Privacy Policy
Effective date: 04/11/2026 · Last updated: 04/11/2026
Website: www.altaienture.com · Contact: support@altaienture.com
This Privacy Policy (“Policy”) describes how AltAIEnture (“Company”, “we”, “us”, or “our”), operating the website www.altaienture.com (“Website”), collects, uses, processes, stores, transfers, discloses and protects the personal data and information of users (“User”, “you”, “your”) who access our Website, engage our services or otherwise interact with us.
This Policy is published in compliance with the following laws of India, as applicable and as amended from time to time:
The Digital Personal Data Protection Act, 2023 (“DPDP Act”);
The Information Technology Act, 2000 (“IT Act”);
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”);
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Rules”);
Rule 3 of the SPDI Rules read with Section 43A of the IT Act, regarding reasonable security practices.
By accessing the Website or availing our services, you confirm that you have read, understood and agree to be bound by this Policy. If you do not agree, please do not use the Website or our services.
1. Definitions
1.1 “Personal Data” means any data about an individual who is identifiable by or in relation to such data, as defined under Section 2(t) of the DPDP Act.
1.2 “Sensitive Personal Data or Information (SPDI)” has the meaning assigned to it under Rule 3 of the SPDI Rules and includes passwords, financial information (such as bank account, credit/debit card details), physical, physiological and mental health condition, sexual orientation, medical records and biometric information.
1.3 “Data Principal” means the individual to whom the Personal Data relates.
1.4 “Data Fiduciary” means the entity (in this case, AltAIEnture) that determines the purpose and means of processing Personal Data.
1.5 “Processing” means any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, disclosure, alignment, restriction, erasure or destruction.
2. Information We Collect
We collect information lawfully and only for purposes that are clear, specific and consented to by you. The categories of information we may collect include:
2.1 Information You Provide Directly
Identity and contact data: name, email address, phone number, designation, company name and postal address (collected via contact forms, demo requests or service enquiries).
Account data: login credentials, profile preferences and communications you exchange with us.
Project and business data: information you share for the purpose of receiving our AI automation, web development, data analytics, digitalisation or AI product services, including data files, business workflows and integration credentials, where applicable.
Payment data: invoicing details, GSTIN (where applicable) and transaction reference numbers. Card and banking credentials are processed only by RBI-authorised payment gateway providers and are not stored on our servers.
2.2 Information Collected Automatically
Device and technical data: IP address, browser type and version, operating system, device identifiers, time-zone setting and access timestamps.
Usage data: pages visited, links clicked, referring URLs, session duration and other diagnostic data.
Cookies and similar technologies: as described in Section 9 below.
2.3 Information from Third Parties
Information received from authorised partners, lead-generation platforms, analytics providers (such as Google Analytics), social-media platforms and publicly available sources, where lawfully permitted.
3. Lawful Purposes and Basis of Processing
In accordance with Sections 4, 6 and 7 of the DPDP Act, we process Personal Data only for lawful purposes and on the basis of your free, specific, informed and unambiguous consent or under “certain legitimate uses” recognised by law. Specifically, we use your information to:
Provide, deliver, operate and maintain our IT services, AI solutions, web platforms, analytics models and digital products;
Respond to enquiries, schedule consultation calls, demos, proposals and provide customer support;
Process payments, generate invoices and comply with tax obligations under the Central Goods and Services Tax Act, 2017 and Income-tax Act, 1961;
Improve, personalise and develop our Website, services and AI offerings;
Send transactional, administrative and (with consent) marketing communications;
Detect, prevent and address technical issues, fraud, security breaches and unauthorised access;
Comply with legal, regulatory and statutory obligations applicable to us; and
Establish, exercise or defend legal claims, where necessary.
We will not process your Personal Data for any purpose that is materially different from those notified to you, without obtaining fresh consent.
4. Notice and Consent
In accordance with Section 5 of the DPDP Act, before or at the time of seeking your consent, we will provide you with a clear and plain-language notice describing (a) the Personal Data being collected, (b) the purpose of processing, (c) the manner in which you can exercise your rights and (d) the manner of lodging a complaint with the Data Protection Board of India.
You may withdraw your consent at any time by writing to us at the contact details below. Upon withdrawal, we will cease further processing within a reasonable time, except where retention is required under applicable law.
5. Disclosure and Sharing of Information
We do not sell your Personal Data. We may share your information only in the following circumstances and to the extent strictly necessary:
With Data Processors and service providers (including cloud hosting, email, CRM, analytics, payment gateway and customer-support providers) engaged by us under written contracts containing data-protection obligations consistent with the DPDP Act and the SPDI Rules;
With our affiliates, advisors, auditors and professional advisors on a strict need-to-know basis;
With governmental, judicial, regulatory or law-enforcement authorities, where disclosure is required under Section 91 of the Code of Criminal Procedure, 1973, Section 69 of the IT Act, the DPDP Act or any other applicable law, court order or legally binding request;
In connection with any merger, acquisition, restructuring, sale of business assets or financing, subject to confidentiality undertakings; and
With your express consent, or otherwise at your direction.
