PRIVACY POLICY
Effective Date: 24 May 2025
This Privacy Policy (“Policy”) describes the manner in which “TheaIT Solutions Private Limited”, a company incorporated under the provisions of the Companies Act, 2013, having its registered office at: at DW 9020, Bharat Diamond Bourse, G Block Bandra Kurla Complex, Bandra (East), Mumbai, Maharashtra, India – 400 051. (hereinafter referred to as “TheaIT”, “Company”, “we”, “us”, or “our”) collects, receives, records, uses, stores, organizes, processes, shares, discloses, transfers, retains and otherwise handles the Personal Data and other information of individuals who access or use “TheaIT” website, mobile application and all related products, features, functionalities and services made available through such website, mobile application and other digital interfaces and related services made available by us from time to time (collectively, the “Platform”).
For the purposes of this Privacy Policy, any individual or entity who accesses, browses, registers on or otherwise uses the Platform shall be referred to as a “User”, and references to “you” or “your” shall mean such User, as applicable. References to “Personal Information” shall mean information that relates to or can reasonably be used to identify a User, whether directly or indirectly, as described further in this Privacy Policy.
This Privacy Policy is intended to explain what Personal Information we collect, the purposes for which we use it, the circumstances in which we may share it, how we protect and retain it, and the rights and choices available to you in relation to such information. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, processing and disclosure of your Personal Information in accordance with this Privacy Policy and Applicable Laws. If you do not agree with this Privacy Policy, you should discontinue your access to and use of the Platform.
The Company is committed to handling Personal Information in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the rules, regulations and notifications issued thereunder, to the extent applicable, and other applicable data protection, privacy and information technology laws and regulatory requirements in force in India (collectively, “Applicable Data Protection Laws”). The Company shall process Personal Information in accordance with the principles and requirements prescribed under Applicable Data Protection Laws, including with respect to lawful processing, consent and other permitted grounds for processing, purpose limitation, data security, retention, grievance redressal and the rights of Data Principals, as applicable to the Company and the relevant processing activities.
1. SCOPE OF THE POLICY
This Privacy Policy applies to the collection, use, processing, storage and disclosure of Personal Information by the Company in connection with your access to or use of the Platform and the services, features and functionalities made available through the Platform.
This Privacy Policy shall be read together with the Terms & Conditions and other applicable policies, notices and guidelines published on the Platform from time to time. In the event of any conflict relating specifically to the collection, use or processing of Personal Information, this Privacy Policy shall prevail to the extent of such conflict.
2. APPLICABILITY
This Privacy Policy applies to all Users who access, browse, register on or otherwise use the Platform, whether as a Customer, Service Provider or any other User whose Personal Data is collected or processed by TheaIT in connection with the Platform or the services made available through it. This Policy governs the collection, processing, storage, use, disclosure, transfer and retention of Personal Data by TheaIT in accordance with applicable law.
The Platform is intended for individuals who are 18 (eighteen) years of age or above and legally competent to enter into a binding contract under Applicable Laws. By accessing or using the Platform, you represent and warrant that you satisfy these eligibility requirements.
Where a User provides Personal Information relating to any other individual, the User represents and warrants that such information has been provided lawfully and that the User is authorised or otherwise legally permitted to provide such information to the Company for the purposes contemplated under this Privacy Policy.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, processing, storage and disclosure of your Personal Information in accordance with this Privacy Policy and Applicable Laws.
If you do not agree with this Privacy Policy, or do not satisfy the eligibility requirements set out herein, you must discontinue your access to and use of the Platform.
