Privacy Policy

1. Introduction

The Factory AI ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website thefactoryai.in (the "Site").

This policy complies with the European Union's General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act 2023 (DPDP Act), and other applicable data protection laws.

If you have any questions or concerns about this policy or our practices, please contact us at [email protected].

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you:

• Subscribe to our newsletter (email address, optional name)
• Submit a contact form (name, email, company, phone number, message)
• Interact with our website features

2.2 Automatically Collected Information

When you visit our Site, we automatically collect certain information about your device and browsing behavior:

• Technical Data: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent, click patterns, referral sources
• Cookies: Small data files stored on your device (see Section 4 for details)

2.3 Information We Do NOT Collect

We do not collect sensitive personal data such as financial information, health records, biometric data, or passwords. We do not knowingly collect data from children under 18 years of age.

3. How We Use Your Information

We use your information for the following purposes:

• Newsletter Delivery: Sending you our editorial content (2 emails per week)
• Communication: Responding to your inquiries and contact form submissions
• Website Improvement: Analyzing usage patterns to enhance user experience
• Legal Compliance: Meeting regulatory requirements and preventing fraud
• Business Operations: Internal record-keeping and performance analysis

Legal Basis (GDPR): We process your data based on consent (newsletter signup), legitimate interests (website analytics), and contractual necessity (responding to inquiries).

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. You can control cookie preferences through our Cookie Consent banner.

4.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (e.g., security, consent preferences)
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings

4.2 Managing Cookies

You can manage cookie preferences through our Cookie Consent banner or your browser settings. Note that blocking certain cookies may affect website functionality.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in these limited circumstances:

• Service Providers: Trusted third parties who assist with email delivery, analytics, and hosting (e.g., email service providers, cloud hosting)
• Legal Requirements: When required by law, court order, or government authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)
• Consent: With your explicit permission for other purposes

All third-party service providers are contractually bound to protect your data and use it only for specified purposes.

6. Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Secure database storage with access controls
• Regular security audits and updates
• Employee training on data protection practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 GDPR Rights (EU/EEA Residents)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to data processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time

7.2 India DPDP Act Rights (Indian Residents)

• Right to Access: Obtain information about your data and its processing
• Right to Correction: Correct inaccurate or misleading data
• Right to Erasure: Request deletion of personal data (subject to legal exceptions)
• Right to Grievance Redressal: File complaints with our Data Protection Officer
• Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity

7.3 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• Response Time: Within 30 days (GDPR) or 45 days (DPDP Act)

7.4 Unsubscribe from Newsletter

You can unsubscribe from our newsletter at any time by clicking the "Unsubscribe" link at the bottom of any email or by contacting us directly.

8. Data Retention

We retain your personal data only for as long as necessary:

• Newsletter Subscriptions: Until you unsubscribe or request deletion
• Contact Form Submissions: Up to 3 years for business purposes
• Analytics Data: Anonymized after 26 months (Google Analytics default)
• Legal Obligations: Longer retention if required by law

After the retention period, we securely delete or anonymize your data.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including countries that may not have equivalent data protection laws. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) for transfers outside India/EU
• Adequacy decisions by regulatory authorities
• Service provider certifications (e.g., Privacy Shield successors)

10. Third-Party Links

Our Site may contain links to third-party websites (e.g., social media, external resources). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our Site is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at [email protected], and we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Updating the "Last Updated" date at the top of this page
• Posting a notice on our homepage
• Sending an email to newsletter subscribers (for material changes)

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Complaints and Regulatory Authority

If you have concerns about how we handle your data, you have the right to file a complaint with the relevant regulatory authority:

• India: Data Protection Board of India (DPBI)
  Website: To be established under DPDP Act 2023
• EU/EEA: Your local Data Protection Authority (DPA)
  Find your DPA: EDPB Members List

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: