- We collect only what we need to respond to enquiries, consider applications, and run this website.
- We never sell personal data or use it for targeted advertising.
- Optional analytics runs only with your consent, which you can withdraw at any time.
- You can access, correct, or delete your data by emailing contact@infynaxlabs.com.
1. Who we are
This website is operated by Infynax Labs Private Limited (“Infynax Labs”, “we”, “us”, “our”), a company incorporated in India and recognised as a startup by the Department for Promotion of Industry and Internal Trade (certificate DIPP251966).
For the personal data described in this policy, Infynax Labs is the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the controller under the EU and UK General Data Protection Regulation (“GDPR”), where those laws apply.
2. Scope of this policy
This policy explains how we collect, use, share, and protect personal data when you visit www.infynaxlabs.com, contact us, apply for a role, or otherwise interact with us as a prospective client, partner, or candidate.
It does not cover:
- Our products, such as Engage (engage.infynaxlabs.com), which have their own terms and privacy notices.
- Client data we process on a client’s behalf while delivering software, AI, cloud, or platform services. In those engagements we act as a Data Processor and handle data only under the client’s instructions and our written agreement with them, including a data processing agreement where required.
- Third-party websites linked from our site.
3. Personal data we collect
Information you give us
- Enquiries: name, work email address, company, area of interest, project details, and your consent confirmation when you submit the contact form or email us.
- Job applications: your CV, contact details, employment and education history, portfolio links, and any other information you choose to send.
- Business communications: information exchanged in meetings, calls, and emails with prospective or existing clients and partners.
Information collected automatically
- Technical and log data: IP address, browser and device type, pages requested, referring page, and date and time of access. Our hosting provider records this to deliver the website securely and to detect abuse.
- Cookies and similar technologies: as described in our Cookie Policy. Optional analytics runs only if you consent.
Information from other sources
Publicly available professional information (for example, a company website or professional networking profile) and referrals, where permitted by law and relevant to a business relationship or role.
Please do not send us sensitive personal data (such as financial account details, passwords, health information, or government identity numbers) or confidential business information through this website.
4. How we use personal data and our legal grounds
We use personal data only for clear, specified purposes and process only what is necessary for those purposes.
| Purpose | Data used | Legal ground |
|---|---|---|
| Respond to enquiries, prepare proposals, and discuss potential engagements | Enquiry and contact details | Your consent (DPDP Act); steps before entering a contract or legitimate interests (GDPR) |
| Manage and deliver client and partner relationships | Business contact details and communications | Performance of a contract; legitimate uses and legitimate interests |
| Assess job applications and communicate with candidates | Application details | Your consent; steps before entering an employment contract |
| Operate, secure, and troubleshoot the website | Technical and log data, necessary cookies | Legitimate uses under the DPDP Act; legitimate interests (GDPR) |
| Understand website usage to improve it | Analytics data (only if enabled) | Your consent, which you can withdraw at any time |
| Send business updates you have asked for | Name and email | Your consent; you can unsubscribe at any time |
| Comply with law, enforce our terms, and protect our rights | Relevant records | Legal obligation; legitimate uses and legitimate interests |
We do not sell personal data, use it for targeted advertising, or make decisions about you based solely on automated processing that produce legal or similarly significant effects.
6. International transfers
Some of our service providers process data outside India, for example in the United States or the European Union. We transfer personal data abroad only as permitted by the DPDP Act and any restrictions notified by the Government of India. For data subject to the GDPR, we rely on appropriate safeguards such as adequacy decisions or the European Commission’s Standard Contractual Clauses.
7. How long we keep personal data
We keep personal data only as long as needed for the purpose it was collected for, or as required by law, and then delete or anonymise it:
- Enquiries that do not lead to an engagement: up to 24 months after our last contact.
- Client and partner records: for the duration of the relationship and afterwards as required for legal, tax, and accounting purposes.
- Job applications: up to 12 months after the recruitment process ends, unless you ask us to delete them sooner or agree that we keep them longer for future roles.
- Server logs: for a limited period needed for security and troubleshooting.
When you withdraw consent, we stop processing the relevant data and delete it unless we must keep it to comply with law.
8. How we protect personal data
We use reasonable security practices and procedures, including encryption in transit (HTTPS), access controls limited to people who need the data, multi-factor authentication on business systems, and reputable service providers with recognised security certifications.
No method of transmission or storage is completely secure. If a personal data breach occurs, we will act promptly to contain it and will notify affected individuals and the Data Protection Board of India, and any other regulator, as required by law.
9. Your rights
Under India’s DPDP Act
- Obtain a summary of the personal data we process about you and the processing activities.
- Request correction, completion, updating, or erasure of your personal data.
- Withdraw consent at any time, as easily as you gave it. This does not affect processing already carried out.
- Have grievances addressed through our Grievance Officer, and then approach the Data Protection Board of India if you are not satisfied.
- Nominate another person to exercise your rights in the event of death or incapacity.
If you are in the EU or UK
You also have the rights of access, rectification, erasure, restriction, data portability, and objection (including to processing based on legitimate interests). You may lodge a complaint with your local data protection authority.
If you are in the United States
We do not sell personal information or share it for cross-context behavioural advertising. Depending on your state, you may request access to, correction of, or deletion of your personal information.
How to exercise your rights
Email contact@infynaxlabs.com with the subject “Data request”. We may need to verify your identity before acting. We respond within the timelines required by applicable law.
10. Children
This website and our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
12. Third-party links
Our website links to other websites, such as our products and social profiles. Their privacy practices are governed by their own policies, and we encourage you to read them.
13. Changes to this policy
We may update this policy as our practices or the law change. We will post the updated version on this page with a new “Last updated” date and, for significant changes, provide a more prominent notice.
14. Contact and Grievance Officer
For questions, requests, or complaints about this policy or your personal data, contact us. We aim to acknowledge requests within 7 days and to resolve grievances within 30 days, or sooner where the law requires.