Privacy Policy

1. Introduction

BuildStack ("we", "us" or "our") operates buildstack.in and provides AI automation and industrial automation services. This Privacy Policy explains how we collect, use, disclose, store and otherwise process personal information when you visit our website, contact us, request a proposal or engage our services.

By using our website or providing personal information to us, you acknowledge that you have read and understood this policy. If you do not agree with this policy, please do not use the website or submit personal information to us.

This policy should be read together with any project agreement, statement of work or data processing agreement that applies to a specific engagement.

2. Scope of this policy

This policy applies to personal information processed through our website, enquiries, proposals, communications and the delivery of our services. It does not apply to websites, applications or services operated by third parties that we do not control, even where we link to them.

Where we process personal information on behalf of a client as part of a project, the client is generally responsible for the lawful basis for that processing and for providing any required notices. Our processing in that context may also be governed by a separate data processing agreement.

3. Information we collect

We may collect the following categories of information:

• Contact details: name, email address, telephone number, company name, job title and location.
• Enquiry and project information: messages, project briefs, requirements, documents, files and other information you choose to share with us.
• Communication data: correspondence, meeting notes, call recordings where permitted, and support or service requests.
• Technical data: IP address, browser type and version, device type, operating system, referring URL, pages viewed, time spent and approximate location derived from your IP address.
• Cookie and analytics data: information collected through cookies and similar technologies, as described in the Cookies section below.
• Information from third parties: business referrals, publicly available sources, analytics providers, advertising platforms and service providers.

4. Information you choose to provide

Some information is required for us to respond to an enquiry or provide services. If you do not provide that information, we may be unable to respond or deliver the requested services.

We do not intentionally collect special categories of sensitive personal data through this website. Please do not send sensitive information to us unless we have agreed appropriate safeguards in advance.

5. How we use your information

We use personal information for the following purposes:

• Responding to enquiries and communicating with you.
• Preparing proposals, assessments and statements of work.
• Delivering, supporting and improving our services.
• Operating, securing and improving our website.
• Understanding how visitors use our website and measuring the effectiveness of our content.
• Detecting, preventing and addressing fraud, security incidents or misuse.
• Complying with legal, regulatory, accounting and reporting obligations.
• Enforcing our terms and protecting our rights and those of third parties.
• Sending relevant updates where you have consented or where permitted by law. You can opt out at any time.

6. Legal bases for processing

If you are located in a jurisdiction that requires a legal basis for processing, such as the European Economic Area or the United Kingdom, we rely on the following bases:

• Consent: where you have given consent, such as for marketing communications or certain cookies.
• Contract: where processing is necessary to respond to your request or perform a contract with you.
• Legitimate interests: such as operating and improving our business, responding to enquiries, securing our systems and communicating with clients, where those interests are not overridden by your rights.
• Legal obligation: where we need to process information to comply with the law.

7. Cookies and similar technologies

We may use necessary, analytics and preference cookies. Necessary cookies enable the website to function. Analytics cookies help us understand how visitors use the site. Preference cookies remember choices such as your theme selection.

Analytics on this site may be provided by Google Analytics, which processes usage information under Google's own privacy policy.

The booking calendar on our contact page is embedded from Google. Google may set cookies and process information under its own privacy policy.

You can control or delete cookies through your browser settings. Disabling cookies may affect website functionality. Third-party analytics or advertising providers may set their own cookies, subject to their privacy policies.

8. Sharing and disclosure

We do not sell personal information. We may share information in the following circumstances:

• Service providers: hosting, cloud, email delivery (including Resend for contact-form email), scheduling (including Google Calendar), CRM, analytics, security and professional advisers, under appropriate confidentiality and data protection obligations.
• Professional advisers: lawyers, accountants, auditors and insurers where necessary.
• Business transfers: a merger, acquisition, financing, reorganisation or sale of assets, subject to appropriate safeguards.
• Legal and regulatory authorities: where required by law, court order or to protect rights, safety or security.
• With your consent: other parties where you have instructed or authorised us to share information.

9. International data transfers

Information may be processed in countries other than the country in which you are located. Data protection laws in those countries may differ. Where required, we use appropriate safeguards, such as contractual protections, to protect personal information transferred internationally.

10. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including to provide services, maintain business records, resolve disputes, enforce agreements and comply with legal, tax and accounting obligations.

Retention periods depend on the nature of the information and our relationship with you. When information is no longer required, we delete it or anonymise it.

11. Data security

We use reasonable technical and organisational measures designed to protect personal information, including access controls, restricted access, secure transmission where appropriate and regular review of our practices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your information has been compromised, please contact us promptly.

12. Your privacy rights

Depending on your jurisdiction, you may have some or all of the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: request that inaccurate or incomplete information be corrected.
• Deletion: request that we delete information, subject to legal exceptions.
• Restriction: request that we restrict processing in certain circumstances.
• Objection: object to processing based on legitimate interests or direct marketing.
• Portability: request a portable copy of information you provided, where applicable.
• Withdrawal of consent: withdraw consent where processing is based on consent.
• Complaint: lodge a complaint with your local data protection authority.

13. Exercising your rights

To exercise your rights, contact us at sales@buildstack.in. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

In India, these rights may be available under the Digital Personal Data Protection Act, 2023, subject to its implementation and any applicable rules.

14. AI and automated processing

Some of our services involve artificial intelligence and machine learning. Where we process personal information as part of an AI project, we do so under the relevant project agreement and any applicable data processing terms.

AI outputs may be inaccurate, incomplete or unsuitable for a particular purpose. They should be reviewed by qualified people before being relied upon. We do not use personal information to make solely automated decisions that produce legal or similarly significant effects without human involvement, unless required or permitted by law with appropriate safeguards.

Unless we have written permission, we do not use client project data to train public or shared AI models.

15. Children's privacy

Our website and services are intended for businesses and professional users. They are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can take appropriate steps.

16. Third-party links and services

Our website may contain links to, or embeds from, third-party websites, platforms or services, including Google Calendar for meeting bookings. We are not responsible for their content, security or privacy practices. We encourage you to review their privacy policies before providing personal information.

17. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes may be communicated through the website or by other appropriate means. Your continued use of the website after changes are posted means you accept the updated policy.

18. Contact us

If you have questions about this Privacy Policy, wish to exercise your rights or have a privacy concern, contact us at sales@buildstack.in. We will review your request and respond within a reasonable time.

You may also have the right to contact your local data protection authority if you are unhappy with our response.