Privacy Policy

Last updated: February 2025

1. Introduction

Yaara Data India Private Limited ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including AI product development, workforce AI enablement, AI strategy consulting, and data annotation services.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use our services.

2. Information We Collect

Personal Information: When you contact us, request a consultation, or engage our services, we may collect your name, email address, phone number, company name, job title, and any other information you voluntarily provide.

Business Information: In the course of providing our services, clients may share business data, project specifications, and related materials necessary for service delivery. Such data is processed solely for the stated purpose of the engagement and is not used to train shared or general-purpose AI models without your explicit written consent.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our services
  • To respond to your enquiries and fulfil your requests
  • To communicate with you about our services, updates, and promotions
  • To comply with legal obligations and enforce our terms

4. AI-Specific Data Handling

As a generative AI company, we handle data with additional care. The following disclosures apply to data processed through our AI products and services:

  • Inputs & Prompts: User inputs, prompts, and queries submitted to our AI products are not used for model training or fine-tuning unless you provide explicit, informed consent under a separate agreement.
  • AI-Generated Outputs: Outputs generated by our AI systems are stored only for the duration necessary to deliver the service, after which they are deleted in accordance with our data retention schedule or the terms of your service agreement.
  • Third-Party Model Providers: Where our services utilise third-party AI model providers, data shared with those providers is governed by data processing agreements that enforce confidentiality, purpose limitation, and prohibition of use for model training. We do not permit third-party providers to retain your data beyond what is necessary for processing your request.

5. Data Processing Roles

Data Controller: When we collect personal information directly from you (e.g., through our website or contact forms), we act as the data controller and determine the purposes and means of processing.

Data Processor: When enterprise clients engage us to process data on their behalf for AI service delivery, we act as a data processor. In such cases, processing is carried out strictly in accordance with the client's instructions and governed by a Data Processing Agreement (DPA) that defines the scope, purpose, duration, and security obligations of the processing.

6. Disclosure of Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist us in operating our website, conducting business, or providing services to you, subject to confidentiality obligations.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction.
  • With Your Consent: We may share your information for any other purpose with your explicit consent.

7. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure servers, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable laws, you have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of any inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to certain exceptions.
  • Objection: Object to the processing of your personal information in certain circumstances.
  • Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
  • Automated Decision-Making: Where our AI products make or materially influence decisions that affect you, you have the right to be informed about the logic involved and to contest such decisions.

To exercise any of these rights, please contact our Grievance Officer using the details provided below. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (as applicable). Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in New Delhi, India.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address your concerns regarding data processing:

Grievance Officer
Yaara Data India Private Limited
Contact: hello@neustack.ai

The Grievance Officer shall acknowledge your complaint within 48 hours and resolve it within 30 days from the date of receipt, in accordance with applicable law.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Yaara Data India Private Limited
Contact: hello@neustack.ai