Privacy Policy

Governance & Jurisdiction

As an Indian-registered entity, our primary data governance framework is mandated by the laws of the Republic of India. We implement a "highest common denominator" approach to privacy across all regions we operate in.

• India Compliance with the DPDP Act, 2023 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• EU Adherence to Articles 13 & 14 of the GDPR for data principals within the EEA.
• US Compliance with CCPA/CPRA for California residents.

Corporate & Personal Data Collection

We distinguish between "Corporate Intelligence" (publicly available data) and "Personal Data" (identifiable information). We collect only what is strictly necessary — Data Minimization principle.

2.1 Personal Data We Process

• Identity Data Full Name, Professional Designation, Corporate Email ID.
• Authentication Data Login credentials, API keys, and device telemetry (IP address, User Agent) for security auditing.
• Financial Data GSTIN, PAN (for Indian clients), and billing coordinates. Payment via PCI-DSS Level 1 certified gateways (Stripe, Razorpay). Raw card data is never stored.

2.2 Reputation Intelligence Data

The WhizBRAM™ engine aggregates publicly available data from the open web — news sites, social media, forums, and search indices. This processing is based on Legitimate Interest to provide reputation analysis services. We do not scrape private profiles or breach platform Terms of Service.

Purpose of Processing

Your data is utilized for specific, lawful purposes only.

Data Localization & International Transfer

Indian Data Principals: Critical personal and financial data is stored on secure servers within India (AWS Mumbai Region), complying with data localization norms where applicable.

Cross-Border Transfer: For operational redundancy or global analysis, data may flow to servers in the US or EU. Such transfers are protected via Standard Contractual Clauses (SCCs) and strict Data Processing Agreements (DPAs) ensuring equivalent levels of protection.

Security Infrastructure

We employ maximum security standards — not merely "reasonable" ones.

Rights of Data Principals

Under the DPDP Act and GDPR, you possess the following non-negotiable rights:

• 📋
  Right to Access Request a summary of personal data being processed about you.
• ✏️
  Right to Correction Demand rectification of inaccurate or misleading data.
• 🗑️
  Right to Erasure Request deletion of personal data once purpose is served, barring statutory retention requirements.
• ⚖️
  Right to Grievance Redressal Readily available means of grievance resolution as mandated by law.

Grievance Redressal Mechanism

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, please direct privacy concerns to our appointed officer.