Privacy Policy

Objective of this Privacy Policy:

Infocepts Technologies Private Limited and its group entities (“Infocepts”, “we”, “our”, or “us”) are committed to protecting the privacy and security of personal information.
Depending on the context of processing, Infocepts may act as a “Data Controller/Data Fiduciary” (or equivalent term under applicable laws) when we determine the purpose and means of processing (e.g., website visitors, employees, vendors, marketing contacts), or as a “Data Processor” when we process personal information on behalf of our clients under contractual arrangements.

Scope of this Privacy Policy:

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you interact with our website (www.infocepts.ai), engage with our services, or otherwise communicate with us.
The personal information you choose to provide to or that is collected by these third parties, including any social media websites featured on our website, is not covered by the Infocepts Privacy Statement. We encourage you to review the privacy statement or policy of any website before submitting your personal information
Infocepts’ website is not directed to children under the age of 16. By using this website, you represent that you are at least 16 years old, or are using it under adult supervision. Infocepts will not be liable for any unsolicited information provided by you. You consent to Infocepts using such information as per this Privacy Policy.

Please read this privacy policy carefully.

1. 1. What personal information you provide, or we collect
      • We may collect personal information such as your First Name, Last Name, E-mail address, job title, company name, country, and phone number when you submit a request for “Book a meeting” or fill out the “Let’s Talk” form or click on “Book Now” section on our website.
        Under our “Business Referral form”, we may collect your personal information and that of your business referee, including First Name, Last Name, Email Address, Job Title, Company Name, and Country.
      • Solution Demo – we offer various Data and AI solutions under our products page and if you wish to get a demo of any one of the solutions, you are required to provide us personal / corporate E-mail ID.
      • Talk to an expert – we offer various Data and AI services under our services and industry page and if you wish to connect our industry expert, you are required to provide us personal / corporate E-mail ID.
      • Careers page on Website – If you wish to apply for a position with our company you are required to provide us your first name, last name, email, phone number, current location, current company, professional information, Data of Birth, and resume document.
      • Referral Program – If you refer someone to Infocepts through our Referral Program, then by filling the referral form you share personal information such as your first name, last name, company name & email id. You also share the first name, last name, email Id, location, company and designation of the person referred by you in the same form.
      • White paper/ resources through Website – our website is designed to allow you to visit anonymously to learn about the company and our services without disclosing personal information and the submission of personal information, is voluntary. If you request certain information or items, however, like a white paper, we will ask you for personal information that allows us to respond effectively to your request; The information we request is your name, job title, company name, email address and country.
      • Cookies and related information – We collect certain information from visitors to our website, such as IP addresses, browser type, ISP, referring/exit pages, operating system, date/time stamp, and clickstream data. This data helps us analyse trends, administer the site, track user movements, and gather demographic information about our user base. The information collected does not identify individual users and is not linked to personal information. We also use session ID cookies that expire when you close your browser to identify returning visitors. If you reject cookies in your browser settings, you can still navigate our website, but some areas may have limited functionality.Kindly refer our cookie policy here for more details.
      • Relationships with Third Party Organizations – We actively collaborate with a diverse network of third-party organizations such as vendors, suppliers, service providers, and outsourced contractors. We collect minimum personal information to interact for business purposes including names, email addresses, phone numbers, IM contacts, and signatures etc.
      • Relationships with Client Organizations – We do collect and retain personal information of people belonging to Client Organizations, with whom we do business. This personal information would be mainly name, contact, email, designation / title, IM contacts, etc.
      • Prospects and Marketing Contacts – We tend to collect contact information about prospects and business interests from various sources including third party contact providers. Such information includes name, company name, email address, contact address, location, designation / title etc.
      • Employees / Contract Staff – We collect personal information of people who are employed with us, as per the requirements laid down by applicable laws and regulations. We also collect personal information of people who are employed on part-time basis or on contract basis with us. This information includes name, contact details, identifiers, educational information, experience information, skills / knowledge, family information, blood group, biometric information, bank information, government provided identification documents etc.