3. PERSONAL DATA WE COLLECT
3.1. Depending upon the nature of your interaction with the Platform and the services you access or provide, Company may collect, receive, generate or otherwise process the following categories of Personal Data:
i. Identity and Profile Information: including your name, photograph, date of birth, gender, username, profile information, profile photograph, language preferences and any other information voluntarily provided while creating or maintaining your account.
ii. Contact Information: including your mobile number, email address, residential or business address, postal code, emergency contact details (where applicable) and any other contact information provided by you.
iii. Account Registration and Authentication Information: including one-time passwords (OTPs), login credentials, authentication tokens, account identifiers, Google Sign-In, Apple Sign-In or any other authentication information required for registration or secure access to the Platform.
iv. Identity Verification and Compliance Information: including Aadhaar details, PAN details, driving licence details, passport details, voter identification details, GST registration details, business registrations, licences, certifications, police verification reports, background verification reports and any other documents or information required for identity verification, regulatory compliance or onboarding of Users.
v. Service and Project Information: including details of services or solutions requested or availed by you, project requirements, business objectives, technical specifications, project briefs, website or application requirements, software requirements, branding and design requirements, digital marketing requirements, AI or software development requirements, game development requirements, quotations, proposals, project timelines, deliverables, instructions, feedback and other information necessary for providing the requested services.
vi. Payment and Financial Information: including bank account details, UPI identifiers, payment instrument details, transaction references, invoices, billing information, tax information, settlement details and such other financial information as may be required for processing payments, settlements, refunds or compliance with applicable laws. Company does not store complete payment card information where such information is processed directly by authorised payment gateway service providers.
vii. Client and Business Information: including company or business name, designation, industry, business profile, business objectives, branding preferences, existing website or application details, product or service information, marketing requirements, social media information, business contact details, technical requirements and other information provided in connection with the Company's provision of its services.
viii. Communications and Support Information: including communications exchanged through the Platform, customer support interactions, complaints, grievances, enquiries, chat messages, call recordings (where permitted by law), emails, feedback, ratings and reviews.
ix. Device, Technical and Usage Information: including IP address, browser type, device identifiers, operating system, application version, device metadata, internet protocol information, diagnostic information, log files, cookies, usage statistics, browsing behaviour, access timestamps, crash reports and similar technical information generated through your use of the Platform.
x. Location Information: including approximate or precise location information, where permitted by your device settings or otherwise provided by you, for the purpose of providing location-specific services, understanding relevant business requirements, improving the functionality and user experience of the Platform/Website, fraud prevention and complying with applicable laws.
xi. Marketing and Preference Information: including your communication preferences, subscription preferences, participation in promotional campaigns, referral programmes, surveys, contests, feedback forms and other marketing-related interactions with Company.
xii. Content and Creative Materials: including photographs, images, logos, brand assets, artwork, graphics, videos, audio files, written content, website content, product information, marketing materials, social media content and other materials provided by you or on your behalf for the purpose of website development, application development, branding, digital marketing, AI and software development, game development or other services provided by the Company.
xiii. Any Other Information: including any information, documents or content voluntarily submitted by you, or otherwise collected where reasonably necessary for the operation of the Platform, provision of services, compliance with applicable law, protection of legitimate interests or any other purpose permitted under this Policy.
3.2. Certain Personal Data may be mandatory for registration, verification, availing or managing the Company's services, understanding and fulfilling project requirements, communicating with clients, processing payments and invoices, providing customer support, regulatory compliance or other functionalities of the Platform. Where such information is not provided or is subsequently withdrawn, Company may be unable to provide certain features or services, undertake or complete the relevant project, provide or maintain certain technology, software, website, application, branding, digital marketing, AI, software or game development services, or otherwise fulfil its contractual or legal obligations.
3.3. Company may also generate, collect or use aggregated, anonymised or de-identified information derived from Personal Data for statistical analysis, research, business intelligence, product development, service improvement, security enhancement or other lawful purposes. Such information does not identify any individual and shall not be treated as Personal Data unless it is combined with information capable of identifying a specific individual.
4. HOW WE COLLECT PERSONAL INFORMATION
4.1. Directly from You: We collect Personal Information directly from you when you voluntarily provide it to us while interacting with the Platform, including when you:
i. create, register or verify your account on the Platform;
ii. complete or update your profile, submit documents, provide business contact, project or other information required for availing our services or engaging with us;
iii. book, request, offer or provide services through the Platform;
iv. make or receive payments, subscribe to premium features or purchase any value-added services;
v. upload photographs, identity documents, licences, certifications, ratings, reviews, feedback or any other User Content;
vi. communicate with us, another User or our customer support team through the Platform or any other communication channel;
vii. participate in surveys, promotional campaigns, referral programmes, contests or other activities organised through the Platform; or
viii. otherwise submit information while using any feature, functionality or service made available through the Platform.
4.2. Automatically Through the Platform: When you access or use the Platform, certain information may be collected automatically through cookies, device identifiers, server logs, software development kits (SDKs), web beacons, analytics tools and other similar technologies. Such information may include your device information, IP address, browser type, operating system, usage patterns, session information, location data (where permitted), crash reports, performance diagnostics and other technical information necessary for operating, securing, maintaining and improving the Platform. The Company may use cookies and similar technologies for the purposes described in this Privacy Policy and, where applicable, its Cookie Policy. You may manage or disable certain cookies through your browser settings, although doing so may affect the availability or functionality of certain features of the Platform.
4.3. From Third Parties: We may also receive Personal Information relating to you from authorised third-party sources, including, without limitation:
i. identity verification, KYC, background verification and document authentication agencies;
ii. payment gateway providers, banking partners and payment processing service providers;
iii. analytics, advertising, communication, authentication, cloud hosting, mapping and technology service providers;
iv. social login or authentication providers, including Google, Apple or other authentication services used to access the Platform;
v. publicly available sources, government authorities, regulatory bodies or other lawful sources where permitted under applicable law; and
vi. other Users or third parties third parties who provide information in connection with service requirements, projects, communications, technical requirements, content or materials, payments, support requests, complaints, investigations, verification processes, customer support activities or other interactions with the Company;
4.4. Accuracy of Information: You are responsible for ensuring that the Personal Information provided to Company is accurate, complete and up to date. Where any Personal Information provided by you changes, you shall promptly update the same through the Platform or notify Company through the prescribed communication channels. Failure to do so may affect your ability to access or use certain features or services available on the Platform.
5. HOW WE USE YOUR PERSONAL INFORMATION
5.1. Company processes your Personal Data only for lawful purposes, including where such processing is necessary to provide the Platform and its services, to comply with applicable law, to fulfil contractual obligations, to protect legitimate business interests, or on the basis of your consent or any other lawful ground recognised under applicable law.
5.2. Without limiting the generality of the foregoing, Company may use your Personal Information for one or more of the following purposes:
i. to create, verify, administer and maintain your account and profile on the Platform;
ii. to authenticate your identity and complete verification, KYC or background verification processes;
iii. to understand, plan, develop, deliver and manage the services requested or availed by you, including website development, application development, branding, digital marketing, AI and software development and game development services;
iv. to process payments, facilitate settlements, issue invoices, administer refunds and manage financial transactions;
v. to communicate with you regarding enquiries, quotations, proposals, project requirements, project updates, deliverables, timelines, payments, customer support, feedback or other matters relating to our services;
vi. to provide customer support, resolve complaints, disputes and grievances, and improve the quality of our support services;
vii. to operate, maintain, secure, monitor and improve the Platform, its features, functionalities and user experience;
viii. to analyse usage patterns, generate analytics, conduct research and develop new products, features or services;
ix. to detect, investigate, prevent and address fraud, unauthorised access, suspicious activities, security incidents or other unlawful conduct;
x. to enforce these Privacy Policy, the Terms of Use, the Platform Policies and any other applicable contractual arrangements;
xi. to send service-related communications, important notices, security alerts, policy updates or other administrative communications;
xii. to send promotional communications, offers, newsletters, marketing materials or information regarding products, services or features that may be of interest to you, where permitted under applicable law and subject to your communication preferences;
xiii. to comply with applicable laws, regulatory requirements, judicial orders, governmental directions or lawful requests received from competent authorities;
xiv. to establish, exercise or defend legal rights, resolve disputes and protect the rights, property, security and legitimate interests of Company, its Users or third parties; and
xv. to carry out any other purpose that is incidental or reasonably necessary for the operation, administration, development and improvement of the Platform and the services offered through it.
5.3. You acknowledge and agree that Company may communicate with you through email, telephone calls, SMS, push notifications, WhatsApp or other electronic communication channels in connection with your account, enquiries, projects, service requirements, quotations, payments, security notifications, operational updates, promotional communications or any other purpose consistent with this Privacy Policy and applicable law.
5.4. Company may engage affiliates, payment partners, verification agencies, technology providers, cloud hosting providers, communication service providers, analytics providers, professional advisors and other authorised third-party service providers to process Personal Information on its behalf solely for the purposes described in this Privacy Policy and subject to appropriate contractual, technical and organisational safeguards.
5.5. Company may disclose or otherwise process your Personal Information where such disclosure is required under applicable law or is reasonably necessary to comply with any order, direction, notice or request issued by a court, governmental authority, regulatory body or law enforcement agency, or for the establishment, exercise or defence of legal rights, prevention of fraud, protection of the Platform or its Users, or any other lawful purpose permitted under applicable law.
6. DISCLOSURE OF PERSONAL INFORMATION
6.1. Company may disclose, transfer or otherwise make available your Personal Information to the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the purposes set out in this Privacy Policy or as otherwise permitted under applicable law:
i. its holding company, subsidiaries, affiliates, group companies and entities under common control, where such disclosure is necessary for the operation, administration or management of the Platform;
ii. third parties with whom you interact or who are involved in the provision, management or support of the Company's services, to the extent reasonably necessary for service requests, project requirements, quotations, communications, payments, project execution, dispute resolution or the performance of services;
iii. authorised third-party service providers engaged by Company, including payment gateway providers, banking partners, cloud hosting providers, identity verification agencies, KYC and background verification agencies, communication service providers, analytics providers, customer support providers, technology vendors, mapping and location service providers, authentication providers, marketing partners software and infrastructure providers, authentication providers, digital marketing and advertising service providers and other service providers engaged for the operation, maintenance, security and improvement of the Platform;
iv. professional advisors, consultants, auditors, accountants, insurers and legal advisors engaged by Company in connection with its business operations or compliance requirements;
v. any purchaser, investor, lender or other person in connection with any merger, acquisition, restructuring, amalgamation, financing, transfer of business or other corporate transaction involving Company, subject to appropriate confidentiality obligations;
vi. courts, governmental authorities, regulatory authorities, law enforcement agencies or other competent authorities where disclosure is required under applicable law or pursuant to any lawful order, direction, notice or request; and
vii. any other person or entity where you have expressly consented to such disclosure or where such disclosure is otherwise permitted or required under applicable law.
6.2. Company’s requires all authorised third parties processing Personal Information on its behalf to maintain appropriate technical, organisational and contractual safeguards to protect such information and to process it only for the authorised purposes and in accordance with applicable law and Company's instructions, where applicable.
6.3. Company’s does not sell, rent or otherwise commercially trade your Personal Information to third parties for their independent marketing purposes without your consent, except where otherwise permitted or required under applicable law.
7. ACCESS TO AND CORRECTION OF PERSONAL INFORMATION
7.1. You represent and warrant that all Personal Information provided to Company is accurate, complete, current and not misleading. You shall promptly update or correct any Personal Information that becomes inaccurate, incomplete or outdated during your use of the Platform.
7.2. Subject to applicable law and the functionalities made available on the Platform, you may access, review, update or correct certain Personal Information associated with your account by logging into your account or by contacting Company through the communication channels specified in this Privacy Policy
7.3. Company shall use reasonable efforts to facilitate the correction or updation of inaccurate or incomplete Personal Information upon receipt of a valid request, subject to applicable legal, regulatory, technical and operational requirements. Certain information may not be capable of modification or deletion where its retention is necessary to comply with applicable law, enforce legal rights, maintain business records, prevent fraud, resolve disputes or fulfil contractual obligations.
7.4. Users are responsible for ensuring that the Personal Information maintained on the Platform remains accurate and up to date. Company shall not be responsible for any loss, delay, inability to provide services or other consequences arising from inaccurate, incomplete or outdated information provided by a User.
8. TRANSFER OF PERSONAL INFORMATION
8.1. Company may store, process and otherwise handle your Personal Information within India or, where permitted under applicable law, transfer such Personal Information to jurisdictions outside India for the purposes set out in this Privacy Policy, including where such transfer is necessary for the operation of the Platform or the engagement of authorised third-party service providers.
8.2. Where Personal Information is transferred outside India, Company shall take reasonable measures to ensure that such transfer is carried out in accordance with applicable law and that appropriate contractual, technical and organisational safeguards are implemented to protect your Personal Information.
8.3. By accessing or using the Platform and providing your Personal Information, you acknowledge and agree that such storage, processing and transfer may take place in accordance with this Privacy Policy and applicable law.
9. DATA RETENTION
9.1. Company implements reasonable technical, organisational, administrative and physical security measures designed to protect Personal Information against unauthorised access, use, disclosure, alteration, destruction or accidental loss.
9.2. Such measures may include access controls, authentication mechanisms, encryption (where appropriate), secure hosting environments, monitoring systems, periodic security reviews and other safeguards considered appropriate having regard to the nature of the Personal Information processed.
9.3. While Company endeavours to implement appropriate security measures, no method of electronic transmission, storage or processing is completely secure. Accordingly, Company cannot guarantee absolute security of Personal Information, and Users acknowledge that transmission of information over the internet is undertaken at their own risk.
10. DATA RETENTION
10.1. Company shall retain Personal Information only for as long as is reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with applicable laws, enforce contractual rights, resolve disputes, prevent fraud, maintain business records or satisfy other legitimate business, regulatory or legal requirements.
10.2. Upon expiry of the applicable retention period, Company shall securely delete, anonymise or otherwise dispose of Personal Information in accordance with applicable law and its internal data retention practices, unless continued retention is required or permitted under applicable law.
10.3. Company may use anonymised or aggregated information that does not identify any individual for research, statistical, analytical, business intelligence, product development or other lawful purposes, and such information may be retained for such period as Company considers appropriate.
11. ACCOUNT DELETION AND ERASURE OF PERSONAL INFORMATION
11.1. Request for Account Deletion: Subject to applicable law and the functionalities made available on the Platform, a User may request the deletion or closure of their account and the erasure of the Personal Information associated with such account by submitting a request through the Platform or by contacting Company through the communication channels specified in this Privacy Policy.
11.2. Verification of Request: Prior to processing any request for account deletion or erasure of Personal Information, Company may require the User to complete such identity verification procedures or provide such information or documentation as may reasonably be necessary to verify the authenticity of the request and to prevent unauthorised or fraudulent deletion requests.
11.3. Effect of Account Deletion: Upon successful deletion of a User’s account, the User may permanently lose access to the Platform, including their account credentials, profile information, services history, transaction records, preferences, subscriptions, ratings, reviews, rewards, promotional benefits and any other features or services associated with the account, to the extent applicable.
11.4. Pending Transactions and Obligations: Company may defer or decline a request for account deletion where there are any pending services, ongoing services, payment obligations, settlement processes, refund requests, chargebacks, disputes, investigations, legal proceedings or other outstanding contractual, regulatory or operational matters requiring the continued maintenance of the account or related Personal Information until such matters have been duly resolved.
11.5. Retention of Information: Notwithstanding any request for account deletion or erasure, Company may retain such Personal Information as is required or permitted under applicable law, including for regulatory compliance, taxation, accounting, audit requirements, fraud prevention, dispute resolution, enforcement of legal rights, security purposes, maintenance of business records or any other lawful purpose.
11.6. Residual and Backup Records: The User acknowledges that certain Personal Information may continue to remain in secure backup systems, archival records or disaster recovery environments for a limited period in accordance with Company’s internal data retention practices and applicable law, following which such information shall be securely deleted, anonymised or otherwise disposed of in accordance with applicable legal and technical requirements.
11.7. Anonymised Information: Where Personal Information has been irreversibly anonymised or aggregated such that it can no longer identify an individual, Company may retain and use such information for statistical analysis, research, product development, business intelligence, security enhancement or other lawful business purposes, as such information shall no longer constitute Personal Information under applicable law.
12. USER RIGHTS AND CHOICES
Subject to Applicable Data Protection Laws, you may have the right to:
i. Access: request access to your Personal Information processed by the Company;
ii. Correction: request correction or updating of inaccurate or incomplete Personal Information;
iii. Deletion: request deletion of your Personal Information, where permitted under Applicable Data Protection Laws; and
iv. Withdrawal of Consent: withdraw consent where the processing is based on consent, subject to the limitations described in this Privacy Policy.
To exercise any applicable rights or raise a request concerning your Personal Information, you may contact the Company at support@theaitsolutions.net. The Company may take reasonable steps to verify the identity of the requesting User before processing the request.
The exercise of any right shall be subject to Applicable Data Protection Laws and any applicable statutory, regulatory, contractual or other lawful requirements. The Company may retain certain Personal Information where necessary for legal or regulatory compliance, accounting or record-keeping, fraud prevention, dispute resolution, or establishment, exercise or defence of legal claims.
13. THIRD-PARTY LINKS
The Platform may contain links to websites, applications or services operated by third parties. Such third-party platforms are governed by their own privacy policies and terms, and the Company does not control or assume responsibility for their privacy practices or content.
Users are advised to review the applicable privacy policies and terms of such third-party platforms before providing any Personal Information.
14. CHILDREN’S PRIVACY
The Platform is intended for individuals who are 18 (eighteen) years of age or above. The Company does not knowingly collect Personal Information from individuals below 18 years of age.
If you believe that a person below 18 years of age has provided Personal Information to the Company, you may contact us at support@theaitsolutions.net so that appropriate action may be taken in accordance with Applicable Data Protection Laws.
15. COOKIES AND SIMILAR TECHNOLOGIES
The Platform may use cookies and similar technologies to support essential functionality, remember User preferences, understand Platform usage and improve performance and user experience.
Where required under Applicable Data Protection Laws, the Company shall obtain the necessary consent for non-essential cookies or similar technologies. You may manage or disable cookies through your browser or other available controls. Disabling certain cookies may affect the functionality or availability of parts of the Platform.
The Company may provide additional information regarding the use and management of cookies through a separate Cookie Policy or relevant notices made available on the Platform, where applicable.
16. CHANGES TO THIS PRIVACY POLICY
The Company may update, modify or revise this Privacy Policy from time to time to reflect changes in its practices, services or Applicable Data Protection Laws.
Any revised Privacy Policy shall be effective upon publication on the Platform, unless otherwise specified or required under Applicable Data Protection Laws. Users are advised to review this Privacy Policy periodically for any updates.
17. CONTACT US
If you have any questions, concerns or requests regarding this Privacy Policy or the Company’s handling of Personal Information, you may contact us at:
Thea IT Solutions Pvt. Ltd.
Email: support@theaitsolutions.net
Website: https://theaitsolutions.net
Phone: +91 9048299118, +91 9048577118
