Privacy Policy | CinfyAI

Compileinfy Technology Solutions Private Limited (CIN: U72200AP2022PTC121508), ("Company", "we", "us", "our"), operates the website www.cinfy.ai and the CinfyAI platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect personal data of visitors to our website and users of the Service ("you", "your"), in accordance with the Information Technology Act, 2000 andthe Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By accessing the website or using the Service, you consent to the collection and use of information in accordance with this Policy.

1. Definitions

Personal Data - means any data about an individual who is identifiable by or in relation to such data

SPDI – Sensitive personal data or information, includes passwords, bank account information, credit/ debit card details, past and present health records, biometric data, etc.

Customers - the entity or individual accessing or using www.cinfy.ai or the CinfyAI platform.

Chatbot and AI interaction data- information you input into the AI chatbot assistant or other AI Features (including questions, prompts, and instructions), and the outputs generated in response, which may include information drawn from your connected integrations to generate contextual responses.

2. AI Features and Model Training

Customer Data submitted to the AI chatbot is used, by default and in redacted/de-identified form, to analyse and improve the Service and its safety mechanisms, and is not used to train or fine-tune the underlying third-party AI models. This may be turned off in account settings. Pilot Program participants are subject to separate terms on data use and opt-out timing, communicated by email or in their service agreement, which shall prevail for the duration of the pilot.

3. Information We Collect

We may collect the following categories of information:

Account and contact information: company legal name, company website, industry, company size, industry, contact person name, business email address, phone number, designation, systems to be integrated by CinfyAI and password, provided when you register for or request a demo of the Service.
Billing information: billing name, address, and payment details, processed via our third-party payment gateway. We do not store full card or bank credentials on our own servers.
Integration and workspace data: information you authorise us to access from connected third-party tools (including Google Docs, Gmail, Google Calendar, Teams, SharePoint, OneDrive, Dynamics 365, HubSpot, ServiceNow, your website and database, JIRA, GitHub, Confluence, Slack, Microsoft Teams, Salesforce, Outlook, and Zoho), such as project, task, sprint, ticket, and workflow metadata, to the extent needed to provide role-based dashboards and reporting.
Gmail: when you connect Gmail, we use the Gmail integration in read-only mode to read email messages you authorise (for example, to list, search, and summarise mail inside the Service). We do not send, delete, or modify messages through this integration.
Google Calendar: when you connect Google Calendar, we access calendar data you authorise, such as events, meetings, calendars, and free/busy information, so the Service can show and answer questions about your schedule.
Usage data: log data, device and browser information, IP address, pages visited, internal analytics within the platform and interactions with the website and Service, collected automatically, including through cookies, Google Analytics and similar tools.
Communications: information you provide when you contact us for support, sales enquiries, or through the "Request Demo" / "Schedule a Demo" forms on the website, including full name, work email, company and designation.

4. How We Use Information

We use the information collected for the following purposes:

To provide, operate, maintain, and improve the Service, including generating role-based dashboards and live process tracking from connected tools.
To create and manage user accounts, and to authenticate access through single sign-on (including Microsoft Entra ID) where enabled.
To process payments and manage billing .
To respond to demo requests, support queries, and other communications.
To send administrative communications, service updates, and, where you have consented, marketing communications. You may opt out of marketing communications at any time.
To monitor, analyse, and improve website and Service performance, including through analytics tools such as Google Analytics.
To detect, investigate, and prevent fraud, security incidents, and misuse of the Service.
To comply with applicable law, regulation, or lawful government request.

5. How We Collect Information

We collect information from and about you in the following ways:

(a) Information you provide voluntarily

We collect information that you knowingly and voluntarily provide to us, including when you register for an account, request a demo, subscribe to the Service, communicate with our sales or support teams, connect a third-party integration, or otherwise fill out a form on our website or within the Service. This includes account and contact details, billing information, and any information you choose to submit through our forms or in correspondence with us.