   3. Categories of personal data:

      Depending on the context/ processing activity, we may collect the following categories of personal information:

      • Identification and contact data (name, email, phone, address, job title)
      • Professional and employment-related information
      • Technical data (IP address, browser details, device identifiers)
      • Marketing and communication data
      • Recruitment-related data (resume, education, experience, skills)

   5. How we use the personal information we collect

      We process personal data only for specific, explicit, and lawful purposes and in accordance with the applicable lawful basis:

      • Performance of a Contract / Operational Necessity
        • Service Requests: Assessing queries and processing requests for products and services.
        • Relationship Management: Administering communications and managing customer relationships.
        • Operations & Billing: Fulfilling contractual obligations, invoicing, and administrative activities with business associates.
        • Employment Management: Managing employment relationships including onboarding, payroll, benefits administration, and execution of employment contracts.
      • Consent / Notice
        • Marketing: Contacting you regarding products, services, or promotions.
        • Newsletters: Sending email communications upon request.
        • Surveys: Collecting voluntary feedback to improve services.
      • Legitimate Interests (GDPR/CCPA) / Certain Legitimate Uses (DPDPA)
        • Website Analytics: Analysing website usage and performance.
        • Recruitment: Assessing candidates and managing hiring processes.
        • Business Operations: Supporting internal administration, governance, and record-keeping.
      • Legal Obligation / Certain Legitimate Uses (DPDPA)
        • Compliance: Meeting statutory, regulatory, tax, audit, and legal obligations, including lawful requests from authorities.

      If you wish for us not to use your personal information for any of the above purposes, please send us a mail at DPO@infocepts.com

   6. Your (Data Subject) rights

      In accordance with applicable legal requirements, we provide opportunity to exercise data subject rights, which are available to the individuals in the context of their engagement with us. Such rights may include:

      • The right to request access to your Personal Data
      • The right to correct inaccurate or incomplete Personal Data
      • The right to object to the Processing of your Personal Data
      • The right to request deletion of personal data
      • The right to data portability (where applicable)
      • The right to grievance redressal

      Each Data Subject Request is validated and tracked to closure as per our Data Subject Request (DSR) process and within timelines required under applicable laws.

      To exercise these rights or for any privacy-related questions, contact us at DPO@infocepts.com.

   7. Children’s Privacy

      Our public website (www.infocepts.ai) and publicly available services are not directed to children, and we do not knowingly collect personal data from children through our public website. If we learn that personal data relating to a child has been submitted through our public website without the authorization required by applicable law, we will take reasonable steps to delete or de-identify that information, unless retention is required by law.

      In limited circumstances, we may process personal data relating to an employee’s child or dependent where such information is provided through our internal company systems for legitimate employment-related administration purposes, such as benefits, insurance, medical administration, emergency contact, travel, events or statutory nominations. In such cases, we process such data only as necessary for those purposes, subject to appropriate safeguards and any consent, authorization, or other requirements applicable under relevant law.

