Legal
Privacy Policy
Last updated 8 August 2026
The rest of this page is the detail behind that, because “we take your privacy seriously” is not information.
Who we are
Avinashi.ai is a unit of Avinashi Messaging Solution Private Limited (together “Avinashi AI”, “we”, “us”). That company is the controller of the personal data described here — meaning it decides why and how the data is processed, and it is who you exercise your rights against.
- Registered address: 1st and 2nd Floor, Kohinoor Complex, Chowki Street, Saiyedpura, Surat, Gujarat 395003, India
- Country of establishment: India
- Company registration number: U72200GJ2011PTC063812
- Privacy contact: [email protected]
Because we are established in India and offer services to people in the EU and UK, both India's Digital Personal Data Protection Act 2023 and the EU/UK GDPR apply to different parts of what we do. Where they differ, we apply whichever gives you more protection.
This site, versus work we do for clients
This policy covers this website and our own business contacts.
It does not cover personal data inside a client's systems that we process while delivering a consulting engagement. There we act as a processor on the client's instructions, under the data processing agreement in that contract — not under this page. If you are an individual whose data sits in a client's system, your controller is that client and your rights are exercised against them.
What we collect, and exactly when
Nothing until you give it to us, apart from analytics. There are no accounts, no logins and no user profiles on this site.
When you send an enquiry
| Field | Required |
|---|---|
| First name | Yes |
| Last name | No |
| Email address | Yes |
| Company name | No |
| Your message | Yes |
When you request a free proof of concept
| Field | Required |
|---|---|
| First name | Yes |
| Last name | No |
| Company name | No |
| Email address | Yes |
| Industry | No |
| Details of the PoC you want | Yes |
When you apply for a job
| Field | Required |
|---|---|
| First name | Yes |
| Last name | No |
| Email address | Yes |
| Contact number | No |
| Role applied for | No |
| About you (free text) | No |
| GitHub URL | No |
| LinkedIn URL | No |
| Your CV / résumé (file) | No |
A CV routinely contains far more than the fields above — education, employment history, sometimes a date of birth or nationality. We only use it to assess your application. See How long we keep it below, and ask us at any time if you want it removed.
When you book a call
Booking runs on Calendly, embedded in our pages (https://calendly.com/avinashi-ai/30min). Calendly collects your name, email, the time you chose and anything you type into their form, and shares it with us. Loading a page containing the widget contacts Calendly's servers.
When you just browse
We use Google Analytics 4 (property G-J2WWHN0W4Z), but only if you accept the cookie banner. Decline, and the analytics script is never loaded — there is no request to Google at all. If you accept, it records approximate location (from IP), device and browser, pages viewed and how you arrived, with your IP anonymised.
Some pages embed YouTube video; loading such a page contacts YouTube. Our host, Cloudflare, processes connection data including your IP address to serve the site and protect it from attack.
Why we are allowed to process it
| What | Legal basis (GDPR) |
|---|---|
| Answering your enquiry or PoC request | Art. 6(1)(b) steps before a contract, and 6(1)(f) legitimate interests |
| Job applications | Art. 6(1)(b) steps before an employment contract |
| Analytics cookies | Art. 6(1)(a) your consent |
| Keeping the site up and secure | Art. 6(1)(f) legitimate interests |
Under India's DPDP Act we rely on your consent for the forms, and on legitimate uses for security and legal compliance. You can withdraw consent at any time; that does not undo processing already carried out lawfully.
Who else sees it
We do not sell personal data. We do not share it for anyone else's marketing. We have never bought a contact list.
| Provider | What it does |
|---|---|
| Directus (self-hosted) | Our CMS — stores every form submission |
| Supabase | The Postgres database behind Directus |
| Cloudflare | Hosting, CDN and DDoS protection — and it delivers the internal email that tells us your enquiry arrived |
| Google Analytics 4 | Website analytics, only with your consent |
| Calendly | Call booking |
| YouTube (Google) | Embedded video on some pages |
We will also disclose data where the law requires it, or to establish or defend legal claims.
Where your data goes
Our systems are operated from India. If you are in the EU or UK, your data is transferred outside your jurisdiction. India has not received an EU adequacy decision, so those transfers rely on appropriate safeguards. You can request a copy of them from [email protected].
How long we keep it
We don't run an automated deletion schedule, so rather than quote a fixed period we can't guarantee, here is what actually governs it:
| Data | How long |
|---|---|
| Enquiries and PoC requests | While there is an active or realistic conversation about working together, and deleted once there isn't |
| Job applications | For the hiring round they relate to. Ask us to keep you on file for future roles and we will; otherwise ask and we'll delete them |
| Our record of a booking | Alongside the enquiry it relates to |
| Analytics | Per the GA4 property's own retention setting |
You can ask us to delete any of it at any time, and we will. We would rather say that plainly than publish a number nothing enforces.
AI, and what we don't do with your data
We are an AI consultancy, so it is worth being unusually specific here.
- We do not train models on your data. Not your enquiry, not your PoC description, not your CV.
- No automated decision-making. Nothing here makes a decision about you with legal or similarly significant effects. A human reads every enquiry and every job application. There is no automated CV screening.
- Where we use AI tools in client delivery, the terms are set in that engagement's contract and data processing agreement — including whether any client data may reach a model provider, and on what terms.
Your rights
Under the GDPR and UK GDPR you can ask us to confirm what we hold about you and give you a copy; correct it; delete it; restrict how we use it; provide it in a portable format; and object to processing based on legitimate interests. You can withdraw consent, and complain to a supervisory authority — the ICO in the UK, or your national authority in the EU.
Under India's DPDP Act you can access a summary of your data, have it corrected or erased, nominate someone to exercise your rights on your behalf, and complain to the Data Protection Board of India.
Email [email protected] to exercise any of these. We respond to legitimate requests within one month and will not charge you unless a request is manifestly unfounded or excessive. We may need to verify who you are first.
Security
Form submissions travel over HTTPS. The site sets HSTS and standard protective headers. Upload endpoints validate file type and size and check request origin, so the careers form cannot be used as an anonymous file host. CMS access is restricted to named accounts.
No system is perfectly secure and we will not pretend otherwise. If you think you've found a vulnerability, email [email protected] — we would much rather hear it from you.
Cookies
See the Cookie Policy.
Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, email [email protected] and we will delete it.
Changes
If we change this policy we update the date above. For anything that materially affects your rights we will say what changed, rather than quietly reissuing the page.
Contact
Avinashi Messaging Solution Private Limited
1st and 2nd Floor, Kohinoor Complex, Chowki Street, Saiyedpura, Surat, Gujarat 395003, India
[email protected]