Privacy Policy.

1. Introduction

LocalFirstAI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and applicable data protection laws.

By accessing or using our website or services, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Contact Information: Name, email address, phone number, and organization details when you submit the inquiry form or book an assessment.
• Communication: Content of emails, messages, or other correspondence you send us.
• Business Information: Company size, current cloud infrastructure, and use case details shared during consultations.

2.2 Information We Collect Automatically

• Usage Data: Pages visited, time spent, and interaction patterns through cookies and similar technologies.
• Device Information: Browser type, operating system, IP address, and approximate location.
• Referral Data: How you arrived at our site (search engine, referral link, etc.).

2.3 Information from Third Parties

• Analytics data from Google Analytics or similar tools.
• Business intelligence data from professional networking platforms (e.g., LinkedIn).

3. How We Use Your Information

• To respond to your inquiries and provide the services you request.
• To qualify and prioritize assessment bookings based on your business needs.
• To send you relevant content, updates, and communications you have opted into.
• To improve our website, services, and content offerings.
• To comply with legal obligations and protect our rights.
• To analyze website usage and optimize user experience.

4. Legal Basis for Processing (DPDP Compliance)

In compliance with the DPDP Act, 2023, we process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for processing (e.g., newsletter subscription, inquiry form submission).
• Legitimate Interest: Where processing is necessary for our legitimate business interests, such as providing services you have requested, website analytics, and fraud prevention.
• Contractual Necessity: Where processing is necessary to perform a contract with you, such as providing assessment or consultation services.

5. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party providers who assist in operating our website, conducting analytics, or delivering services (e.g., hosting, email delivery). These providers are contractually obligated to protect your data.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• Legal Requirements: When required by law, regulation, or legal process.
• Protection of Rights: To protect the rights, property, or safety of LocalFirstAI, our clients, or others.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Inquiry Data: Retained for up to 3 years from the date of last contact.
• Newsletter Subscribers: Retained until you unsubscribe.
• Website Analytics: Aggregated and anonymized data retained indefinitely; personal data anonymized within 26 months.
• Client Engagement Data: Retained for the duration of the engagement plus 7 years for compliance purposes.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access controls and authentication for systems storing personal data.
• Regular security assessments and vulnerability testing.
• Employee training on data protection and privacy.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights Under DPDP Act, 2023

Under the DPDP Act, you have the following rights regarding your personal data:

• Right to Access: Request a summary of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Nominate: Nominate another person to exercise your rights in the event of incapacity.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Grievance Redressal: Lodge a grievance with us or the Data Protection Board of India.

To exercise any of these rights, contact us at privacy@localfirstai.in. We will respond within 30 days.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and personalize content. Types of cookies we use:

• Essential Cookies: Required for website functionality (e.g., session management).
• Analytics Cookies: Help us understand how visitors interact with our website.
• Marketing Cookies: Used to deliver relevant content and advertisements.

You can manage cookie preferences through your browser settings or by clicking the cookie consent banner.

10. International Data Transfers

Your personal data may be transferred to and processed in countries other than India. Where data is transferred outside India, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the Data Protection Board of India or adequacy decisions.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by sending a notice to your email address.