Privacy Policy
Last updated 16 October 2026
What we collect, why, how long we keep it and your rights under India's Digital Personal Data Protection Act, 2023.
In short: we collect only what we need to reply to you, run our free tools and send what you asked for. We don't sell your data, and you can ask us to delete it at any time.
Who we are
Zaiphr Labs ("we", "us") is the data fiduciary for personal data collected through this website. Contact us about anything in this policy at shyam@zaiphr.in.
What we collect and why
| Where | What we collect | Why |
|---|---|---|
| Contact and project-brief forms | Name, email, phone/WhatsApp (optional), company, website, project details, budget and timeline | To reply to your enquiry and prepare for a call |
| Free tools (AI Stack Finder) | The business problem and context you describe. To unlock full reports: name, email, company and optional phone | To generate your report, email you a copy and follow up if you asked us to |
| Newsletter / AI news digest | Email address | To send the digest you subscribed to |
| AI News saved items (if you sign in) | Email address and the stories you save | To sync your saved list across devices |
| AI chat assistant | The messages you type | To answer your questions. Don't share sensitive information in chat |
| Usage analytics | Pages visited, referrer, UTM campaign tags, device type, approximate country | To understand what's useful and improve the site. We use privacy-friendly analytics that don't set advertising cookies |
We do not knowingly collect data from children under 18. If you believe a child has shared data with us, write to us and we will delete it.
Legal basis and consent
We process your data with your consent, which you give when you submit a form with the consent checkbox ticked, or for legitimate uses permitted by the DPDP Act, such as responding to a request you made. You can withdraw consent at any time by emailing us or using the unsubscribe link in any email. Withdrawal doesn't affect processing done before it.
Who we share it with
We use trusted processors to run this website and its features, under contracts that limit them to processing on our behalf:
- Hosting: Vercel
- Database and authentication: Supabase
- Email delivery: Resend
- AI processing: Anthropic (Claude API), used to generate tool reports, news summaries and chat replies. Data sent through the API is not used to train models.
- Scheduling: Calendly, if you book a call
Some of these providers may process data outside India. Where they do, we rely on their contractual safeguards and only transfer data to countries not restricted by the Government of India. We never sell your personal data.
How long we keep it
- Enquiries and leads: up to 24 months after our last interaction, unless you become a client
- Tool inputs and reports: up to 12 months
- Newsletter subscriptions: until you unsubscribe
- Reader accounts and saved stories: until you ask us to delete your account
- Analytics: aggregated, with no individual profiles kept
Your rights
Under the DPDP Act you can:
- access a summary of the personal data we hold about you
- correct or update it
- have it erased
- withdraw consent
- nominate someone to exercise your rights if you die or become incapacitated
- raise a grievance with us, and escalate it to the Data Protection Board of India if we don't resolve it
To exercise any of these, email shyam@zaiphr.in with the subject "Data request". We'll respond within 30 days.
Security
We use encryption in transit, access controls, row-level security on our database and least-privilege access for our team. No system is perfectly secure, but we'll notify you and the Data Protection Board as required if a breach affects your data.
Grievance contact
For any privacy concern or complaint, write to the Zaiphr Labs team at shyam@zaiphr.in.
Changes
We'll update this page when our practices change and revise the date above. Significant changes will be highlighted on the site.