Privacy & Cookie Policy

Introduction

Namasys.ai ("Namasys", "we", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard personal information when you visit our website or otherwise interact with us. It also outlines your rights regarding your personal data and how you can exercise those rights. We have structured this Policy to comply with applicable privacy laws in the jurisdictions we operate, including the General Data Protection Regulation (GDPR) in the European Union, relevant privacy laws in India, and applicable United States laws. By using our Site, you agree to the collection and use of information in accordance with this Privacy Policy.

Scope: This Privacy Policy applies to personal information collected through the Namasys.ai website (the "Site") and through any online form or communication you have with us via the Site. It does not apply to information collected through other channels (such as business contracts or services we provide offline) or third-party websites that may be linked on our Site.

Information We Collect

We limit our collection of personal data to what is necessary to provide and improve our services. The types of information we may collect include:

• Contact Information: If you fill out a contact or inquiry form on our Site, we collect your email address (and any other details you choose to provide, such as your name or phone number). This information is collected so we can respond to your requests or inquiries. We do not require you to create an account or provide any login credentials, as our Site has no account registration functionality.
• Usage Data: When you visit our Site, certain information about your device and usage of the Site is collected automatically through cookies and similar technologies. This may include your IP address, browser type, operating system, referring URLs, pages viewed, the dates/times of visits, and other technical information. We use Google Analytics and Webflow Analytics (third-party analytics services) to gather this usage data. This data helps us understand how visitors interact with our Site and improve its performance. (See our Cookie Policy below for more details on how we use cookies and analytics tools.)
• Minimal Personal Data: We do not collect sensitive personal data (such as financial information, national ID numbers, or health data) via our Site. The primary personal data we collect online is an email address when voluntarily provided by you. We do not collect any financial payment information through the Site, as we do not offer payments or subscriptions online.

How We Use Your Information

Namasys.ai uses the collected information for the following purposes:

• To Respond to Inquiries: We use your contact information (such as your email) to respond to messages, questions, and requests you send us through our contact forms or email. For example, if you inquire about our data analytics or AI solutions, we will use your email address to communicate with you and provide the requested information.
• To Provide and Improve Services: Usage data and analytics help us understand website traffic patterns and user preferences. We use this data to troubleshoot performance issues, improve the content and user experience of our Site, and ensure that our services are meeting user needs. For instance, analytics may inform us which pages are most visited or if any page is encountering errors.
• To Send Updates or Information: If you have provided your email address and explicitly consented to receive updates or marketing communications (for example, by opting in to a newsletter or requesting resources), we may use your email to send you information about our services, new solutions, or industry insights. However, we currently do not run an email newsletter unless you specifically request information. You will have the option to opt out of such communications at any time.
• Compliance and Protection: We may process personal data to comply with legal obligations or to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others. For example, we could use or disclose information if required to do so by law or in response to a legal process (such as a court order or subpoena).

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and obtain your consent or ensure another legal basis is in place, as required by law.

Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on valid legal grounds under the GDPR:

• Consent: In most cases, we rely on your consent to collect and use your personal data. For example, when you submit your email address through a form, you consent to us using that information to contact you. For analytics cookies, we will request your consent where required (e.g., via a cookie consent banner) before collecting analytics data.
• Legitimate Interests: We may process certain usage data for our legitimate business interests, such as improving our Site’s performance and securing our services, provided that these interests are not overridden by your data protection rights. For instance, analyzing Site traffic to improve our content is a legitimate interest. When we rely on legitimate interests, we carefully consider and balance any potential impact on your rights.
• Legal Obligation: In some instances, we might process data if necessary for compliance with a legal obligation to which we are subject. For example, if laws require us to retain certain communications or if we need to disclose data to comply with a court order.

If you have given consent for a specific processing activity, you have the right to withdraw that consent at any time (see "Your Rights" below). Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Cookies and Analytics

Our Site uses cookies and similar tracking technologies to distinguish you from other users and to collect information about your browsing activities over time. We do this primarily to understand how our Site is used and to improve its performance. Specifically:

• Google Analytics: We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies (small text files on your device) to collect information like your IP address, browser type, pages visited, and time spent on our Site. This data is transmitted to Google servers (which may be located in the United States or other countries) and aggregated to help us analyze Site usage. We have configured Google Analytics to anonymize IP addresses where applicable, and we do not receive information that personally identifies you from Google. Google may also set its own cookies. For more details on how Google processes this data, you can review Google’s Privacy Policy. If you wish to opt out of Google Analytics tracking, you can install the Google Analytics Opt-out Browser Add-on.
• Webflow Analytics: Our website is built on the Webflow platform, which may include built-in analytics or performance tracking. Webflow may collect aggregated data about site visits and interactions via their own cookies or similar technologies. This information helps us understand general user engagement (such as overall visitor counts and page popularity) but typically does not include personally identifying information.
• Cookie Choices: On your first visit to our Site (especially if you are in a jurisdiction like the EU where consent for non-essential cookies is required), you may see a cookie notice or banner. We only use non-essential cookies (like analytics cookies) with your consent. By clicking "Accept" on the cookie banner, you agree that we can place these cookies to analyze site usage. You can manage or withdraw your consent at any time via our Cookie Policy (see the Cookie Policy section below) or by adjusting your browser settings to refuse cookies.

