Ainrion is a remote-first AI systems studio and product lab in India. This notice explains what personal data we collect through this website and the conversations you start with us, why, how long we keep it, who we share it with, and how you can withdraw consent, use your rights and complain.
It follows India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. We follow the DPDP Act and Rules ahead of the 13 May 2027 commencement. Under that law, Ainrion is the Data Fiduciary for this data, and you are the Data Principal.
What we collect, why, and how long we keep it
We collect only what you give us through the forms and channels below, plus analytics if you allow it. We don't use advertising cookies.
| Where it comes from | What we collect | Why | How long we keep it |
|---|---|---|---|
| Contact form | The topic you pick, your name, email address and message. | To reply to your enquiry and follow up about it. The team gets a copy by email. | 24 months after the last activity on your enquiry. |
| Homepage call form | Your answer to the question. Some versions of the form also ask for your name, business and sector. | To open WhatsApp or your email app with your answer, and keep a copy so we can reply. | 24 months after the last activity on your enquiry. |
| WhatsApp, email and phone | Your number or email address, the name on your account, and what you tell us. | To answer you and deal with what you asked. | Only while we need it for your enquiry. If we log it as an enquiry, as for enquiries above. |
| Job applications | The role, your name, email address, phone number, CV (the link you give us, or the file if you upload one), cover letter, and your confirmation that you're 18 or older. | To assess your application and contact you about it. | 12 months after the last update to your application. |
| Analytics, only if you choose Accept | Google Analytics cookies (_ga and _ga_ followed by an ID), the pages you view, your device and browser, and the approximate location Google works out from your connection. | To see which pages are useful, so we can improve the site. | For the data-retention period set in our Google Analytics account. Choosing Reject deletes the cookies. |
| How you found us | Campaign tags in the link you followed (utm_source, utm_medium, utm_campaign), the website that referred you and the first page you opened. | To know which links and campaigns bring enquiries. | In your browser's session storage until you close the tab. Sent to us only with an enquiry; we store the tags and the referring website with it, as long as the enquiry. |
| Privacy requests | What you send with the form below: the type of request, your name, email or phone, and the details. | To handle your request and keep a record that we did. | At least one year after we close it, as the DPDP Rules require. |
| Security records | When our staff view or change personal data in our admin: who did it, what they did, and when. To stop spam, we also hold the IP address of a device sending a form in memory for a few minutes; it isn't stored. | To protect your data, and to detect and investigate misuse. | 12 months. |
| Staff accounts | For people on our team who use our admin: name, email address and role. | To let them sign in, limit what each role can see, and record who did what. | While the account exists. |
Why we may use it
When you send us an enquiry, answer the homepage question, write to us or apply for a job, you give us your details for a specific purpose: so we can reply, or assess your application. The DPDP Act allows us to use data you provide voluntarily for that purpose (section 7(a)), so these forms don't ask for separate consent. We use the data only for that purpose.
Analytics is different: we use it only with your consent, which you give or refuse in the cookie banner and can withdraw at any time (see Cookies and analytics).
How long we keep it
- Enquiries: erased 24 months after the last activity on them.
- Job applications: erased 12 months after their last update.
- Security records of staff access: 12 months.
- Analytics: for the data-retention period set in our Google Analytics account.
We erase your data sooner if you make a valid request to erase it, except records the law requires us to keep. Erased records can remain in our database provider's short-term backups until those expire.
How we protect it
- Encrypted connections (HTTPS) between your browser, our site and our providers.
- Role-based access to our admin: each staff member sees only what their role needs, and their account is checked on every request.
- Security records of who viewed or changed personal data, and when.
- Backups through our database provider.
If a personal data breach affects you, we will tell you without delay, as the DPDP Rules require: what happened, the likely consequences, what we are doing about it and what you can do. We will also report it to the Data Protection Board of India.
Children
This site is not meant for children, and we don't knowingly collect personal data from anyone under 18. The DPDP Act requires verifiable consent from a parent for that, so job applicants must confirm they are 18 or older. If you think a child has given us personal data, please contact us so we can erase it.
Your rights
Under the DPDP Act you can ask us to:
- See your data: a summary of the personal data we hold about you and what we do with it, and who we have shared it with and what was shared.
- Correct, complete, update or erase it.
- Withdraw consent for analytics, at any time, with Cookie settings. This doesn't affect what was done before you withdrew it.
- Resolve a grievance about how we handled your data.
- Nominate someone to use these rights for you if you die or can't act yourself.
How: use the request form below, or email aditya@ainrion.com. Tell us the email address or phone number you used with us, so we can find your data and check the request comes from you. We respond as soon as we can, and within 90 days at the latest.
The Act also asks you to give accurate information, not to impersonate anyone and not to make false or frivolous complaints when you use these rights.
Complaints
If you're unhappy with how we handled your data, tell us first: choose “Raise a complaint about how my data was handled” in the request form or email aditya@ainrion.com. We respond within 90 days at the latest.
If our response doesn't resolve it, you can complain to the Data Protection Board of India, which the DPDP Act set up to hear these complaints and works as a digital office (sections 13(3), 27 and 28).
Contact
Questions about your personal data
Aditya Narayan, aditya@ainrion.com
Ainrion · info@ainrion.com · phone and WhatsApp +91 93048 21373
This notice is in English. To read it in Hindi or any other language in the Eighth Schedule to the Constitution of India, ask aditya@ainrion.com.
When we change this notice, we publish the new version here with its date. Our forms record the version you saw when you sent us your details.
Make a request
Use this form for any of the rights above. You'll get a reference and the date we'll respond by.