Legal

Privacy Policy

Last updated 6 September 2026. This explains what we collect, why, and the rights you have over it under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

Who this policy covers

This policy applies to AI MindGrid (aimindgrid.com), operated by Kunal Gupta, Tower 16, Purvanchal Royal City, Greater Noida, Delhi NCR, India. It covers three kinds of people: visitors to this site, customers using the admin or customer portal, and people who enquire through a business page we host at aimindgrid.com/marketing/<slug> on behalf of a client.

What we collect

We collect only what a form or feature explicitly asks for:

  • Contact and enquiry forms — name, email, phone, company, the service you’re interested in, budget range, and your message.
  • Client marketing pages — name, email, phone and message, submitted through an enquiry form on a page we host for one of our clients (see “Businesses we market” below).
  • Portal and admin accounts — your email and name, and a one-time sign-in code that is hashed and discarded after use. We never store passwords for normal sign-in.
  • Basic technical data — your IP address, used only transiently to rate-limit form submissions and stop abuse. We do not log or retain it beyond that.

We do not run advertising or analytics trackers, and we do not use cookies for anything other than keeping you signed in. There is nothing here to opt out of beyond that one, strictly necessary, session cookie.

Why we collect it

  • To respond to an enquiry or quote a project.
  • To deliver a service you or your business has engaged us for.
  • To issue invoices and maintain business records.
  • To operate your customer portal account and, where applicable, show you leads captured through your own marketing page.

Businesses we market — how attribution works

If you enquire through a page at aimindgrid.com/marketing/<slug>, your message is stored by us and shown to the business that page belongs to, through their customer portal login. That business is the one who will contact you back. We act as the technical host and processor of that enquiry on the business’s behalf; we do not sell, share, or use it for our own marketing.

Who else sees your data

We use a small number of infrastructure providers to run this site, each acting strictly as a processor under our instruction:

  • Vercel — application hosting.
  • Neon — database hosting (PostgreSQL).
  • Google (Gmail) — outbound email delivery for sign-in codes, enquiry notifications, and invoices.

We do not sell personal data, and we do not share it with anyone else without your consent, except where required by law.

How long we keep it

Enquiries and account data are kept for as long as needed to serve their purpose — typically the life of a business relationship, plus a reasonable period for accounting and legal record-keeping. You can ask us to delete data that is no longer needed at any time (see “Your rights” below).

Security

The site is served over HTTPS. Sign-in is passwordless — a one-time code is emailed to you, stored only as a bcrypt hash, expires in ten minutes, and is single-use. Every API route independently checks that a request is authorised before touching data; a customer portal account can only ever see the leads and records belonging to its own business.

Your rights under the DPDP Act

As a person whose data we hold, you can ask us to:

  • Confirm what personal data we hold about you and access a copy.
  • Correct or update inaccurate or incomplete data.
  • Erase data that is no longer needed for the purpose it was collected for.
  • Withdraw consent for a purpose you previously agreed to, where consent was the basis for processing.
  • Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
  • Raise a grievance with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.

Grievance Officer

Kunal Gupta
Email: kunalgupta.cse@gmail.com
Phone: +91 90572 65192
Tower 16, Purvanchal Royal City, Greater Noida, Delhi NCR

Children

Our services are directed at businesses and adults. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

If this policy changes, we will update the date at the top of this page. Material changes affecting how we use your data will be communicated directly where we have a way to reach you.

Contact

Questions about this policy or your data can be sent to kunalgupta.cse@gmail.com.