Privacy Policy
This Privacy Policy describes how PSfy Global Private Limited ("we," "us," or "our"), operating the STRAI8 TrustedAI™ platform available at strai8.ai, collects, uses, stores, and protects your personal data. By accessing or using our platform, you consent to the practices described in this policy.
1.Data We Collect
We collect the following categories of data:
- Identity Data: Name, designation, organization name, email address, phone number
- Account Data: Login credentials, subscription tier, access logs
- Assessment Data: AI governance questionnaire responses, uploaded policy documents, risk assessment inputs
- Output Data: STRAI8 Trust Score results, risk reports, governance gap analyses
- Technical Data: IP address, browser type, device information, session identifiers
- Usage Data: Pages visited, features used, interaction patterns
- Cookie Data: Session cookies, analytics cookies (see Cookie Policy)
- Payment Data: Transaction identifiers (payment details processed by third-party gateways)
2.Purpose of Collection
We collect your data for the following purposes:
- To provide, maintain, and improve the STRAI8 TrustedAI™ platform
- To generate AI governance Trust Scores and risk assessment reports
- To authenticate users and manage account access
- To send service notifications, product updates, and contractual communications
- To comply with applicable laws including DPDPA 2023 and GDPR
- To conduct research and analytics to improve our AI governance models
- To process subscription payments and invoices
3.Legal Basis for Processing
Our legal bases for processing personal data include:
- Consent: Where you have provided explicit consent for specific processing activities
- Contractual Necessity: Processing required to deliver services you have subscribed to
- Legal Obligation: Processing required by applicable law, including DPDPA 2023
- Legitimate Interests: Processing necessary for fraud prevention, security, and platform improvement
4.Data Storage and Retention
Your data is stored on secure cloud infrastructure located primarily in India, with backup facilities complying with applicable data localization requirements.
- Account and identity data: Retained for the duration of the subscription plus 3 years
- Assessment and Trust Score data: Retained for 5 years for audit and compliance purposes
- Transaction data: Retained for 7 years as required under Indian accounting regulations
- Log and technical data: Retained for 12 months
Upon account deletion, personal data is anonymized or deleted within 30 days, except where retention is required by law.
5.Third-Party Integrations
We may share your data with the following categories of third parties:
- Cloud Infrastructure Providers: AWS, Azure (for hosting and compute)
- Analytics Providers: Google Analytics (anonymized usage data)
- Payment Processors: Razorpay, Stripe (payment data only)
- Communication Services: SendGrid (transactional emails)
- AI Model Providers: OpenAI, Anthropic (for AI-assisted assessments, subject to data processing agreements)
7.Your Rights
Under DPDPA 2023 (India) and applicable international laws, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Correction: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal retention obligations)
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing
- Right to Grievance Redressal: Lodge a complaint with our Grievance Officer
To exercise your rights, contact us at: legal@strai8.ai
8.AI Assessment Data
Data provided during AI governance assessments — including uploaded documents, questionnaire responses, and organizational information — is processed solely for the purpose of generating your STRAI8 Trust Score and associated reports. This data is not used to train our AI models without your explicit consent.
9.International Data Transfers
Where data is transferred outside India, we ensure appropriate safeguards are in place including Standard Contractual Clauses and adequacy decisions where applicable.
10.Children's Data
Our platform is not directed at individuals under the age of 18. We do not knowingly collect data from minors.
11.Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email or platform notification. Continued use of the platform constitutes acceptance of the revised policy.
12.Contact
- Privacy contact
- legal@strai8.ai
- Grievance Officer
- grievance@strai8.ai
- Organisation
- PSfy Global Private Limited
- Address
- Noida, Uttar Pradesh, India