Privacy Policy

TSKINDIA TECHNOLOGY LLP ("TSKINDIA", "we", "us", "our") is a software development company that builds SaaS and AI products. This Privacy Policy explains what personal data we collect when you use our website https://tsktechnologies.in and our SaaS and AI products (together, the "Services"), why we collect it, and the choices you have.

The Services are operated by TSKINDIA TECHNOLOGY LLP, a limited liability partnership registered in India (LLPIN: ACY-9086), with its registered office at Shop No. 108, 109, S.B.J Complex, Vedvyas Pur, Railway Road, Meerut, Uttar Pradesh 250002, India. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described here.

By creating an account or using the Services, you confirm that you have read this policy. Where we rely on your consent, we will ask for it clearly and separately, and you can withdraw it at any time.

Scope. This policy covers our website, our SaaS and AI products, and related communications. It does not cover third-party websites or services linked from the Services. If we build a product for a business customer and process data on its behalf, that customer's own privacy policy governs its end users, and we act as its Data Processor.

Applicable law. We process personal data in line with Indian law, including the DPDP Act, 2023 and the rules made under it, and the Information Technology Act, 2000. Where users outside India are protected by their local laws (for example, the EU/UK GDPR), we honour the rights those laws give them.

We collect only what we need to run the Services. We do not collect payment card details, precise GPS location, or sensitive data such as health or biometric information.

Content you submit to our SaaS and AI products. When you use our products, you may upload files, enter text, or send prompts to AI features. The AI may generate responses ("outputs") from these. We process your inputs and outputs only to provide the feature you asked for, keep it secure, and fix problems. Please avoid entering sensitive personal data, or other people's data, into AI features unless you are allowed to.

Business customers. If your organisation gives you access to one of our products, your organisation may provide your name, work email, and role to set up your account.

If you sign in through a third-party account (for example, Google), we receive the basic profile details that service shares with us, usually your name, email, and profile photo.

We use personal data only for clear, specific purposes, and we do not sell it.

How we use AI inputs and outputs. We do not use your inputs or outputs to train or improve our own or third-party AI models unless you opt in. AI features may be powered by third-party model providers (see Section 5). They process your content only to return a response to us, under contract.

Automated decisions. Our products do not make decisions with legal or similarly significant effects about you based solely on automated processing. AI outputs can be inaccurate, so please review them before relying on them.

Users in the EU/UK: our legal bases under the GDPR are consent, performance of a contract, legal obligation, and our legitimate interests (running a secure, working service).

If we want to use your data for a new purpose not listed here, we will tell you first and, where required, ask for your consent.

Cookies are small text files stored on your device. We use them to keep you signed in, remember your preferences, and understand how the Services are used.

Analytics providers. We use third-party web analytics services. These providers process usage and device data on our behalf. We configure them to limit data collection where possible (for example, IP anonymisation).

Your choices. When you first visit, a cookie banner lets you accept or reject non-essential cookies. You can change your choice at any time via the Cookie Settings link in the website footer. You can also block or delete cookies in your browser settings, though some features may stop working.

We do not use cookies for third-party advertising or to track you across other websites.

We do not sell or rent your personal data. We share it only with the categories of parties below, and only as much as each needs. The specific providers we use may change over time; a current list is available on request at the email in Section 8.

Every service provider that processes personal data for us acts as a Data Processor. They are bound by contract to use it only on our instructions and to keep it secure.

How long we keep data. We keep personal data only while it is needed for the purposes above.

If you do not use your account for 3 years, we may delete it and its data. We will email you at least 30 days before we do.

How we protect data. We use reasonable security safeguards, including HTTPS/TLS encryption in transit, encryption at rest, hashed passwords, role-based access controls, regular backups, and access logging. Only authorised staff who need the data can access it. No system is completely secure, so we cannot guarantee absolute security.

Data breaches. If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as required by the DPDP Act, and report cyber incidents to CERT-In within the required time. We will tell you what happened, what data was affected, and what you can do.

International transfers. We are based in India, and some of our providers store or process data in other countries, where our service providers operate. We transfer data only to countries not restricted by the Government of India under the DPDP Act. For transfers of data from the EU/UK, we use safeguards such as Standard Contractual Clauses.

You control your personal data. Under the DPDP Act, you have the rights below, and users in the EU/UK have equivalent rights under the GDPR.

To use any of these rights, email info@tsktechnologies.in or use the settings in your account. We may need to verify your identity first. We will respond within 30 days, or sooner if the law requires.

If you are not satisfied with our response, you can complain to the Data Protection Board of India. Users in the EU/UK can also complain to their local data protection authority.

The Services are not meant for anyone under 18. We do not knowingly collect personal data from children without verifiable consent from a parent or lawful guardian, as the DPDP Act requires. We do not track children or target advertising at them. If you believe a child has given us data without such consent, contact us and we will delete it.

For questions, requests or complaints about this policy or your data, contact our Grievance Officer:

We may update this policy when our Services or the law change. We will post the new version on this page with a new "Last updated" date. For significant changes, we will also notify you by email or in the product before they take effect.