Please refer to our Cookie Policy section of this document for a detailed explanation of what cookies are, which cookies we use, and how you can control cookies. The Cookie Policy forms part of this Privacy Policy and outlines our use of performance cookies (analytics cookies). We do not use cookies for advertising or marketing profiling on our Site.

Data Sharing and Disclosure

We value your privacy and endeavor to protect your information. We do not sell or rent your personal information to third parties for their marketing purposes. We only share your data in limited circumstances, as described below:

• Service Providers: We may share information with third-party vendors and service providers who perform services on our behalf. This includes companies that provide website hosting, data storage, analytics services (like Google, as mentioned), or email delivery. These service providers are given access to the information they need to perform their functions but are not permitted to use it for other purposes. We ensure that our service providers are bound by confidentiality and data protection obligations consistent with this Policy.
• Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation or governmental request, (ii) protect and defend the rights or property of Namasys.ai, (iii) act in urgent circumstances to protect the personal safety of users of the Site or the public, or (iv) protect against legal liability. For example, we might disclose data in response to a court order or to regulators when mandated.
• Business Transfers: In the event of a reorganization, merger, acquisition, or sale of all or a portion of our business, personal information we hold may be transferred to the successor entity as part of the transaction. If such a transfer occurs, we will ensure that your personal data remains protected and inform you of any significant changes to how it is used, via an update to this Policy or other communication.

Aside from the above, the information collected via our Site (email addresses and usage data) is primarily accessed by Namasys.ai personnel who need it to perform their roles (such as responding to inquiries or maintaining the website). We do not engage in third-party advertising networks, so your data is not shared for ad targeting purposes.

International Data Transfers

Namasys.ai is based in India, and the personal information we collect is primarily processed in India. However, we also utilize third-party services (like Google and Webflow) which may process data on servers located in the European Union, the United States, or other jurisdictions. This means that your personal information may be transferred to, or stored and processed in, a country different from your home country.

When we transfer personal data out of the jurisdiction in which it was collected (for example, transferring data from the European Economic Area to India or the U.S.), we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. These steps may include:

• Relying on the European Commission’s adequacy decisions (if the destination country is deemed to provide adequate data protection).
• Implementing standard contractual clauses approved by the European Commission or other relevant authorities, which contractually oblige the recipient to handle personal data in compliance with EU data protection standards.
• For transfers from other countries with data export requirements, ensuring we comply with those local requirements (for example, relevant standard data protection clauses under Indian law once fully enacted, or compliance with UK International Data Transfer Agreement for UK data, etc.).

By providing your information to us, you acknowledge the transfer, storage, and processing of your personal data in countries outside of your country of residence. We will ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed. If you would like more information about how we safeguard your data during transfers, please contact us at the email provided in the "Contact Us" section.

Data Security

We take reasonable technical and organizational measures to protect the personal information we hold from loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption & Security Protocols: We use HTTPS (Secure Socket Layer/SSL or similar protocols) to encrypt data transmitted between your browser and our Site. This helps protect data in transit from eavesdropping.
• Access Controls: Personal data (like your email address) is stored in secure systems with restricted access. Only authorized personnel with a valid business need have access to this information. We regularly review who has access to our systems to prevent unauthorized disclosure.
• Data Minimization: We collect only the minimum personal data we need (for example, just an email to contact you) and we strive to purge data that we no longer require.
• Third-Party Security: We select reputable service providers and require that they maintain appropriate security measures. For instance, any third-party platform we use for form submissions or data storage will be expected to use strong security practices.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.

Data Retention

We retain personal information for only as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements:

• Contact Information (Emails): If you contact us through the Site and provide your email, we will retain that correspondence and your email address for as long as necessary to respond to your inquiry and follow-up. If you become a client, communications may be retained as part of our client records. If not, we periodically review and delete contact form submissions that are no longer needed. You may request deletion of your email and communications at any time (see "Your Rights" below).
• Analytics Data: Data collected via Google Analytics and Webflow Analytics is stored as per those services’ standard retention periods. We have set reasonable data retention limits within Google Analytics (for instance, user-level and event data may be retained for a period such as 14 or 26 months, subject to our configuration). Aggregated analytics reports (which do not identify individuals) may be kept longer for analysis.
• Legal Hold: In some cases, we may need to retain data longer if it is subject to a legal requirement or to resolve disputes. For example, if a legal issue arises, we will retain relevant data throughout the period of the dispute.

