingerprinting, and no advertising or retargeting pixels.
• No third-party requests. Every asset on this site, fonts included, is served from our own domain, so loading a page does not disclose your IP address to anyone else.
• Nothing from the free tools. The applicability checker and the readiness assessment run entirely in your browser. Your answers are never transmitted to us, so we could not produce them if we were asked to.

How we use what we do collect

• To read and answer your enquiry.
• To assess an early access partner application and reply either way.
• To send the newsletter you asked for, with one-click unsubscribe in every message.
• To keep the site available, working and secure.
• To meet obligations the law places on us.

What we never do

We do not sell personal data. We do not share it so someone else can market to you. We do not use it for advertising or to train anything. We make no automated decision about you that has a legal or similarly significant effect. If you enquire and decide not to proceed, that is the end of it. There is no nurture sequence.

Consent

We ask before we process, for each purpose separately, and nothing is pre-ticked. Consent is specific, informed and unconditional, and refusing a purpose never costs you access to the site or the free tools. You can withdraw any consent as easily as you gave it, and withdrawal takes effect from the moment you make it. It does not undo processing that was lawful before.

Retention

• Enquiries and applications. Kept while we are in conversation and for a reasonable period afterwards so we can pick the thread back up, then erased.
• Newsletter. Kept until you unsubscribe, then erased.
• Consent decisions. Held in your browser until you clear them. Clearing your browser storage removes them and we will ask again.
• Server logs. Retained by our hosting provider on their standard cycle.

Who else sees it

Our website hosting provider, a managed database provider that stores what you send through the forms on this site until we have dealt with it, and an email delivery provider for messages we send you. They act on our instructions as processors, not for their own purposes. That is the whole list. If it grows, this notice changes first.

Your rights

As a Data Principal under the DPDP Act, 2023 you may:

• Ask what we hold. A summary of your personal data, the processing we have done, and the identities of anyone we shared it with.
• Correct or complete it where it is wrong, incomplete or out of date.
• Have it erased, unless a law requires us to keep it.
• Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
• Withdraw consent at any time.
• Have a grievance heard, whether or not you have exercised any other right first.

How to exercise them

Email contact@truprivai.com and say which right you are exercising, or use the contact page. Rights requests are read before ordinary enquiries. To change or withdraw a consent decision you do not need to ask us at all. The Preference Centre does it immediately.

We may need to confirm who you are before acting on a request, and we will ask for no more than that confirmation needs.

Grievance redressal

If we get something wrong, email contact@truprivai.com with “grievance” in the subject. We acknowledge it, tell you who is handling it, and come back to you with an answer. If the answer does not satisfy you, escalate to founder@truprivai.com, which reaches the founder directly. The Act requires you to exhaust this mechanism before approaching the Data Protection Board of India, so we would rather it worked.

Security

The site is served over HTTPS with HSTS, a strict Content Security Policy that permits connections only to our own origin, and no third-party scripts. Access to enquiry data is limited to the people who need it to reply to you.

Children

This website is intended for people acting in a professional capacity and is not directed at children. We do not knowingly collect the personal data of anyone under eighteen. If you believe a child has sent us data, tell us and we will erase it.

Changes to this notice

This notice is versioned, and the version you consented under is recorded with your decision rather than silently replaced. Where a change materially alters why we process your data, we ask again instead of relying on an answer you gave to a different question.

Questions people actually ask

Do you track me across the internet?

No. There is nothing on this site capable of it.

Will filling in a tool put me on a mailing list?

No. The tools do not ask for an email address and do not withhold the result behind one.

Can I read the DPDP material without consenting to anything?

Yes. Every page and both tools work with everything refused.

Do you sell or share my data?

No, and we would have to change this notice before we could.

How do I get everything you hold about me deleted?

Email contact@truprivai.com. If it is only a consent decision, clear it yourself in the Preference Centre. It never reached us.