Legal
Privacy
This is our current policy and we follow it. It is under periodic legal review; if anything here is unclear or looks wrong to you, write to hello@digidubs.com and we will answer plainly.
Who we are
DigiDubs IT Solutions Pvt. Ltd. trades as DigiDubs and operates digidubs.com. We build AI automation, marketing and software for businesses, mostly in India. Under the Digital Personal Data Protection Act 2023 we are the data fiduciary for the personal data described here, which means we decide why it is collected and what happens to it.
Write to us about anything on this page at hello@digidubs.com, or by post at C-2, Sector-G, Aliganj, Lucknow, Uttar Pradesh 226024, India.
What this notice covers
This notice covers digidubs.com and the three demo channels we run from it: the AI chat widget on the site, the WhatsApp number we publish, and the phone line an AI answers.
It does not cover the work we do for clients under a signed contract. When we process data on a client’s behalf — their customers’ enquiries, their CRM records — they are the fiduciary and we are the processor, and that arrangement is set out in the contract between us, not here.
What we collect, and why
Enquiry forms. The contact, audit, demo, waitlist and newsletter forms collect what their fields ask for: your name, company, email address, WhatsApp number, and whatever you write in the message box. We collect it in order to answer you. The page you submitted from is stored alongside it, so we know what you were reading when you got in touch.
WhatsApp. If you message the number we publish, WhatsApp delivers that conversation to us and we keep it. Meta processes it under its own terms as the platform operator.
The AI chat widget. What you type into the widget is sent to the model that answers it, and the conversation is retained so we can improve the answers and pick up a handover to a person. Do not type anything into a demo that you would not want kept — it is a demonstration, not a confidential channel.
The AI phone line. Calls to that number are answered by an automated system and may be recorded and transcribed. The line says it is an AI at the start of the call.
Analytics. If you agree to analytics, we record which pages were visited, in what order, and which buttons were used. We do not collect your name or contact details that way and we do not try to identify you from it.
Server logs. Our hosting provider records the ordinary technical detail of a request — an IP address, a timestamp, the page asked for. That is also what our rate limiting counts, so that one source cannot flood the forms.
The basis we rely on
Where you fill in a form or message us, we use what you sent on the basis of the consent you gave by sending it, for the purpose the form states: replying to you. Where you agree to analytics, that is a separate consent and it is asked separately.
The Act also permits certain legitimate uses without a separate consent — keeping our own business records, meeting a legal obligation, and establishing or defending a legal claim — and we rely on those where they apply.
We do not sell personal data and we do not share it for anyone else’s marketing.
Who else sees it
We use a small number of service providers, and each sees only what its job requires:
Hosting and content delivery, which serves the site and holds our database and uploaded media. Email delivery, which sends the confirmation you receive and the notification we receive. WhatsApp Business, operated by Meta, for conversations you start there. Cloudflare Turnstile, which checks that a form submission came from a person rather than a script. Google Analytics, and only if you agreed to analytics. The provider of the model behind the chat widget and the phone line.
We give your data to no one else unless you ask us to, or unless a law or a court requires it.
Where it is stored, and transfers out of India
Some of those providers store or process data outside India. Where that happens we rely on the provider’s own contractual protections and on the transfer being permitted under the DPDP Act, which allows transfer to any country the Central Government has not restricted.
If you would rather your enquiry did not leave India, say so when you contact us and we will handle it by email and phone only.
How long we keep it
Enquiries and the conversations attached to them are kept while there is a live business relationship or a realistic prospect of one, and are reviewed after that. Where the law requires us to retain records — tax and accounting records in particular — we keep them for as long as it requires.
Newsletter and waitlist entries are kept until you unsubscribe or ask to be removed. Analytics records are kept for no longer than the retention period set on the analytics account.
When we no longer need something and no law requires us to hold it, we delete it.
Your rights
Under the DPDP Act you can ask us for a summary of the personal data we hold about you and what we have done with it. You can ask us to correct anything inaccurate, complete anything incomplete, or update anything out of date. You can ask us to erase it, unless we are required to keep it. You can withdraw a consent as easily as you gave it, which stops future use without undoing what was lawful before. And you can nominate someone to exercise these rights for you if you die or become unable to exercise them yourself.
To do any of these, write to hello@digidubs.com from the address you contacted us on, or give us enough detail to find your record. There is no charge and we will answer within a reasonable period.
The Act asks something of you in return: what you tell us should be accurate, and a request made under these rights should be genuine. A false or frivolous complaint is an offence under the Act, which is a matter between you and the Board rather than between you and us.
Complaints, and our grievance officer
If you are unhappy with how we have handled your data, tell us first. Most of these are a misunderstanding and we would rather fix one than have it escalate.
Send a grievance to hello@digidubs.com with "grievance" in the subject line, or by post to DigiDubs IT Solutions Pvt. Ltd., C-2, Sector-G, Aliganj, Lucknow, Uttar Pradesh 226024, India, marked for the attention of the grievance officer. We will acknowledge it within a working day.
If we do not resolve it, you can complain to the Data Protection Board of India.
Children
This site sells to businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18, and we do not profile or advertise to children. If you believe a child has sent us personal data, tell us and we will delete it.
How we protect it
The site is served over HTTPS with strict transport security, a content security policy, and security headers set by the application rather than by the host, so they hold wherever it is deployed. Form submissions are validated on the server, rate limited, and checked for automation before anything is written.
Enquiry records are readable only by an administrator account, not by every account with access to the content system. Credentials for third-party services are held as environment variables on the server and never reach your browser.
No system is perfect and we would rather say so than imply otherwise. If we become aware of a breach affecting your data we will notify the Data Protection Board and you, as the Act requires.
Changes to this notice
When this notice changes we update the effective date at the top of the page. Where a change materially affects how we use data you have already given us, we will tell you rather than rely on you noticing.
Your analytics choice
You have not answered yet on this device. Nothing is being measured.
The answer is kept in this browser's local storage, not in a cookie, and it never leaves this device. Clearing your site data clears it too.