Privacy Policy

This Privacy Policy explains how StartiQOS AI (“StartiQOS AI”, “we”, “us”, “our”) collects, uses, shares, retains and protects personal data when you visit startiqosai.com, request a pilot, contact us, apply for a role, or engage us for consulting services.

StartiQOS AI operates remotely, with its team based in Chandigarh, India.

This policy is written with reference to India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and, for visitors in the European Economic Area and the United Kingdom, the General Data Protection Regulation (the “GDPR”). Read it together with our Cookie Policy.

What this policy does not cover. Our product, the StartiQOS gateway, runs inside each customer’s own environment. The data it handles stays with that customer and is not sent to us. Where we deliver consulting services inside a client’s systems, that processing is governed by the contract and data processing terms we agree with that client, not by this policy.

The Data Fiduciary, or Controller, for personal data processed under this policy is:

StartiQOS AI
Chandigarh, India
Email: info@startiqosai.com

For any question or complaint about your personal data, including a grievance under the DPDP Act, write to info@startiqosai.com with “Privacy” in the subject line. This is the first point of contact for exercising the rights in section 8.

Information you give us

• Pilot requests: your name, work email, company, role, where your AI agents run, the approximate number of agents, and anything you tell us about your concerns.
• Contact enquiries: your name, email, company and message.
• Website assistant: if you book a demo through the assistant, the name, work email, company, topic and preferred timing you type. Other assistant conversations stay in your browser tab and are not sent to us.
• WhatsApp and email: if you contact us on WhatsApp or by email, your phone number or email address and the messages you send.
• Consulting engagements: business contact details, meeting notes, and the information needed to scope, deliver and invoice the work.
• Job applications: whatever you send us, usually your name, contact details, CV and work history.

Information collected automatically

• Hosting and security data: our hosting and content delivery provider processes your IP address, browser type and the pages you request, so that the site can be delivered and protected against abuse. We do not keep separate access logs ourselves.
• Analytics, only if you allow it: if you turn on analytics in Cookie preferences, we may use Cloudflare Web Analytics and Google Analytics to understand how the site is used. Cloudflare Web Analytics sets no cookies. Google Analytics sets cookies and processes your IP address and device information; we use it with IP anonymisation and see aggregate reports. Neither loads unless you allow analytics.

What we do not collect. We do not ask for sensitive personal data such as health, financial or biometric information; please do not include it in forms or applications. We do not buy contact lists, and we do not use advertising trackers.

We do not make automated decisions about you that produce legal or similarly significant effects, and we do not profile you for advertising.

We do not sell or rent personal data. We share it only with:

• Service providers who process it on our instructions: Cloudflare for website hosting, content delivery and security; Web3Forms for delivering form and demo requests to our inbox; our email provider; and, only if you allow analytics, Cloudflare Web Analytics and Google Analytics.
• WhatsApp, operated by Meta, if you choose to message us there. Your messages are handled under WhatsApp’s own terms and privacy policy.
• Professional advisers, such as lawyers and accountants, who are bound by confidentiality.
• Authorities, where the law requires it.

A list of our service providers, with what each one does and where it processes data, is available on request from info@startiqosai.com.

Some of our service providers operate globally, so your personal data may be processed outside India, including in the United States or the European Economic Area.

Where we transfer personal data of people in the EEA or the UK to another country, we rely on the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses. We do not transfer personal data to any country restricted by the Government of India under the DPDP Act.

We keep personal data only as long as it is needed for the purposes in section 4, or as long as the law requires. When that period ends, or when you withdraw your consent, we delete the data or make it anonymous, unless a law requires us to keep it. Where we must keep records for a legal reason, we keep only what that obligation requires.

Depending on where you are, you have the right to:

• Access the personal data we hold about you, and receive a copy;
• Correct data that is inaccurate or incomplete;
• Erase your data, unless we must keep it by law;
• Restrict or object to our processing;
• Withdraw consent at any time, as easily as you gave it, without affecting processing already carried out;
• Data portability, in a common, machine-readable format;
• Nominate another person to exercise your rights if you die or become unable to do so, under the DPDP Act;
• Complain, first to us, and then to the Data Protection Board of India or your local data protection authority.

To use any of these rights, email info@startiqosai.com. We may need to confirm your identity first. We respond within the time the applicable law requires, and exercising your rights is free.

Where we process your personal data on the basis of consent, this section is our notice under the DPDP Act. You provide your personal data to StartiQOS AI, as Data Fiduciary, for the purposes in section 4. Sections 3, 4 and 8 describe what we collect, why we collect it, and how you can exercise your rights, including the right to a summary of your data, to correction and erasure, to grievance redressal, and to nominate another person.

If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.

The DPDP Act also places duties on Data Principals: not to impersonate another person, not to suppress material information, and not to file false or frivolous complaints.

This website and our services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We protect personal data with measures appropriate to the risk. These include encrypted connections (HTTPS) across the whole site, security headers such as a Content Security Policy, and access limited to the people who need it. The website does not store form submissions in a database of its own.

No system is perfectly secure. If a personal data breach affects you, we will notify the Data Protection Board of India, other authorities where required, and you, as the law requires.

We do not use advertising cookies. The site stores your cookie choice in your browser, keeps assistant conversations in your browser tab, and loads analytics only if you allow it. You can change your choice at any time from Cookie preferences in the footer. Our Cookie Policy explains this in full.

We email you about a pilot, enquiry or engagement you started. We do not add you to a marketing list. If we introduce a newsletter, we will send it only to people who subscribe, with a link to unsubscribe in every message.

We may update this policy when our services or the law change. The date at the top of this page shows the latest revision, and we will highlight material changes here.

For privacy questions, rights requests and grievances: info@startiqosai.com

StartiQOS AI, Chandigarh, India