India DPDP Act Compliance

BuildXTeam -- Enterprise Privacy Policy

Last Updated: 2026-02-23

This Privacy Policy describes how BuildXTeam processes personal data in compliance with:

• Digital Personal Data Protection Act, 2023 (India)
• IT Act, 2000
• GDPR principles (where applicable)
• Global SaaS data security standards

1. Role Under Data Protection Laws

The Company acts as a Data Fiduciary (India) / Data Controller (where applicable). Third-party providers (OpenAI, cloud vendors) act as Data Processors.

2. Data Collected

We may collect:

• Name
• Email
• Account identifiers
• Startup-related business data
• AI usage metadata

We do not intentionally collect sensitive biometric data.

3. AI Data Processing

User inputs may be processed through third-party AI providers strictly for generating outputs.

We:

• Do not sell personal data
• Do not expose API keys
• Apply backend-controlled access restrictions
• Enforce role-based access control

4. Data Minimization

We prioritize structured storage over full transcript retention where feasible.

5. User Rights

Under DPDP Act and applicable global frameworks, users may:

• Access their data
• Request correction
• Request deletion
• Withdraw consent
• Lodge grievances

6. Grievance Officer

For privacy-related concerns, users may contact the designated Grievance Officer via official support channels.

Response timelines shall comply with applicable statutory requirements.

7. Security Measures

We implement:

• HTTPS encryption
• JWT-based authentication
• Role-based database isolation
• Environment-based secret management
• Logging and monitoring controls

8. Cross-Border Transfers

Data may be processed outside India where legally permitted. Appropriate safeguards are applied.

9. Data Breach Response

In the event of a data breach:

• The Company will assess impact
• Notify authorities if required
• Inform affected users when legally mandated

© 2026 BuildXTeam a product of aikya tech and talent solutions. All rights reserved.