After the applicable retention period, or upon your valid request for deletion, we will securely destroy or anonymize your personal information, so it can no longer be associated with you.

Your Rights

You have certain rights regarding your personal data, especially if you are in the European Union or in a jurisdiction with similar data protection laws. We are committed to honoring your rights. These rights include:

• Right to Access: You have the right to request a copy of the personal data we hold about you and to obtain information about how we process it.
• Right to Rectification: If any of your information is inaccurate or incomplete, you have the right to ask us to correct it. For example, if you believe we have an incorrect email address for you, you can request an update.
• Right to Erasure: You can request that we delete your personal data if it is no longer necessary for us to retain it, you have withdrawn your consent (where we relied on consent), or you believe it’s being processed unlawfully. This is sometimes called the "right to be forgotten." Note that we may need to retain certain information when required by law or for legitimate business purposes (we will inform you if so).
• Right to Restrict Processing: You have the right to ask us to suspend processing of your personal data in certain scenarios – for instance, if you contest the accuracy of the data, or you object to us processing it based on legitimate interests (while we evaluate your objection).
• Right to Data Portability: For data you provided to us and that we process by automated means on the basis of consent or contract, you have the right to request a copy in a structured, commonly used, machine-readable format (for example, CSV file), and you can request that we transmit it to another data controller where technically feasible.
• Right to Object: You may object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party). If you object, we will stop processing your information unless we have compelling legitimate grounds to continue or the processing is needed for legal reasons. You also have the right to object to processing your data for direct marketing purposes (though currently we do not send marketing emails without consent).
• Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw consent at any time. For example, if you consented to receive a newsletter, you could opt out later. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal.
• Rights under CCPA (for California Residents): While our data collection is very limited, if you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) or similar state laws. These may include the right to know what personal information we collect, use, and disclose about you, the right to request deletion of your personal information, and the right not to be discriminated against for exercising your privacy rights. We reiterate that we do not sell personal information. If these laws apply to you, you can exercise your rights in a similar manner as described here (by contacting us with your request).

Exercising Your Rights: To exercise any of your rights, please contact us at privacy@namasys.ai with your request. We may need to verify your identity before fulfilling certain requests, to ensure that we do not disclose personal data to an unauthorized person. We will respond to your request within the timeframes required by law (for example, within one month for GDPR requests, with possible extension for complex requests; or within 45 days for CCPA requests, etc.). There is no fee for making a request, though if requests are manifestly unfounded or excessive, we might charge a reasonable fee or refuse to act on the request (we will explain our reasoning in such cases).

• Right to Lodge a Complaint: If you believe we have infringed your privacy rights, you have the right to lodge a complaint with a supervisory authority. In the EU, this could be the data protection authority in the country of your residence or where the alleged infringement occurred. For example, if you are in the EU, you can contact your nation’s Data Protection Authority. If you are in the UK, you can contact the Information Commissioner’s Office (ICO). In India, you may reach out to the relevant authority under forthcoming data protection laws (currently, grievances can be directed to our Grievance Officer as noted below). In the United States, you may contact your state’s Attorney General or relevant privacy enforcement body. We encourage you to contact us first, so we have the opportunity to address your concerns directly.

Children's Privacy

Our services and Site are intended for business and professional audiences and are not directed at children. We do not knowingly collect personal information from anyone under the age of 16 (and in certain jurisdictions, under the age of 13) without parental consent. If you are under 16, please do not provide any personal information on this Site. If we become aware that we have inadvertently collected personal data from a child under the applicable age without proper consent, we will take steps to delete that information promptly. If you are a parent or guardian and believe that a child under your care has provided us with personal information, please contact us so we can investigate and address the issue.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or to comply with new laws and regulations. When we make changes, we will post the updated Policy on this page and update the "Last Updated" date at the top. If the changes are significant, we may also provide more prominent notice (such as on our homepage or via email, if appropriate). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site after any modifications to this Policy will signify your acceptance of the changes. If you do not agree to any updated terms, you should stop using the Site and, if necessary, notify us to withdraw your data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data we hold about you, please contact us. We are here to help and will respond as promptly as possible.

• By Email: You can reach our data protection team at privacy@namasys.ai. This is our designated email address for privacy inquiries, including requests to exercise your rights or questions about our practices.
• By Mail: If you prefer, you may write to us at the following address:

(Please note: The above mailing address is provided for formal communications. If you send us a letter, please include your contact information and a detailed description of your request or concern.)

• Grievance Officer (India): In compliance with India’s information technology and data protection requirements, any grievances or concerns related to personal data can be directed to our Grievance Officer at the email or mailing address above. Please label the correspondence as "Grievance - Privacy."

We will endeavor to respond to all legitimate requests or concerns within a reasonable timeframe and in accordance with applicable law. Your privacy is important to us, and we welcome your questions or feedback about our privacy practices.