Privacy Policy

Who we are

This policy explains how Qynetic Labs Private Limited (CIN U26107TN2026PTC194272), Plot No. 8, Door No. 283, Bharathi Nagar, Balaji Nagar Extension, Ponneri, Tiruvallur District, Tamil Nadu 601204, India (“we”, “us”) handles personal data collected through qyneticlabs.com (the “website”) and in emails you send us.

For this data we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”). We also follow the Information Technology Act, 2000 and the rules made under it. You can reach us about anything in this policy at contact@qyneticlabs.com.

What we collect

What you give us

• Contact form: your name, email address, organisation (optional), the topic you chose and your message.
• Careers form: your name, email address, phone number (optional), the area you are applying for, links you share (for example to a CV, portfolio, GitHub or LinkedIn profile) and what you tell us about yourself.
• Grievance and data-request form: your name, email address, the type of request and its details.
• Security report form: your name or handle, email address, and the details of the issue you report.
• Emails you send us directly, with whatever they contain.

Please don’t send us sensitive personal data, such as financial details, health information, government identity numbers (Aadhaar, PAN and so on) or biometric data. We don’t need it and don’t ask for it.

What is collected automatically

When you visit any website, your browser sends technical information, such as your IP address, browser type, the page requested and the time. Our hosting provider receives this to deliver the website and protect it from abuse, and keeps it in short-lived server logs. Our form endpoint also uses your IP address, briefly and only in memory, to limit how many messages can be sent in a short time. We do not use this information to identify you, build a profile of you or track you across websites.

What we don’t collect

The website sets no cookies, uses no analytics, advertising or social-media trackers, and loads no scripts or fonts from third parties. See our Cookie Policy.

Why we use it

• To reply to your enquiry and keep the conversation going, for example about early access, a design-in or a partnership.
• To assess your job application and, if there is a fit, contact you about a role.
• To handle grievances and requests to exercise your rights.
• To investigate and fix security issues reported to us, and to credit the people who report them.
• To keep the website and our forms secure and free of spam and abuse.
• To meet our legal obligations, and to establish, exercise or defend legal claims.

We won’t use your data for any other purpose, or send you marketing, unless you separately ask us to.

Our legal basis

We process personal data you send through our forms on the basis of your consent under section 6 of the DPDP Act, which you give by ticking the consent box after reading the notice next to it. For emails you send us directly, you provide the data voluntarily for a specified purpose (a reply), which is a legitimate use under section 7. Where the law requires us to keep or disclose information, we do so to comply with it.

You can withdraw your consent at any time, as easily as you gave it, through our grievance form or by email. Withdrawal doesn’t affect anything we did before it, but we will stop processing your data and erase it unless the law requires us to keep it.

Who we share it with

We do not sell, rent or trade personal data. We share it only with service providers who process it on our behalf and on our instructions (Data Processors), to run this website and deliver your messages:

• Vercel Inc. hosts the website and runs the form endpoint.
• Resend delivers form submissions to our inbox and sends you an automatic acknowledgement.
• WhatsApp (Meta Platforms) and CallMeBot deliver a copy of each form submission to our team’s WhatsApp, so we can respond quickly.
• Our email provider hosts the mailbox where your messages arrive.

We may also disclose personal data if the law requires it, for example in response to a lawful request from a court or government authority, or to protect our rights, our users or the public. If Qynetic Labs is ever involved in a merger, acquisition or sale of assets, personal data may transfer as part of it, under the same protections.

Where it is processed

Our service providers, including WhatsApp, may process and store data on servers outside India, including in the United States and Europe. The DPDP Act allows this, except to countries the Government of India restricts by notification; we will not transfer data to any such country. We choose providers that protect data with reasonable security safeguards.

How long we keep it

• Enquiries: up to 24 months after our last exchange with you.
• Job applications: up to 12 months after you apply, so we can contact you if a suitable role opens. If you join us, your application becomes part of your employment record.
• Grievances and data requests: for as long as needed to resolve them, and for at least one year afterwards as a record, or longer if the law requires.
• Server logs: kept by our hosting provider for a short period under its own retention policy. If a form message can’t be delivered to us, a copy is kept in these logs for that short period so that we can recover it.

When we no longer need personal data, or you withdraw consent, we erase it, unless the law requires us to keep it.

How we protect it

The website is served only over encrypted HTTPS, with HTTP Strict Transport Security and a strict Content Security Policy that blocks third-party scripts. Our form endpoint accepts submissions only from this website, validates every field and limits how often messages can be sent. Access to messages is limited to the people at Qynetic Labs who need it. No method of transmission or storage is perfectly secure, but we take reasonable security safeguards, as the DPDP Act requires. If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the law requires.

Your rights

Under the DPDP Act you have the right to:

• access a summary of the personal data we hold about you and how we process it, and the identities of those we have shared it with;
• correct, complete or update your personal data;
• erase your personal data, unless we must keep it to comply with the law;
• withdraw consent at any time;
• have your grievances addressed by us, promptly; and
• nominate another person to exercise these rights for you if you die or become unable to do so.

To use any of these rights, send a request through our grievance form or email contact@qyneticlabs.com. We may need to confirm your identity before acting on a request. We respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India after first using our grievance process.

Children

The website is not directed at children. Under the DPDP Act, a child is anyone under 18. If you are under 18, please ask a parent or lawful guardian to contact us for you. If we learn that we have received a child’s personal data without verifiable parental consent, we will erase it.

Grievance Officer

In line with the DPDP Act and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, our Grievance Officer is:

The Grievance Officer acknowledges grievances promptly and resolves them within 30 days of receipt.

Changes to this policy

We may update this policy, for example if we add a service or the law changes. The date at the top shows when it last changed. If a change materially affects how we use personal data we already hold, we will tell the people affected and, where required, ask for fresh consent.