Privacy Policy

We collect information you provide directly to us and information we gather automatically when you use our services.

Personal Data. When you contact us, request a consultation, or create an account, we may collect your name, email address, phone number, company name, job title, and billing information. If you communicate with us by email or through our contact form, we retain the content of those communications.

Usage Data. We automatically collect certain technical information when you visit our website or use our platform, including your IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, and device identifiers. This data is collected through server logs and analytics tools.

Cookies and Tracking Technologies. We use cookies, pixel tags, and similar tracking technologies to operate our services, remember your preferences, and analyze usage patterns. See Section 07 for full details on cookie types and opt-out options.

Business Information. If you engage us for enterprise services, we may collect information about your organization including size, industry, technology infrastructure, and business requirements necessary to deliver our AI consulting and automation services.

We use the information we collect to deliver, maintain, and improve our services, and to communicate with you.

Service Delivery. We use your information to fulfill contracts, provide AI consulting, automation implementations, and platform access, process transactions, and send service-related communications including invoices, receipts, and technical notices.

Analytics and Improvement. We analyze usage patterns and feedback to understand how our services are used, identify areas for improvement, and develop new features. This analysis is conducted on aggregated or de-identified data where possible.

Marketing Communications. With your consent where required by law, we may send you information about our services, industry insights, case studies, and events. You can opt out of marketing emails at any time using the unsubscribe link in any message.

Security and Fraud Prevention. We use data to monitor for suspicious activity, investigate security incidents, and enforce our Terms of Service.

Legal Compliance. We process personal data as necessary to comply with applicable laws, regulations, court orders, and government requests, and to protect our legal rights.

We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects about you without providing an opportunity for human review upon request.

We do not sell, rent, or trade your personal information to third parties. We share information only in the limited circumstances described below.

Service Providers. We engage trusted third-party vendors to assist with operations including cloud hosting (AWS, Google Cloud), analytics (Mixpanel, PostHog), customer relationship management, payment processing (Razorpay), email delivery, and security monitoring. These providers are contractually bound to process data only as directed by us and in compliance with applicable privacy laws.

Business Transfers. If Solnix Media is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership and your choices regarding your information.

Legal Requirements. We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation, court order, or governmental request; (b) protect and defend the rights or property of Solnix Media; (c) prevent or investigate possible wrongdoing in connection with the services; or (d) protect the personal safety of users or the public.

Aggregated Data. We may share aggregated or de-identified information that cannot reasonably be used to identify you, for example, industry benchmark statistics or anonymized usage metrics, without restriction.

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it.

Encryption. All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher. Sensitive data stored at rest, including customer records and billing information, is encrypted using AES-256.

Access Controls. Access to personal data is restricted to employees and contractors who need it to perform their job functions. We enforce the principle of least privilege and conduct regular access reviews. All access to production systems requires multi-factor authentication.

Infrastructure Security. Our platform is hosted in SOC 2 Type II certified data centers. We perform regular vulnerability assessments, penetration testing, and security audits. Our infrastructure is monitored 24/7 for anomalous activity.

Breach Response. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant regulatory authorities within the timeframes required by applicable law, no later than 72 hours after becoming aware of the breach under GDPR. Our incident response plan is tested annually.

Limitations. No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

Account Data. If you have an account with us, we retain your account information for the duration of your account plus five years after account closure to comply with tax and accounting obligations.

Contract and Transaction Records. Records related to services rendered, contracts, and financial transactions are retained for seven years from the date of the transaction, consistent with applicable tax law requirements.

Marketing Records. If you opt in to marketing communications, we retain your contact information until you unsubscribe. Records of your opt-in and opt-out history are retained for three years as evidence of consent.

Support and Communications. Customer support tickets and related communications are retained for three years from the date of resolution.

Analytics Data. Aggregated and anonymized analytics data may be retained indefinitely. Identifiable usage logs are typically retained for 13 months before being anonymized or deleted.

Deletion Requests. You may request deletion of your personal data at any time (see Section 06. Your Rights). Upon a valid deletion request, we will delete or anonymize your data within 30 days, subject to exceptions for data we are required to retain by law or for legitimate business purposes such as fraud prevention.

Depending on your location, you may have certain rights regarding your personal data. We honor these rights for all users regardless of jurisdiction.

Right of Access. You have the right to request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.

Right to Erasure ("Right to Be Forgotten"). You may request that we delete your personal data. We will honor such requests unless we have a legal obligation or legitimate business necessity to retain the data.

Right to Restriction of Processing. In certain circumstances, you may request that we restrict how we process your data while a dispute is resolved.

Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.

Right to Object. You have the right to object to processing of your personal data for direct marketing purposes. You may also object to other forms of processing based on legitimate interests.

California Privacy Rights (CCPA/CPRA). California residents have the right to know what personal information is collected, sold, or disclosed; the right to opt out of the sale of personal information (we do not sell personal information); the right to deletion; the right to correct inaccurate information; and the right to non-discrimination for exercising privacy rights.

How to Exercise Your Rights. Submit requests to [email protected]. We will respond within 30 days (or 45 days if additional time is required, with notice). We may need to verify your identity before processing requests.

We use cookies and similar tracking technologies to operate our website and services. This section explains the types of cookies we use and how you can control them.

Strictly Necessary Cookies. These cookies are essential for the website to function and cannot be switched off. They include session tokens, security cookies, and load-balancing cookies. No consent is required for these.

Performance and Analytics Cookies. We use analytics tools (including PostHog and Google Analytics) to understand how visitors interact with our website. These cookies collect information about pages visited, time spent, and technical errors encountered. This data is aggregated and does not identify individual users.

Functionality Cookies. These cookies enable enhanced functionality such as remembering your preferences, language settings, and form data to improve your experience.

Targeting and Marketing Cookies. With your consent, we may use cookies to serve relevant advertisements and track conversions from advertising campaigns. These cookies may be set by third-party advertising partners.

Your Choices. You can manage cookie preferences through our cookie banner at first visit, your browser settings (to block or delete cookies), or opt-out tools provided by third parties such as the Google Analytics Opt-out Browser Add-on or the Digital Advertising Alliance opt-out page at optout.aboutads.info. Note that disabling certain cookies may impact functionality of our services.

Do Not Track. Our website does not currently respond to Do Not Track (DNT) signals from browsers, as there is no industry standard for DNT compliance. We will reassess this policy as standards evolve.

Solnix Media is headquartered in Hyderabad, Telangana, India. Our services are delivered globally, and your personal data may be transferred to, stored, and processed in India or in other countries where our third-party service providers operate (including the United States, the European Union, and Singapore).

Legal Basis for Transfers from India. Transfers of personal data outside India are conducted in accordance with Section 16 of the Digital Personal Data Protection Act, 2023 (India) and any rules notified thereunder. We transfer data only to countries or entities that provide an adequate level of protection or where we have appropriate contractual safeguards in place.

Legal Basis for Transfers from the EEA / UK. Where we receive personal data from residents of the European Economic Area (EEA) or the United Kingdom, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission, incorporated into our data processing agreements with all relevant service providers, as the legal mechanism for onward transfers. Your explicit consent is also obtained where required by applicable law before any such transfer.

Questions. If you have questions about international transfers of your data, contact us at [email protected].

Our services are not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or under 16 in the European Union and certain other jurisdictions).

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at [email protected]. We will investigate and, if confirmed, promptly delete the information from our records.

If we learn that we have collected personal information from a child under the applicable age of consent without verification of parental consent, we will take steps to delete that information as quickly as possible.

Solnix Media is a "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 (India) ("DPDP Act"). This section sets out your rights as a "Data Principal" under the DPDP Act and how we honour them.

Basis for Processing. We process your personal data only on the basis of your free, specific, informed, and unambiguous consent, or where processing is permitted without consent under the DPDP Act (for example, for the performance of a contract you have entered into with us, or to comply with a legal obligation).

Your Rights Under the DPDP Act. You have the right to: (a) obtain a summary of the personal data we hold about you and how it is being processed; (b) correct or update inaccurate or incomplete personal data; (c) erase your personal data where it is no longer necessary for the purpose for which it was collected (subject to any legal retention obligations); (d) nominate another individual to exercise your rights on your behalf in the event of your death or incapacity; and (e) withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Grievance Redressal. If you wish to raise a grievance relating to the processing of your personal data, or to exercise any of the rights above, you may contact our Grievance Officer (details in Section 11). We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt, in accordance with the DPDP Act.

Cross-Border Transfers. Personal data processed by us may be transferred to countries outside India in accordance with Section 16 of the DPDP Act and any notifications issued by the Government of India thereunder. We ensure that appropriate contractual or other safeguards are in place for any such transfer.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the details below.

Email: [email protected]

Grievance Officer (IT Act 2000 / DPDP Act 2023) Name: Abhiram Samayamantula Designation: Proprietor, Solnix Media Email: [email protected] Address: 5th Floor, Plot 25, 26 & 27, Indira Nagar, Gachibowli, Hyderabad, Telangana 500032, India

Mailing Address: Solnix Media (GSTIN: 36MAIPS2417P1ZU) Attn: Privacy / Grievance Officer 5th Floor, Plot 25, 26 & 27, Indira Nagar, Gachibowli, Hyderabad, Telangana 500032, India

Response Time. We acknowledge all privacy-related inquiries and grievances within 48 hours and aim to resolve them within 30 days. For formal rights requests under GDPR or the DPDP Act, we will provide a substantive response within 30 days of receipt.

EEA / UK Supervisory Authority. If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at edpb.europa.eu.

Updates to This Policy. We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date and, where required by law, by sending you an email notification. Your continued use of our services after the effective date constitutes your acceptance of the changes.