Privacy Policy

1. Introduction

This Privacy Policy explains how Artek Minds Consulting (“Artek Minds”, “we”, “us” or “our”) collects, uses, stores, discloses and protects personal data when you visit our website, use the DataChord platform (“Service”), or otherwise interact with us.

We are committed to handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 together with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Data Fiduciary & Contact Details

For the purposes of the DPDP Act, Artek Minds Consulting is the Data Fiduciary responsible for your personal data. You may contact us regarding this policy or your data at:

3. Personal Data We Collect

We collect the following categories of personal data:

• Information you provide— name, work email, company name, job title, and the contents of any enquiry or demo request you submit.
• Account & usage data— login credentials, workspace settings, and records of how you use the Service.
• Customer data— schemas, mappings, and datasets you upload or connect to the Service. We process this strictly to provide the Service and do not use it for any other purpose.
• Technical data— IP address, browser type, device information, and cookies or similar technologies.

4. How We Use Your Data

We process personal data for the following purposes:

• To provide, operate, maintain and improve the Service;
• To respond to your enquiries, demo requests and support tickets;
• To send service-related and, where you have consented, marketing communications;
• To ensure the security, integrity and availability of the Service;
• To comply with our legal and regulatory obligations.

We process your data on the basis of your consent and/or for the legitimate uses permitted under the DPDP Act, such as performing a contract with you and complying with the law.

5. If You Are Outside India

DataChord is operated from India, but we serve customers worldwide. Where the law of your region gives you additional protections, we honour them as set out below. If a regional law and this policy differ, the stronger protection applies to you.

Controller and processor. For visitors to our website and users of our accounts, we decide how and why personal data is used, so we act as the controller (data fiduciary). For data your organisation uploads or connects to the Service, your organisation is the controller and we process it only on its instructions under our customer agreement. Questions about that data should go to your organisation first.

6. Cookies

We use essential cookies to operate the website and optional analytics cookies to understand how it is used. You can control cookies through your browser settings; disabling essential cookies may affect site functionality.

7. Disclosure of Data

We do not sell your personal data. We may share it with:

• Service providers (Data Processors)— trusted vendors who host, support, or help us deliver the Service, under contractual confidentiality and security obligations.
• Legal & regulatory authorities— where required by applicable law, court order, or to protect our legal rights.
• Business transfers— in connection with a merger, acquisition, or sale of assets, subject to this policy.

8. Data Storage, Transfer & Retention

Personal data may be stored and processed in India and, where necessary, in other jurisdictions through our service providers. Any cross-border transfer is carried out in accordance with the DPDP Act and subject to appropriate safeguards.

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy or as required by law, after which it is securely deleted or anonymised.

9. International Transfers

Where cross-border processing occurs via vendors or cloud services, appropriate safeguards are used consistent with published best practices and contractual protections.

10. Data Security

We implement reasonable security practices and procedures, including encryption in transit, access controls, and tenant isolation, to protect personal data against unauthorised access, disclosure, alteration, or destruction. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to applicable law, as a Data Principal under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you;
• Request correction, completion, updating, or erasure of your personal data;
• Withdraw consent previously given for processing;
• Nominate another individual to exercise your rights in the event of death or incapacity;
• Grievance redressal through the contact details below.

To exercise any of these rights, contact us at [email protected]. We will respond within the timelines prescribed by applicable law.

12. Children’s Data

The Service is intended for business use and is not directed at children. We do not knowingly process the personal data of children (individuals under 18 years of age) without verifiable parental or guardian consent as required under the DPDP Act.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the DPDP Act, you may direct any grievance regarding the processing of your personal data to our Grievance Officer:

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or our website, and the “Last updated” date above will be revised. Your continued use of the Service after such changes constitutes acceptance of the updated policy.