(b) Information collected automatically

When you access our website or use the Service, certain information is collected automatically through your device and browser, including via cookies, web beacons, log files, and similar tracking technologies (including Google Analytics). This includes your IP address, browser type and version, device identifiers, operating system, referring/exit pages, date and time stamps, pages viewed, links clicked, and other actions taken on the website or within the Service. This information is collected passively, without requiring you to actively submit it, and is used for the purposes described in this Policy, including analytics, security, and improving the Service. Details of the specific cookies used, and how you can manage your preferences, are set out in Section 5 (Cookies and Tracking Technologies) below.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies, including Google Analytics, to operate the website, remember preferences, and analyse traffic. Categories of cookies used include:

Strictly necessary cookies, required for the website to function.
Analytics cookies (e.g., Google Analytics), used to understand how visitors use the website.

You can control or disable cookies through your browser settings and through the consent banner presented on our website. Disabling certain cookies may affect website functionality. For more information on how Google uses data collected through Analytics, please refer to Google's Privacy Policy.

We may ask you for mandatory information. If you do not provide it, we may not be able to carry out certain processes. This may impact our ability to provide Services to you.

We may share your Personal Data as follows:

With our payment gateway to process payments.
With cloud hosting infrastructure providers, currently Amazon Web Services (AWS), region: AP-South-1 (Mumbai), to host and operate the Service.
With analytics providers, including Google Analytics, to understand website and Service usage.
With limited service providers engaged to support the Service under confidentiality and data protection obligations no less protective than this Policy.
With regulators, law enforcement, or other third parties where required by law, legal process, or to protect our rights, property, or safety, or that of our users.
In connection with a merger, acquisition, financing, or sale of assets, subject to equivalent protections for your data.
With our third-party AI service provider(s), currently Anthropic and Amazon, to process chatbot inputs and generate AI Feature outputs. Such providers process this data solely to provide the underlying AI functionality and are subject to contractual confidentiality and data protection obligations.

We do not access, use, or disclose customer data obtained through connected integrations (including Gmail, Google Calendar, JIRA, GitHub, Slack, and similar tools) for any purpose other than providing the Service to the relevant customer, except as required by law or authorised by that customer. Gmail data is used to read mail you authorise. Google Calendar data is used to read calendar events and availability you authorise. We do not sell this data, and we do not use it to train third-party AI models.

8. Data Storage and Security

Data is hosted on Amazon Web Services (AWS) infrastructure (region: AP-South-1, Mumbai). We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Data, including access controls, encryption in transit, role-based permissions, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service supports multi-tenant data isolation, meaning data belonging to one customer organisation is logically separated from another.

9. Data Retention

We retain personal data for as long as necessary to provide the Service and for legitimate business purposes, including complying with legal, accounting, or reporting obligations. After this timeframe, we will take the necessary steps to delete or anonymise your Personal Data.

Chatbot conversation history and AI Feature inputs/outputs are retained duration of active subscription and 06 months after end of subscription, after which they are deleted or anonymised, unless a longer period is required for legal, security, or dispute-resolution purposes.

10. Your Rights

Subject to applicable law, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, please contact us at [email protected].

11. Children's Privacy

The Service is intended for business use by organisations and their personnel and individual professionals, and is not directed at, or knowingly used by, individuals under the age of 18. We do not knowingly collect personal data from children.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the details of our Grievance Officer are as follows:

Name: Vidyadhari Ramakuri
Email: [email protected]

13. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Effective Date" and will be effective as soon as it is accessible. We encourage you to review this Policy periodically.

14. Your Obligations

You are responsible for the accuracy and currency of the information you provide to us. You agree to:

Provide true, accurate, current, and complete information when registering for or using the Service; and
Promptly update such information, including account, contact, and billing details, if it changes at any time during your use of the Service.

If we have reasonable grounds to believe that any information provided by you is untrue, inaccurate, outdated, or incomplete, or that you have otherwise breached these obligations, we reserve the right, at our discretion and without prior notice, to suspend or terminate your account and refuse any current or future use of the Service (or any part of it). Suspension or termination under this clause shall be without prejudice to any other rights or remedies available to us under these Terms or applicable law, and shall not entitle you to any refund of fees already paid, except as expressly provided under our Cancellation & Refund Policy.

15. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].