Privacy Policy

Your trust is the foundation of everything we build.

BrainVault Technologies Pvt. Ltd. is committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, why we collect it, how we use it, and the rights you have over your data — in plain, straightforward language.

This policy applies when you visit our website at www.brainvaulttech.com, submit an enquiry through our contact form, engage with us as a client or partner, or interact with any of our products and services. Last updated: May 28, 2026.

Important Notice

Apps We Build Do Not Store Your Data

BrainVault Technologies designs and delivers custom software applications for clients across industries. As a technology partner, our role is to build — not to hold your data. Here is what that means in practice:

  • No user data is stored by BrainVault. The applications we develop do not route, store, or transmit user data through BrainVault's systems at any point.
  • Your client's system is the backend. Every app we build uses the client's own infrastructure as the backend. All data generated, processed, or stored by the app lives entirely within the client's environment.
  • We do not collect personal or business data from app users. BrainVault Technologies has no access to the personal or business data of end-users who interact with applications we have developed for our clients.
  • Data ownership stays with the client. All data flowing through an application we build belongs entirely to the client organisation and is governed by their own privacy policy and data practices.

1. Information We Collect

We collect only the information necessary to respond to your enquiries and deliver our services. We do not collect sensitive personal data such as health records, financial credentials, or political opinions through our website.

Identity & Contact Data

Your name, email address, phone number, and country of residence — provided when you fill out our contact or enquiry form.

Communication Data

Messages, project descriptions, and requirements you share with us through our contact form or directly by email.

Technical & Usage Data

IP address, browser type, device information, pages visited, and time spent on site — collected automatically via server logs and cookies when you browse our website.

Location Data

General geographic region inferred from your IP address or selected by you in our contact form, used to route your enquiry to the relevant regional team member.

2. How We Use Your Information

The information we collect is used strictly for legitimate business purposes. We do not use your data for automated decision-making or profiling.

  • Respond to your enquiries and connect you with the right regional team member
  • Deliver and continuously improve our AI development services and products
  • Communicate project progress, service updates, and relevant information
  • Send occasional industry insights or newsletters — only with your consent
  • Comply with applicable legal obligations under Indian law, including the DPDP Act 2023
  • Detect and address technical issues, security threats, or fraudulent activity
  • Analyse website usage patterns to improve content and user experience

Lawful basis: We process personal data on the basis of your consent where explicitly given, contractual necessity to deliver agreed services, our legitimate business interests, and legal compliance obligations under applicable law.

3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to any third party. We share your data only in the limited circumstances described below.

Internal Team Members

Contact enquiries are routed to the relevant regional representative within BrainVault — covering India, USA, Canada, and Australia — so the appropriate team member can follow up promptly.

Trusted Service Providers

We engage third-party providers for services such as email delivery and web hosting. These providers process data on our behalf under strict confidentiality agreements and are prohibited from using your data for their own purposes.

Legal & Regulatory Requirements

We may disclose information when required by law, court order, or government authority, or to protect the rights, property, or safety of BrainVault, our clients, or the public.

Business Transfers

In the event of a merger, acquisition, or business restructuring, your data may be transferred as part of business assets — subject to the same privacy protections described in this policy.

4. Cookies & Tracking Technologies

Our website uses cookies to enhance your browsing experience, understand how visitors use our site, and remember your preferences. A cookie is a small text file stored on your device when you visit our site.

Essential Cookies

Required for core website functionality — including navigation and form submission. These cannot be disabled as the website cannot function without them. Duration: session only.

Analytics Cookies

Help us understand how visitors interact with our website — pages viewed, time on site, and referral sources — so we can improve content and structure. Duration: up to 2 years.

Functional Cookies

Remember your preferences, such as language or region selection, to personalise your experience on return visits. Duration: up to 1 year.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website. Refer to your browser's help documentation for instructions.

5. Data Security

Protecting your personal information is a responsibility we take seriously. We implement a range of technical and organisational measures to keep your data safe.

  • Secure HTTPS (TLS/SSL) encryption for all data transmitted through our website
  • Restricted access controls — only authorised BrainVault personnel can access personal data
  • Regular security reviews and vulnerability assessments of our web infrastructure
  • Secure email protocols and encrypted communication channels
  • Server-side input validation and sanitisation to prevent injection attacks

While we take every precaution, no method of transmission over the internet is 100% secure. If you suspect any unauthorised access to your data, please contact us immediately at sales@brainvaulttech.com.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

Contact Enquiries

Retained for up to 3 years to enable follow-up communications and relationship management.

Client Project Data

Retained for the duration of the engagement plus up to 5 years for legal and contractual compliance.

Marketing Communications

Retained until you withdraw consent or opt out of communications.

Website Usage Logs

Anonymised or deleted within 90 days of collection.

Financial & Contractual Records

Retained for a minimum of 7 years as required under Indian tax and corporate law.

7. Your Rights

Under India's Digital Personal Data Protection Act (DPDP Act, 2023) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights regarding your personal data.

Right to Access

Request a copy of the personal data we hold about you.

Right to Correction

Ask us to update or correct inaccurate or incomplete personal information.

Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

Right to Restrict Processing

Ask us to pause processing of your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, commonly used, machine-readable format.

Right to Withdraw Consent

Withdraw consent for marketing communications at any time, without affecting the lawfulness of prior processing.

Right to Lodge a Complaint

File a complaint with the relevant data protection authority in your jurisdiction if you believe your data has been mishandled.

To exercise any of these rights, contact us at sales@brainvaulttech.com. We will respond within 30 days. Identity verification may be required before we fulfil your request.

8. Third-Party Links & Services

Our website may contain links to external websites, social media platforms, and third-party services. These are not governed by this Privacy Policy — we encourage you to review their own privacy policies before engaging with them.

Our website also loads third-party resources including Google Fonts (Sora typeface), Font Awesome icon assets, and LinkedIn social links. Google's and LinkedIn's respective privacy policies apply to any data transferred to their servers when these resources load.

9. Children's Privacy

Our website and services are designed for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us without parental consent, please contact us at sales@brainvaulttech.com and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable laws. When changes are made, the "Last Updated" date at the top of this page will be revised. Your continued use of our website after any update constitutes acceptance of the revised policy.

For material changes, we may provide a more prominent notice or notify you directly by email where we hold your contact details.