   8. With whom do we share personal information 
      • Internal Teams and Functions – We may share your personal information with our internal teams and functions, on need basis, so as to enable them to fulfil your expectations, to fulfil business obligations and deliver what is required.
      • Service providers – Where necessary, we may use third-party service providers to collect, process, store, or otherwise handle information on our behalf. Such third-party providers include but not limited to cloud storage providers, contractors, lead qualification firms, and other providers of marketing services. Rest assured that all such service providers are bound by suitable Confidentiality and Data Processing Agreement (DPA) obligations.
      • Affiliates and Group Companies – We may provide your personal information to our affiliates and Group Companies to enable them to assist us in providing you services.
      • Merger or acquisition – We may transfer your personal information if we are acquired by another entity, or if we merge with another company or transfer a part of our business, including the website, to a third party. Any such third party or resultant entity that receives your personal information shall have the right to continue to use your personal information in line with the purposes set out herein. In the event of such a sale or transfer, we may notify you.
      • Affiliates and Group Companies – We may provide your personal information to our affiliates and Group Companies to enable them to assist us in providing you services.
      • Merger or acquisition – We may transfer your personal information if we are acquired by another entity, or if we merge with another company or transfer a part of our business, including the website, to a third party. Any such third party or resultant entity that receives your personal information shall have the right to continue to use your personal information in line with the purposes set out herein. In the event of such a sale or transfer, we may notify you.
      • Legal and regulatory authorities – We may need to disclose personal information as required by law or when we believe such disclosure is necessary to protect our rights or to comply with a govt. request or direction, judicial proceeding, court order, or legal process served on us.
      • Google Analytics – Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookies about your use of this website are usually transferred to a server of Google in the US and stored there. In case of activation of IP anonymization on this website, your IP address from Google will be truncated within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address is transmitted to a Google server in the US and shortened there. You can refuse the use of cookies by selecting the appropriate settings on your browser software. You can also prevent the data generated by the cookie and related to your use of the Website to Google and the processing of these data by Google, by selecting the in the following link (https (including your IP address.): // Download tools.google.com/dlpage/gaoptout?hl=de) available browser plug-in and install it.
   9. Lawful basis 
      • We will not process your personal information without a lawful basis to do so.
      • The lawful basis of processing your personal data may be through -your explicit consent OR
      • Because of any contract with you or any third party under which processing of such data is required OR
      • Basis of our legitimate interests, provided such interests are not overridden by your privacy rights and interests, OR
      • Basis any obligation arising from applicable laws, regulations or stated by any governing supervisory authority.
   10. Transfer of your personal information across borders 
       • We have a worldwide presence through our regional sales or delivery centres.
       • The personal information we collect might be stored and processed at secure centres in Singapore, Switzerland, France, USA, Canada, UK, India and others.
       • The cross-border transfer of personal information is carried out only when necessary and adhering to secure transfer conditions laid down by applicable Regulations and Supervisory Authorities.
       • The cross-border transfers may also happen with cloud service providers in case of their storage locations being offered globally and provided for better continuity and redundancy arrangements.
       • The cross-border transfers are ensured to be made only to countries which are:
         1. either determined safe by supervisory authorities for such transfers i.e. to countries which have been recognized by the European Commission as offering an adequate level of protection for personal information.
         2. or by ensuring that appropriate legal terms and conditions, security measures and safeguards are implied while making such transfers. Such as though agreement based on the European Union standard contractual clauses (SCC) which are included in the Data Protection Agreement (DPA).
   11. How long do we retain your information?
       • We endeavour to only collect personal data that are necessary for the purposes for which they are collected, and to retain such data for no longer than is necessary for such purposes. The length of time personal data is retained, and criteria for determining that time, are dependent on the nature of the personal data and the purpose for which it was provided.
       • The retention of personal data is governed by various factors such as purpose of collection, purpose and duration of processing, applicable requirements arising out of contractual or regulatory obligations, internal policies etc.
       • Post completion of processing and / or completion of legitimate requirement for retention of personal data, we will return the data or delete it at our end from all our information systems and storages at the first possible instance.
       • As part of honouring your rights and freedom, we will try to delete your personal information upon reasonable written request for the same. Please note, however, that there might be latency in deleting Personal Information from our servers and backed-up versions might exist even after deletion.
       • For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact DPO@infocepts.com
   12. Our security measures 
       • We understand the importance of safeguarding the personal information in our possession and have implemented appropriate technical and organizational measures for protection to secure your personal information from unauthorised access, disclosure, leakage, alteration or destruction.
       • We conduct data privacy impact assessments to identify the risks associated with your personal information while in our possession and which may impact your rights and implement appropriate measures to control the risks.
       • We use a variety of industry-standard security technologies and procedures to help protect personal information from unauthorized access, use, or disclosure.
       • We constantly train our employees on privacy and security issues and best practices.
       • The personal information in our possession is stored at secure locations and protected using appropriate firewalls and security measures.
       • We conduct constant monitoring as well as periodical testing of all controls so as to ensure their effectiveness and adequacy.
       • We promote regular audits and assessments by internal as well as third party experts for ensuring the control effectiveness.
       • We ensure that all third-party partners adhere to robust security practices and measures to safeguard personal information. To reinforce this commitment, we have relevant contractual agreements in place, including Data Processing Agreements (DPAs) that incorporate Standard Contractual Clauses (SCCs), ensuring compliance with applicable data protection regulations and maintaining a high standard of data privacy and security.
       • In spite of taking all such care and precautions, we do understand that the threat of data pilferage due to unauthorized hacking, virus attacks, technical issues is possible. Hence, we cannot guarantee that unauthorized third parties will never be able to overcome those measures or use your Personal Information for improper purposes.
       • You are also required to be careful to avoid “phishing” scams, where someone may send you an e-mail that looks like it is from us asking for your personal information.
       • Though appropriate technical security measures are implemented for data in transit and data at rest, we cannot warrant the security of any personal information transmitted as these systems are not hack proof.
       • We strive constantly to improve the security and integrity of the data in our possession, by reassessing the effectiveness of implemented controls and security measures and monitoring the performance.
   13. Infocepts maintains industry-recognized certifications including ISO 27001-2022, ISO 27017-2015, ISO 27018-2019, and SOC 2 Type II, demonstrating our commitment to information security and data protection.

