The short version. We collect what you type into our contact form, and — only if you agree — analytics about which pages you read. We do not sell your data, we do not advertise to you, and we delete enquiry data after 24 months. Everything below is the detail behind those sentences.
1. Who we are
This site is operated by [LEGAL ENTITY NAME] ("NetrAI", "we", "us"), a [company type] registered in India.
- Registered address: [REGISTERED ADDRESS]
- Identification number: [CIN / LLPIN]
- GSTIN: [GSTIN]
- Email: privacy@netrai.com
Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary for the personal data described here. You are the Data Principal.
2. What we collect, and why
2.1 The contact form
When you submit an enquiry at netrai.com/contact, we collect exactly these items and nothing else:
| Item | Required? | Why we need it |
|---|---|---|
| Full name | Yes | To address you correctly in our reply. |
| Email address | Yes | To send you that reply. This is the only channel we use unless you give us another. |
| Message | Yes | To understand what you are asking for before we respond. |
| Company name | No | To understand the context and size of the work. |
| Phone number | No | Only so we can call you if you would rather talk than type. Leave it blank and we will not call. |
| Project type | No | To route your enquiry to the right person. |
| Budget range | No | To tell you quickly whether we are a realistic fit. |
We also record the date and time you submitted, and the fact that you ticked the consent box. We keep that because the DPDP Act puts the burden of proving valid consent on us, not on you.
Legal basis: your consent under section 6 of the DPDP Act, given by ticking the box on the form. The site works whether or not you use the form — you are never required to give us anything.
2.2 Analytics
If — and only if — you choose "Accept" on our cookie notice, we use Google Analytics 4 to see which pages are read and where visitors give up. We use it to improve the site. We do not use it to build a profile of you, and we never combine it with anything you typed into the contact form.
If you reject, or simply ignore the notice, no analytics cookie is set and nothing is sent to Google.
2.3 Things stored in your browser regardless
Two small items are saved in your own browser at all times. They contain no identifier, are never transmitted anywhere, and cannot be used to recognise you on another site:
netrai-theme— whether you chose light or dark.netrai-tour-declined— a timestamp, so that if you dismiss our site tour we do not offer it again for 30 days.
2.4 What we do not do
- We do not sell or rent personal data. Ever, to anyone.
- We do not run advertising or retargeting pixels.
- We do not use session recording or heatmap tools.
- The pricing calculator runs entirely in your browser. Your selections and the PDF it generates are never sent to us.
- We do not ask for, and have no use for, financial account numbers, government ID numbers, or health information. Please do not put them in the message box.
3. Cookies and similar technologies
| Name | Type | Life | Purpose |
|---|---|---|---|
_ga, _ga_<ID> | Analytics — consent required | 180 days | Google Analytics. A random identifier for your browser. Contains no name, email or phone number. |
netrai-theme | Strictly necessary | Until you clear it | Your light/dark choice. Browser storage, not a cookie. |
netrai-tour-declined | Strictly necessary | 30 days | Stops the site tour re-offering itself. Browser storage, not a cookie. |
netrai-consent | Strictly necessary | 12 months | Remembers the cookie choice you made, so we do not ask again. |
Google truncates your IP address before storing it, and we never have access to the full address. We keep analytics data in Google Analytics for 14 months, then it is deleted automatically.
Change or withdraw your choice at any time. Withdrawal takes effect immediately.
You can also use Google's browser opt-out add-on, or clear cookies in your browser settings.
4. Who else sees your data
We use two service providers. Both act as Data Processors — they process data on our instructions and may not use it for their own purposes.
| Provider | What they handle | Where |
|---|---|---|
| Formspree, Inc. | Delivers contact form submissions to our inbox | United States |
| Google LLC | Google Analytics, under the Google Ads Data Processing Terms | United States and other countries |
Transfers outside India. Both providers process data outside India. Section 16 of the DPDP Act permits this; the Central Government has not restricted transfers to either country. We tell you because you are entitled to know, not because anything about it is unusual.
We will also disclose personal data where a law, a court, or a lawful government request requires it. If that happens and we are permitted to tell you, we will.
5. How long we keep it
| Data | Kept for |
|---|---|
| Contact form enquiries | 24 months from our last exchange with you, then deleted. If you become a client, our engagement contract governs instead. |
| Analytics | 14 months, deleted automatically by Google. |
| Consent records | As long as we hold the data the consent relates to, plus 12 months. |
Section 8(7) of the DPDP Act requires us to erase personal data once the purpose it was collected for is finished. Asking us to delete your data sooner is always an option — see the next section.
6. Your rights
Under sections 11 to 14 of the DPDP Act you have the right to:
- Access — a summary of the personal data we hold about you and what we have done with it.
- Correction and completion — fix anything inaccurate, fill in anything incomplete.
- Erasure — have your data deleted, unless a law requires us to keep it.
- Withdraw consent — at any time, as easily as you gave it. Withdrawal does not undo processing that already happened lawfully.
- Nominate — name someone to exercise these rights for you if you die or become incapacitated.
- Grievance redressal — complain to us first, and get an answer.
To exercise any of these, email privacy@netrai.com from the address you contacted us with, and say what you want. There is no form and no fee.
We will respond within 90 days, and in practice far sooner. If we cannot do what you asked, we will tell you why.
7. Complaints
Our grievance contact is:
- [GRIEVANCE OFFICER NAME], [designation]
- privacy@netrai.com
- [REGISTERED ADDRESS]
If you are not satisfied with our answer, you may complain to the Data Protection Board of India. Once the Board publishes its complaint procedure, we will link it here.
8. How we protect it
Section 8(5) of the DPDP Act requires reasonable security safeguards. Ours are:
- The whole site is served over HTTPS. Form submissions are encrypted in transit.
- Enquiry data is held in a mailbox restricted to the people who need it, protected by two-factor authentication.
- We keep a record of who has access and review it periodically.
- We have a written process for responding to a personal data breach, including notifying the Data Protection Board and affected individuals as the DPDP Rules require.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data we will tell you what happened, what was exposed, and what to do about it.
9. Children
This site is intended for business users. We do not knowingly collect personal data from anyone under 18, we do not track, profile or behaviourally target children, and we do not direct advertising at them. If you believe a child has sent us personal data, email privacy@netrai.com and we will delete it.
10. Visitors outside India
Pick one of the two paragraphs below before you publish, and delete the other. The choice is a business decision about whether you actively solicit EU/UK clients — see the compliance audit, Finding 12.
Option A — not targeting the EEA/UK. Our services are offered to clients in India. We do not target, market to, or offer services specifically to individuals in the European Economic Area or the United Kingdom. If you contact us from there, we handle your data as described above.
Option B — targeting the EEA/UK. Where the UK or EU GDPR applies, our lawful basis is your consent (Article 6(1)(a)) for the contact form and for analytics. You additionally have the rights to data portability, restriction and objection, and the right to complain to your local supervisory authority. Transfers to our processors rely on the European Commission's Standard Contractual Clauses.
11. Changes to this policy
If we change what we collect or who we share it with, we will update the date at the top and, where the change is significant, ask for your consent again through the cookie notice. We will not quietly broaden what we do with data you already gave us.
12. Contact
Questions about this policy, or about anything we hold: privacy@netrai.com.