Privacy Policy

This Privacy Policy explains how Deepsoch AI Private Limited(“Deepsoch AI”, “we”, “us”) collects, uses, stores and protects information when you visit deepsoch.com, get in touch, apply for a role, or use any product we publish.

We are a DPIIT‑recognised Indian company (DIPP248947), incorporated under the Companies Act, 2013, with engineering operations in Bangalore and our registered office in Mumbai:

We only collect the information we actually need to reply to you, run our products, and improve the site. In practice that is:

• Contact form data: name, email, phone, company, subject, topic and message body.
• Project briefs: name, email, company, phone, division, message, budget, timeline and any files you choose to attach.
• Job applications: name, email, phone, location, LinkedIn / portfolio / website URLs, the role and specialisation you apply for, experience, a cover note, your CV and optional portfolio attachments.
• Messages you send us: the content of emails, WhatsApp messages, phone enquiries and chat replies you send to us, along with the channel and timestamp. We use these only to reply and to keep a record of the conversation.
• Technical data: IP address, user‑agent string and referring URL when you submit a form. This is kept for security, fraud detection and auditing.
• Product data: if you use a Deepsoch AI product (for example an API or a hosted tool), usage, billing and telemetry data as described in the product‑specific terms you accept when signing up.

We do not collect sensitive personal data (caste, religion, political views, biometrics, financial account credentials, etc.) through the website. Please do not include such information in messages you send us.

We use the information you give us to:

• Reply to enquiries, briefs and applications.
• Evaluate fit for a project or an open role.
• Deliver a product or service we have separately agreed to provide.
• Keep our products, site and infrastructure secure.
• Meet our legal, tax and compliance obligations in India and in the jurisdictions we operate in.

We do not sell your personal data. We do not use messages you send us to train public AI models.

We communicate with you over email, phone and WhatsApp. We only contact you on a channel because you reached out to us first on that channel, gave us the contact detail through one of our forms, or explicitly opted in (for example by ticking a consent box or replying to confirm).

• Reply messages: when you write to us at an email inbox, on WhatsApp at +91 88284 20216, or via a form, we reply through the same channel using the contact details you provided.
• Transactional messages: updates that relate to a specific request, brief, application or product you are using (for example a status update on your enquiry, or a service notification).
• Promotional messages: we do not send marketing broadcasts on WhatsApp or SMS without prior, explicit opt‑in. If you have opted in, you can opt out at any time by replying STOP on the same channel, or by emailing privacy@deepsoch.com.
• Message content:the content of conversations with us is retained alongside the related contact record under the same retention timelines as other contact data (see “How long we keep it” below) and is never sold or used to train public AI models.

Our use of WhatsApp is governed by Meta's WhatsApp Business Messaging Policy and Commerce Policy. We do not message users who have not consented, and we do not use WhatsApp for content that violates those policies.

Form submissions and metadata are stored in a managed PostgreSQL database. Files you upload (briefs, CVs, portfolios) are stored in object storage hosted on infrastructure we operate. Transport to and from our servers is secured with TLS.

Access to personal data is restricted to Deepsoch AI personnel who need it to do their job, gated by SSO and role‑based access control. Our security posture is described in more detail in our Security page.

Default retention periods, unless a law requires longer:

• Contact messages and project briefs: up to 24 months from the date of submission, then deleted or anonymised.
• Job applications: up to 24 months after a decision is made, so we can contact strong candidates for future roles. You can ask us to delete your application earlier at any time.
• Security logs: up to 12 months.
• Billing records: retained for the statutory period required by Indian tax law.

We share data only with vendors we need to run the business, and only to the extent needed. Typical categories:

• Transactional email and analytics providers that help us reply to you and understand how the site is used.
• Cloud and infrastructure providers where our own cluster does not apply (for example, CDN for static assets).
• Professional advisers (lawyers, auditors, accountants) bound by confidentiality.
• Law‑enforcement or regulators when we are legally required to disclose.

Under the Indian Digital Personal Data Protection Act, 2023 and applicable data‑protection laws in other jurisdictions, you have the right to:

• Access the personal data we hold about you.
• Correct anything that is inaccurate or out of date.
• Ask us to delete your data, subject to legal retention rules.
• Withdraw consent where processing is based on consent.
• Raise a grievance with our Grievance Officer (below).

To exercise any of these rights, email privacy@deepsoch.com. We will respond within the timelines required by law.

The marketing site uses a minimal set of cookies that are needed to make the site work (for example, theme and preferences) plus privacy‑friendly analytics. We do not run third‑party advertising trackers on the site.

You can block cookies in your browser; the site will continue to work but some preferences may not persist between visits.

Our primary infrastructure is in India. When we use vendors outside India (for example, transactional email), we rely on the standard contractual clauses and safeguards required under applicable data protection laws.

Deepsoch AI's products and the website are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please email privacy@deepsoch.com and we will delete it.

We may update this policy from time to time. The version at the top of this page is always the current one. For material changes we will update the “Last updated” date and, where appropriate, notify you by email.

For any privacy‑related question or to raise a grievance under the DPDPA, 2023, please contact:

• Grievance Officer: privacy@deepsoch.com
• Legal: legal@deepsoch.com
• Company: Deepsoch AI Private Limited, Mumbai, India · CIN U62011MH2025PTC449773.