   14. Limitation of liability 

       To the extent permissible under the law, we shall not be liable for any direct, indirect, incidental, special, consequential or exemplary damages, including but not limited to, damages for loss of profits, goodwill, data, information, or other intangible losses (even if we have been advised of the possibility of such damages), arising out of this privacy policy.

   15. Authenticity

       Infocepts is not responsible for the accuracy or lawfulness of personal data provided by its service providers. Service providers are solely responsible for ensuring such data is accurate, authentic, and lawfully collected with valid consent where required.

   16. Links to Other Sites 

       Our web site contains links to other sites that are not owned or controlled by us. Please be aware that this privacy policy applies only to personal information collected by InfoCepts. We are not responsible for the privacy practices of third-party websites, and we do not endorse or make any representations about these third-party sites. We encourage you to be aware when you leave our website and to read the privacy statements of every website that collects personal information.

   17. Governing laws and disputes 
       • This privacy policy shall be construed and governed by the laws of Virginia, USA Commonwealth of Virginia, USA without regard to principles of conflict of laws. Any dispute arising, between you and us shall be submitted to the exclusive jurisdiction of courts at McLean, Virginia, USA.
       • For any resident of European Union (EU), this Privacy Policy shall be governed by the provisions of the General Data Protection Regulation (GDPR) established in EU region.
       • For any resident of Singapore, this Privacy Policy shall be governed by the provisions of the Personal Data Protection Act (PDPA) established in Singapore.
       • For any resident of California State of United States of America, this Privacy Policy shall be governed by the provisions of the California Consumer Protection Act (CCPA) established in California State of USA.
       • For any residents of Canada, this Privacy Policy shall be governed by the provisions of The Personal Information Protection and Electronic Documents Act (PIPEDA) established in Canada.
       • For any residents of United Kingdom (UK), this Privacy Policy shall be governed by the provisions of the General Data Protection Regulation (GDPR) established in United Kingdom.
       • For residents of India, this Privacy Policy shall be governed by the provisions of the Digital Personal Data Protection Act 2023, established in India.

   18. Policy Governance 

       Infocepts has established a dedicated Privacy Office responsible for overseeing data protection practices. A Data Protection Officer (DPO) has been appointed to monitor compliance, manage data subject requests, and act as a point of contact for regulators.

   19. Changes to this policy 

       We may update this privacy policy from time to time. we shall provide you with an email notification indicating any material changes in the privacy policy. Additionally, you are encouraged to check this privacy policy on a regular basis to be aware of the changes made to it.

       This privacy policy was last modified on June 10^th, 2026.

       This privacy policy dated June 10^th, 2026 is version 2.0.

       Grievance Redressal

       If you have any questions, comments, or concerns about this privacy statement or our privacy practices, please either send us an email at DPO@infocepts.com or contact us at the following address:

   20. US Address

       1750 Tysons Blvd, Suite 1500,
       McLean, VA 22102
       Ph: (703) 289-5117
       Fx: (240) 235-4306

       India Address

       First floor, SP Infocity,
       Plot no 2, Sector 11 Dahegoan,
       Mihan, Nagpur 441108,
       Maharashtra , India.