Privacy Policy

1. Overview

AiMavrik helps businesses replace manual work with AI-powered operating systems. We provide professional services today — AI consulting and implementation, automation, n8n workflow engineering, Notion operating systems and website development — and are building AiMavrik Catalyst, an AI-native SaaS platform. This policy explains, in plain English, what personal data we handle, why, and the choices you have.

It is written to align with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, and to be compatible with GDPR concepts for visitors in the EEA and UK. It does not claim any formal certification.

2. Scope: services vs. platform

Professional Services

Our website, enquiries and delivery work. Here we typically act as a data controller for enquiry and relationship data, and as a data processor when we handle data inside systems we build or operate for you.

Catalyst Platform Services (forthcoming)

When AiMavrik Catalyst launches, customer account and workspace content will be processed largely on your instructions. For that content we act as a processor, and you remain the controller. Platform-specific terms and our DPA will apply.

3. Data we collect

• Business enquiries & lead forms: your name, work email, company, role, and the details you choose to share about your goals and current setup.
• Uploaded files & project materials: documents, data samples or credentials you provide so we can scope or deliver work.
• Customer accounts & Catalyst workspaces (forthcoming): account profile, authentication data, workspace configuration and the content you or your users place in the platform.
• Automation & system logs: operational logs from workflows and integrations we run for you.
• AI-generated outputs: content produced by AI features you use, and the prompts or inputs needed to generate them.
• Technical & usage data: IP address, device and browser type, pages viewed and referring source.
• Cookies & similar technologies: described in our Cookie Policy.

4. How we use AI

AiMavrik and the Catalyst platform may use one or more trusted AI providers to deliver services. Providers may change over time to improve quality, availability, security, or performance. We do not name a single provider here so that this policy remains accurate as our technology evolves.

We do not use the content inside customer systems or Catalyst workspaces to train AI models. AI features are subject to human oversight — see our AI Transparency and Responsible AI pages.

5. How we use data

• To respond to enquiries and communicate about work you have asked us to do.
• To deliver, operate, maintain and improve our services and, in future, the Catalyst platform.
• To keep systems secure, prevent abuse and diagnose problems.
• To meet legal, tax and accounting obligations.
• To understand website usage in aggregate and improve the experience.

We do not sell personal data.

6. Grounds for processing

Under the DPDP Act we process personal data with your consent or for legitimate uses permitted by law. For visitors in the EEA/UK, the equivalent GDPR lawful bases are consent, contract, legitimate interests, and legal obligation.

7. Cookies & analytics

We use a small number of cookies and Google Analytics (loaded via Google Tag Manager) to understand site usage. See our Cookie Policy and Cookie Preferences.

8. Sharing & processors

We share data only with trusted service providers who help us operate, and only for the purposes above. Each is bound by contract to protect it. The current list is published on our Sub-processor List. We may also disclose data where required by law or valid legal process. We do not sell personal data.

9. International transfers

AiMavrik is based in India and works with clients worldwide. Where personal data is transferred across borders, we rely on appropriate safeguards and process it consistent with the DPDP Act and applicable transfer mechanisms (such as standard contractual clauses where relevant).

10. Retention

We keep personal data only as long as needed for the purpose it was collected, or as required by law. Indicative periods are in our Data Retention Policy.

11. Security

We apply reasonable technical and organisational measures — including encryption in transit (HTTPS), access controls, least-privilege practices and logging — as described on our Security page.

12. Your rights

• Access a summary of the personal data we hold about you.
• Correct or complete inaccurate data.
• Erase data, where we are not required to keep it.
• Withdraw consent at any time.
• Nominate another person to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.
• Grievance redressal — raise a concern with us and, if unresolved, with the Data Protection Board of India. EEA/UK users may also contact their local supervisory authority.

To exercise any right, email hello@aimavrik.com. We may need to verify your identity before acting.

13. Consent & withdrawal

Where we rely on consent, you can withdraw it at any time by emailing hello@aimavrik.com or using available in-product controls. Withdrawing consent does not affect processing already carried out, and some data may be retained where the law requires.

14. Children’s data

Our services are intended for businesses and are not directed at children. We do not knowingly collect children’s data, and where the DPDP Act applies we will not process it without verifiable parental consent, nor undertake tracking or targeted advertising directed at children.

15. Grievance & contact

For any privacy question or to exercise a right, contact our Grievance Officer at hello@aimavrik.com. We aim to acknowledge grievances within 48 hours and to resolve them within the timelines required under applicable law.

16. Changes to this policy

We may update this policy as our services and the Catalyst platform evolve. Material changes will be reflected by the “Last updated” date above.