Privacy Policy

Illume AI Innovations Private Limited, operating from Kolkata, West Bengal, India, is responsible for personal data collected through this website, contact channels, proposals, client onboarding, support, billing, and our own admin or CMS systems.

This policy applies to digital personal data that we process for our own business. Where we build, host, maintain, or support systems for a client, the client may be responsible for their user data and we may act as a processor under the agreed contract.

We collect only data that is reasonably needed for the relevant purpose. This may include name, email address, phone number, organisation name, role, enquiry details, project requirements, messages, billing or tax references, contract records, account or admin access details, support records, consent preferences, IP address, device details, browser details, cookie data, and security logs.

We receive this data when you submit a form, email or call us, request a proposal, sign or discuss an engagement, access a protected workspace, use a product or admin surface operated by us, or interact with our website and related systems.

We process personal data to respond to enquiries, prepare proposals, provide services, manage client relationships, operate websites and CMS workflows, deliver support, administer accounts, issue invoices, maintain business records, secure our systems, prevent misuse, comply with law, and send service communications.

Where consent is required, we ask for clear consent and provide a way to withdraw it. We may also process personal data for legitimate uses permitted by the Digital Personal Data Protection Act, 2023 and other applicable Indian law. We do not sell personal data.

We may share personal data with hosting providers, cloud infrastructure providers, email and communication tools, analytics or diagnostics providers, payment or accounting support, professional advisers, security vendors, and subcontractors who help us deliver agreed services.

We share only what is needed for the relevant purpose and expect vendors and processors to handle personal data with suitable confidentiality, security, and contractual safeguards. We may also disclose information when required by law, court order, regulator, contractual obligation, or to protect rights, safety, and security.

We keep personal data only for as long as needed for the purpose for which it was collected, including service delivery, client support, legal, tax, accounting, audit, security, dispute resolution, and contractual record requirements.

When retention is no longer required, we delete, anonymise, or archive data in a controlled manner, subject to backup cycles and legal holds that may apply.

Subject to applicable law, you may request a summary of your personal data and processing activities, correction, completion, update, erasure, withdrawal of consent, grievance redressal, and nomination rights where available. Send requests to contact@illumeai.in with the subject Privacy Request.

We may verify your identity before acting on a request. We may retain or restrict deletion of information where continued retention is required for law, security, fraud prevention, accounting, dispute handling, or active contractual obligations.

Our own website and business contact channels are not directed at children. If a client asks us to build or operate a product that involves children or students, the client is responsible for lawful notices, consent flows, and age appropriate safeguards unless the signed agreement says otherwise.

We do not knowingly use children data for targeted advertising, behavioural monitoring, or profiling through our own website.

We may use service providers that process or store data in India or in other countries that are not restricted under applicable Indian law. We use reasonable contractual, technical, and organisational safeguards for such processing.

For privacy questions, requests, or grievances, email contact@illumeai.in.