Privacy Policy

2. How we use it

Personal data collected through the Site is used only for the following purposes, and never repurposed beyond them without asking you first:

• Responding to the specific request you made — an audit, a call, a quote, a newsletter signup, or a tool result
• Internal record-keeping so we don't lose track of who asked for what
• Understanding aggregate Site usage to improve content, navigation and performance
• Meeting legal, accounting, tax or regulatory obligations where applicable
• Detecting and preventing spam, abuse, or fraudulent form submissions

We do not use your data for third-party advertising, profiling for marketing purposes beyond our own occasional newsletter, or any purpose you haven't reasonably anticipated from the form you filled in.

3. Legal basis for processing

Under the DPDP Act, our basis for processing is your explicit, informed consent — given each time you voluntarily submit a form or interact with a tool that asks for contact details. Consent is never bundled or pre-ticked: submitting the form is the consenting act, its purpose is stated next to the field, and you can withdraw consent at any time (see Section 8). For analytics, our basis is our legitimate interest in understanding and improving the Site, balanced against your privacy — you can opt out at any time (see Section 4).

4. Cookies & tracking technologies

We use a narrow set of cookies, set through Google Tag Manager and Google Analytics 4. None are used for third-party advertising or cross-site ad retargeting.

You can block or delete these cookies at any time through your browser's privacy settings, or a Google Analytics opt-out browser add-on, without losing the ability to use any part of the Site. We do not currently show a cookie-consent banner because we set no non-essential cookies before you interact with the Site beyond standard analytics, which most major browsers and privacy tools already let you block globally — if you'd prefer a full opt-in banner, using the browser-level or extension-level block above achieves the same outcome today.

5. Processors & third parties

We keep our vendor list deliberately short, and every processor below only ever receives the minimum data needed to do its job for us:

We do not use advertising networks, marketing-automation platforms, CRM tools with third-party data enrichment, or data brokers. We do not sell, rent or trade your personal data to anyone, for any reason, at any time. We disclose personal data to a third party outside the processors above only if compelled by a valid legal order from an Indian court, tribunal or government authority, or to protect our legal rights in the event of fraud or abuse of the Site.

If Reckona AI is ever party to a merger, acquisition, or sale of all or part of its business or assets, your personal data may be transferred to the successor entity as part of that transaction. Where this happens, the recipient remains bound by the commitments in this policy, and we will notify affected users by email before any data is transferred or used for a materially different purpose.

6. Cross-border transfers

Because our processors (Google, GitHub) operate global infrastructure, your data may be processed on servers located outside India. The DPDP Act permits this by default, except to countries the Central Government specifically restricts — we monitor for any such restriction and will change processors if one applies to Google or GitHub. If you are located outside India — including in Dubai, Australia or the Philippines, markets we actively serve — submitting a form on this Site means your data is transferred to and processed in India (and onward, by our processors, as described above) for the purposes in Section 2.

7. How long we keep it

You can ask for earlier deletion at any time — see Section 8.

8. Your rights under the DPDP Act, 2023

As a Data Principal, you have the right to:

• Access — request a summary of the personal data we hold about you and how it's being processed
• Correction & completion — have inaccurate or incomplete data corrected or updated
• Erasure — request deletion of your data once it's no longer needed for the purpose it was collected, or once you withdraw consent
• Withdraw consent — at any time, as easily as you gave it; withdrawal doesn't affect processing already carried out lawfully before it
• Nominate — name another individual to exercise these rights on your behalf in the event of your death or incapacity
• Grievance redressal — raise a complaint with us directly, and escalate to the Data Protection Board of India if it isn't resolved to your satisfaction (see Sections 12 & 14)

To exercise any of these, write to reckonaai@gmail.com with the subject line "Data request", telling us which right you're exercising and enough detail to locate your data (e.g. the email or phone number you submitted). We respond within 7 working days, and complete verified requests within 30 days, at no charge — except where a request is manifestly unfounded or excessive, repeated, in which case we may charge a reasonable fee or decline, as the DPDP Act permits.

9. Security

We apply reasonable technical and organisational safeguards proportionate to the data we actually hold:

• All data in transit between your browser and our forms is encrypted via HTTPS/TLS
• Stored submissions live in an access-controlled Google Workspace account, restricted to the people who need it to run the business — not a public sheet, not a shared drive
• We never ask for passwords, government ID numbers, card details or bank account numbers through this Site, and you should never send us any of those through a form field
• Access credentials are not shared beyond the founding team, and are reviewed when anyone with access leaves the business

No method of transmission or storage is 100% secure, and we can't guarantee absolute security — but the scope of what we hold is deliberately narrow, and we treat it accordingly.

10. Automated decision-making

Our free tools (AI Visibility Score, ROI Calculator, AI Readiness Report and similar) run rule-based calculations on the inputs you give them — they are not AI models making judgments about you, and their output is a directional estimate, not a decision that produces any legal or similarly significant effect on you. We do not use your data for automated profiling that affects your access to services, pricing, or opportunities. Every proposal, quote and audit result you receive from us is reviewed by a person before it reaches you.

11. Third-party links

This Site links out to third-party destinations — client websites in our portfolio, WhatsApp, LinkedIn, and sources cited in our guides and resources. Once you leave reckonaai.com, that destination's own privacy policy applies; we have no control over and no responsibility for how third-party sites handle your data.

12. Breach notification

If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act, without undue delay, describing what happened, what data was involved, and the steps we're taking in response.

13. Children's data

This Site is intended for businesses and working professionals. We don't knowingly collect data from anyone under 18, and we don't offer services directed at minors. If you believe a minor has submitted data to us, contact us at the email below and we'll delete it without requiring you to justify the request further.

14. Grievance redressal

If you believe we've mishandled your data, write to reckonaai@gmail.com with the subject line "Grievance" describing the issue. We acknowledge every grievance within 48 hours and aim to resolve it within 30 days. If you remain unsatisfied with our response, you may escalate to the Data Protection Board of India, established under the DPDP Act.

15. Changes to this policy

If this policy changes, we'll update the "Last updated" date above. Material changes affecting how we use data we've already collected will be notified by email to anyone the change applies to, in addition to the update here — not just posted silently.