6. Cross-Border Transfer of Data
Where we transfer your Personal Data outside India (for example, to cloud servers, sub-processors or affiliated entities), such transfers will be made in accordance with Section 16 of the DPDP Act and only to countries or territories not restricted by the Central Government. We will ensure that adequate contractual, technical and organisational safeguards are in place to protect your data during such transfers.
7. Data Retention
We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, regulatory or reporting requirements. Indicative retention periods are:
Service contract and project data: for the duration of the engagement plus a minimum of 8 (eight) financial years, in line with Section 36 of the CGST Act, 2017 and Rule 6F of the Income-tax Rules, 1962, where applicable;
Marketing and enquiry data: until consent is withdrawn or such data is no longer relevant;
Website logs and analytics data: typically for a period not exceeding 24 (twenty-four) months.
Once the retention period lapses or the purpose is fulfilled, we will erase, delete or anonymise the data, except where retention is mandated by law.
8. Security of Information
In compliance with Section 8(5) of the DPDP Act and Rule 8 of the SPDI Rules, we have implemented and maintain reasonable security practices and procedures, including but not limited to:
Industry-standard encryption (TLS/SSL) for data in transit and AES-grade encryption for sensitive data at rest;
Role-based access controls, multi-factor authentication and the principle of least privilege;
Regular security audits, vulnerability assessments and penetration testing;
Secure software development lifecycle (SDLC) and code-review practices;
Business continuity, disaster recovery and incident-response procedures; and
Confidentiality, non-disclosure and data-handling obligations binding on our personnel and contractors.
Notwithstanding the above, no method of transmission over the internet or electronic storage is fully secure. While we strive to protect your information, we cannot guarantee absolute security.
9. Cookies and Tracking Technologies
Our Website uses cookies, web beacons and similar technologies to enhance user experience, analyse Website traffic and personalise content. Cookies may be classified as:
Strictly necessary cookies (essential for site functionality);
Performance and analytics cookies (e.g., Google Analytics);
Functional cookies (to remember preferences); and
Marketing cookies (only with your prior consent).
You may control or disable cookies through your browser settings. However, disabling certain cookies may impact the functionality of the Website.
10. Your Rights as a Data Principal
Subject to applicable law, and in particular Sections 11 to 15 of the DPDP Act, you have the following rights in respect of your Personal Data:
Right to information: to obtain a summary of Personal Data being processed and the processing activities undertaken.
Right to correction and erasure: to seek correction of inaccurate or misleading data, completion of incomplete data and erasure of data that is no longer necessary.
Right of grievance redressal: to readily accessible means of grievance redressal in respect of any act or omission regarding processing.
Right to nominate: to nominate any other individual who shall exercise these rights in the event of your death or incapacity.
Right to withdraw consent: as set out in Section 4 above.
To exercise these rights, please contact our Grievance Officer at the address given in Section 14. We will respond within the timelines prescribed under applicable law.
11. Children’s Privacy
Our services are not intended for individuals below 18 (eighteen) years of age. In accordance with Section 9 of the DPDP Act, we do not knowingly process the Personal Data of any child without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
12. Third-Party Links
The Website may contain links to third-party websites, plug-ins or applications. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to read the privacy policies of every third-party site you visit.
13. Changes to this Policy
We may update this Policy from time to time to reflect changes in law, technology or our business practices. The revised Policy will be posted on this page with an updated “Last Updated” date. Material changes will, where required, be notified to you by reasonable means.
14. Grievance Officer
In accordance with Rule 5(9) of the SPDI Rules and Rule 3(2) of the Intermediary Rules, you may contact our Grievance Officer for any complaint, query or request regarding this Policy or your Personal Data:
Name: Abhishek Pillai
Designation: Grievance Officer / Data Protection Officer
Email: support@altaienture.com
Address: SR NO 152/4,PLOT NO 10/11 JANKI VILLA, DEOLALI CAMP NASHIK-422101 MAHARASHTRA
We will acknowledge receipt of your grievance within 24 (twenty-four) hours and resolve it within 15 (fifteen) days, in line with the Intermediary Rules.
15. Governing Law and Jurisdiction
This Policy is governed by and construed in accordance with the laws of India. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Nashik/Pune, India, without prejudice to the provisions of Clause 14 (Dispute Resolution and Arbitration) of our Terms & Conditions.
