Privacy Policy
At QG AI, we are committed to protecting your privacy and ensuring the security of your personal information.
Last updated: March 2026
This Privacy Policy describes how Quantum Gandiva AI Private Limited (CIN: U62099AP2025PTC120922) (“QG AI”, “we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website at quantumgandivaai.com (the “Website”). This policy is published in compliance with the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000.
Information We Collect
Information You Provide
When you email us, apply for positions through our careers page, or join waitlists, you may provide your name, email address, phone number, and other details you choose to share. We only collect information that you actively provide to us.
Automatically Collected Information
Our hosting provider (Vercel) may collect limited technical information such as your IP address, browser type, and pages visited. This is standard web server logging and is not used for tracking or profiling.
Cookies
Our Website currently does not set any analytics, advertising, or tracking cookies. Only essential cookies required for basic website functionality may be used. See our Cookie Policy for details.
How We Use Your Information
Communications
To respond to your enquiries and communications.
Applications
To process job applications submitted through our careers page.
Waitlists
To manage waitlist registrations for upcoming services.
Legal Compliance
To comply with applicable laws and regulatory obligations.
What We Do NOT Do
We do NOT use your information for automated decision-making or profiling. We do NOT sell, rent, or share your personal information with third parties for marketing purposes.
Platform Integration Services
We are developing platform integration services. The following describes data practices that will apply when these services become available to authorised users.
Communication Data
Email read, compose, and send capabilities via Gmail and Outlook. Instant messaging via WhatsApp Business (Meta). Call transcriptions where applicable. All communication data is accessed solely to provide the requested integration services.
Calendar Data
Read, create, and manage calendar events via Google Calendar and Outlook Calendar to enable scheduling and availability features.
Contact Data
Names, email addresses, and phone numbers from connected platforms to enable unified communication features.
How We Handle Integration Data
- OAuth 2.0 authentication — we never store your passwords
- TLS 1.2+ encryption for data in transit
- AES-256 encryption for data at rest
- Data processed solely for providing integration services — never for profiling, advertising, or any unrelated purpose
- Data from Meta platforms (WhatsApp Business) is used only as reasonably necessary to support messaging with the relevant user, in compliance with Meta Platform Terms
- Never sold, rented, licensed, or shared with third parties for marketing or any purpose outside of providing our services
- We do not attempt to decode, re-identify, or de-anonymise any anonymised data
- Stored on AWS EU-West-2 (London)
- Users can revoke access at any time
Data Retention for Integrations
Integration data is retained while your account remains connected. Upon disconnection:
- OAuth tokens: deleted immediately
- Cached data: deleted within 24 hours
- Messages: deleted within 48 hours
Upon account deletion: all data removed within 7 business days. Billing records retained for 6 years per Indian tax law. Anonymised analytics may be retained indefinitely.
Third-Party Providers
Integration services rely on Google (Gmail, Calendar), Microsoft (Outlook, Calendar, Teams), and Meta (WhatsApp Business). Each provider has their own privacy policies. Access is limited to the permissions you explicitly grant.
Data Protection & Security
Security
We use HTTPS/TLS encryption across the entire Website and rely on secure hosting provided by Vercel.
Data Minimisation
We only collect personal information that is necessary for the purposes described in this policy.
Access Controls
Access to personal information is limited to authorised personnel only.
Vulnerability Reporting
If you discover a security vulnerability in our systems, please report it responsibly to info@quantumgandivaai.com with the subject "SECURITY". We take all reports seriously and will respond promptly.
Incident Response
In the event of a data breach or security incident, we will notify affected users and relevant authorities (including Meta where platform data is involved) as required by applicable law and platform terms.
Data Retention
Contact Enquiries
Retained for 2 years or until you request deletion, whichever is sooner.
Job Applications
Retained for 1 year after the position is filled, unless you request earlier deletion.
Waitlist Data
Retained until the relevant service launches or you opt out, whichever is sooner.
Integration Services
See the "Data Retention for Integrations" subsection under Platform Integration Services above.
Billing Records
Retained for 6 years as required under the Indian Income Tax Act.
Your Rights
Under the DPDP Act 2023 (India)
You have the right to access your personal data, correct inaccurate data, request erasure, seek grievance redressal, and nominate another person to exercise your rights.
International Visitors
We respect data protection rights under your local laws. If you have questions about how your data is handled, please contact us.
Exercising Your Rights
To exercise any of these rights, please email us at info@quantumgandivaai.com. We will respond within 30 days.
Grievance Officer
Designated Officer
Designated under Section 43A of the Information Technology Act 2000 and Rule 5(9) of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011:
Contact Details
Name: Veerendra Rokkam | Phone: +91 7702045409 | Email: veerendra@quantumgandivaai.com | R&D Office: D.No: 54-11-43/3, Flat No: 201, Second Floor, Dhavala Grand, Adithya Nagar, Visakhapatnam 530022, Andhra Pradesh, India
Response Time
The Grievance Officer will respond to your complaint within 30 days of receipt.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: info@quantumgandivaai.com
Registered Office: 3-223, Thudi, Veeraghattam, Srikakulam, Andhra Pradesh, India 532460
R&D Office: D.No: 54-11-43/3, Flat No: 201, Second Floor, Dhavala Grand, Adithya Nagar, Visakhapatnam 530022, Andhra Pradesh, India
Related Policies: