Privacy Policy

1. Who We Are

RudraAI ("we", "us", "our") is an AI automation agency based in Hyderabad, India. Our website is https://www.rudraai.online. This policy explains how we handle personal data collected through our website's contact form and booking form.

2. What Data We Collect

• Contact form: name, work email, company name, budget range, message text
• Booking form: name, work email, company name, job role, automation goal, selected time slot
• Server logs: IP address, browser user agent, page visited, timestamp — retained for 30 days
• Cookies: a single first-party cookie to remember your cookie consent preference

3. Why We Collect It (Legal Basis)

• To respond to your contact enquiry (legitimate interest / contract performance)
• To confirm and manage your booked consultation (contract performance)
• To send you a confirmation email (contract performance)
• To protect against abuse and spam (legitimate interest)

4. How We Use Your Data

Your data is used only to respond to your message and/or confirm your booked call. We do not use it for marketing unless you explicitly opt in. We do not sell, rent, or share your data with third parties for their own purposes.

5. Third-Party Services

• Email delivery: Gmail SMTP / SendGrid — used to send confirmation emails. Your email address is passed to these providers.
• n8n (self-hosted): Our workflow automation engine, hosted on our own servers. Contact/booking data may be forwarded to it for CRM logging.
• Google Fonts: Loads font files from fonts.googleapis.com. No personal data is sent.
• Vercel / hosting provider: Server-side logs only. No personal data shared beyond standard hosting.

6. Data Retention

Form submission data (name, email, company, message) is retained in our email inbox for up to 24 months or until you request deletion. Server logs are deleted after 30 days. Cookie consent preference is stored in your browser and expires after 12 months.

7. Your Rights (GDPR & CCPA)

If you are in the EU, UK, or California, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate data
• Erasure: Ask us to delete your data ('right to be forgotten')
• Portability: Receive your data in a machine-readable format
• Objection: Object to our use of your data for legitimate interest purposes
• Withdraw consent: Where processing is based on consent, withdraw it at any time

8. Cookies

We use one cookie: rudraai_cookie_consent — a first-party cookie that stores whether you have accepted or declined our cookie notice. It does not track you. It expires after 12 months. We do not use advertising cookies, third-party tracking cookies, or analytics cookies at this time.

9. Data Security

We use HTTPS on all pages, environment variables for all secrets, and access controls to limit who can read form submissions. We do not store form data in a database — submissions go directly to email. Email accounts are protected by two-factor authentication.

10. International Transfers

We are based in India. If you are in the EU/EEA, your data may be transferred to India and processed there. We take appropriate safeguards including contractual protections with our email provider.

11. Children

Our services are not directed at children under 16. We do not knowingly collect data from minors. If you believe we have collected data from a child, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. We will update the 'Last updated' date at the top of the page. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

To exercise your rights, request deletion, or ask any privacy question, email us at privacy@rudraai.online. We will respond within 30 days.