Privacy policy

Overview and scope

This Privacy Policy explains how Curiosity.AI Private Limited (“Curiosity AI”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you visit curiosityai.co (the “Website”) or contact us.

This policy covers the Website only. Personal data processed through our compute services is governed by the agreement signed with each customer.

1. Who we are

Curiosity.AI Private Limited provides dedicated GPU compute. For this policy, Curiosity AI is the Data Fiduciary (data controller) for personal data collected through the Website.

Contact: privacy@curiosityai.co

Registered office: Suite #22, 14th Floor, The Collective, Altimus, Worli, Mumbai 400026, Maharashtra, India

2. Information we collect

Information you give us

Name, email address, phone number, company name and job title submitted through contact or enquiry forms.
Details you share about your compute requirements, projects or partnership interests.
Any information you include when you email or message us.

Information collected automatically

IP address, browser type, device type, operating system and approximate location.

Information from third parties

Business contact details from partners, event organisers, referrals or public professional profiles, used for business communication.

3. How we use your information

We use personal data to:

Respond to enquiries and provide information on our services.
Assess and discuss compute, infrastructure or partnership requirements.
Send business updates, where you have opted in or where permitted by law.
Operate, secure and improve the Website.
Meet legal, regulatory and compliance obligations.
Prevent fraud, abuse and security incidents.

We do not sell personal data.

4. Legal basis for processing

We process personal data on the basis of:

Consent, given when you submit a form.
Legitimate uses permitted under the Digital Personal Data Protection Act, 2023 (DPDP Act), including responding to information you voluntarily provide.
Legal obligations under applicable Indian law.

For visitors from the European Economic Area or the United Kingdom, we rely on consent, performance of a contract, legitimate interests and legal obligation, as applicable.

We share personal data only as needed, with:

Service providers that support hosting, email, CRM and IT security, under contractual confidentiality and data protection obligations.
Group entities, where required to respond to your enquiry.
Business partners, only with your consent, where your requirement involves a joint offering.
Authorities, where required by law, court order or a lawful government request.
Successors, in the event of a merger, acquisition or sale of assets, subject to this policy.

Our enquiry form is delivered by Web3Forms, which forwards each submission to us by email from servers in the United States and does not store submissions.

6. Data retention

We retain personal data only for as long as needed for the purpose it was collected:

Enquiry and business contact data: up to 3 years from last interaction.

Data may be retained longer where required by law. When no longer needed, data is deleted or anonymised.

7. Data security

We apply reasonable technical and organisational safeguards, including encryption in transit, access controls, secure hosting and periodic security reviews, in line with the Information Technology Act, 2000 and related rules. No method of transmission or storage is fully secure, and we encourage you to use care when sharing information online.

8. International data transfers

Our service providers may store or process data outside India. Where this occurs, we transfer data only to jurisdictions permitted under Indian law and use contractual safeguards to protect it.

9. Your rights

Subject to applicable law, you may:

Access a summary of the personal data we hold about you.
Request correction, completion or updating of your data.
Request erasure of your data.
Withdraw consent at any time, without affecting prior lawful processing.
Nominate another person to exercise your rights in case of death or incapacity.
Raise a grievance with us, and escalate to the Data Protection Board of India.

Visitors from the EEA, UK or certain US states may have additional rights, such as data portability and the right to object to processing. To exercise any right, write to privacy@curiosityai.co. We will respond within the timelines set by applicable law.

10. Marketing communications

You can unsubscribe from marketing emails at any time using the link in the email or by writing to us.

11. Third-party links

The Website may link to external websites. We are not responsible for their privacy practices and recommend reviewing their policies.

12. Children’s privacy

The Website is intended for business users. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared data with us, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The revised version will be posted on this page with an updated “Last updated” date, and material changes will be highlighted on the Website.

14. Contact us

For questions, requests or grievances about this policy or your personal data, write to privacy@curiosityai.co.