Legal Document
Privacy Policy
About This Policy
Auralys AI ("we", "us", "our") is a sole proprietorship operated under Indian law. We provide an AI-powered business analytics platform, website development services, and strategic consulting. This Privacy Policy explains what personal data we collect through auralys.ai and our AI Analyst application, why we collect it, how we use it, and your rights in relation to it.
By using our website or submitting information through our contact form or AI Analyst tool, you acknowledge the practices described in this policy.
Legal basis: This policy is published in compliance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules) under the Information Technology Act, 2000, and in anticipation of the Digital Personal Data Protection Act, 2023 (DPDP Act).
Personal Data We Collect
2.1 Contact form
When you submit an enquiry via our Contact page, we collect:
- First name and last name
- Email address
- Phone number (optional)
- Company name and your role within the company
- Company size (band selected from a dropdown)
- The nature of your enquiry and any message you write
Purpose: To respond to your enquiry, schedule demos, and discuss service requirements. We do not use contact form data for unsolicited marketing without your explicit consent.
Retention: Contact enquiries are retained for a period of 2 years from the date of submission or until deletion is requested. This is to respond and maintain a record of our business relationship, and deleted upon request.
2.2 AI Analyst tool
When you use our AI Analyst application at ppt-creator.streamlit.app, you may upload files (Excel, CSV, or pasted data) and provide a brief on the presentation you require. We want to be transparent about how this data is handled:
- Uploaded files are processed in-session only for the purpose of generating your requested presentation.
- Files are not stored after your session ends and are not retained on our servers.
- Uploaded data is not used to train AI models, shared with third parties, or used for any purpose beyond generating your requested output.
- You should avoid uploading files containing sensitive personal data about third parties. If such data is included, you are responsible for ensuring you have the right to process it.
Infrastructure note: The AI Analyst tool is hosted on Streamlit Community Cloud (Snowflake Inc.), which processes data on its infrastructure. Streamlit's own privacy policy governs any data handled at the infrastructure level.
2.3 Website analytics
We use Google Analytics to understand how visitors interact with our website. It collects pages visited, time on page, referring source, browser and device type, and approximate geographic location (derived from IP address, which is anonymised). You can opt out by installing the Google Analytics Opt-out Browser Add-on or adjusting your browser's cookie settings.
We do not use advertising cookies, retargeting pixels, or third-party advertising networks.
Legal Basis for Processing
- Consent — when you submit a contact form or agree to analytics cookies.
- Legitimate interests — to respond to business enquiries and improve our services.
- Contract performance — when processing is necessary to deliver services you have engaged us for.
- Legal obligation — where we are required to retain records under Indian law.
How We Share Your Data
We do not sell, rent, or trade your personal data. We do not share your data with third parties for marketing purposes. We may share data only in the following limited circumstances:
- Service providers — Google (Analytics) and Streamlit/Snowflake (AI tool hosting). These providers process data solely to provide the services described in this policy.
- Legal requirement — if required by applicable Indian law, court order, or governmental authority.
- Business transfer — in the unlikely event of a sale or transfer of the business, data may transfer as part of that transaction, subject to equivalent privacy protections.
International Data Transfers
Auralys AI serves clients in India, South Africa, and the United Kingdom. Your personal data may be processed on servers located outside India (for example, Google Analytics infrastructure or Streamlit hosting). We rely on the data protection frameworks and contractual safeguards of these providers to ensure your data remains protected to a standard consistent with Indian law.
Cookies
We use the following types of cookies on auralys.ai:
- Strictly necessary cookies — required for the website to function. These cannot be disabled.
- Analytics cookies — placed by Google Analytics to measure traffic and usage patterns. These are only placed if you consent to their use.
You can manage or delete cookies at any time through your browser settings. Disabling analytics cookies will not affect the core functionality of the website.
Data Security
We implement reasonable security practices and procedures as required under Section 43A of the Information Technology Act, 2000, including HTTPS encryption for all data transmitted to and from auralys.ai, access controls limiting who can view submitted enquiry data, and use of reputable, security-certified infrastructure providers.
While we take appropriate precautions, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Your Rights
In accordance with applicable Indian law and in anticipation of the DPDP Act 2023, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data, subject to legal retention obligations.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
- Grievance — raise a complaint about how your data is handled.
To exercise any of these rights, contact us at sumant@auralys.ai. We will respond within 30 days.
Grievance Officer
In accordance with the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020, the following person is designated as the Grievance Officer for Auralys AI:
Children's Privacy
Our services are intended for business users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us at sumant@auralys.ai and we will delete it promptly.
Third-Party Links
Our website may contain links to external websites, including client portfolio sites and third-party tools. This policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services or applicable law. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.
Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact: