Privacy Policy

Last updated: August 5th, 2026

1. Interpretation and Definitions

1.1 Interpretation

Words with the initial letter capitalized have meanings defined below. These definitions apply regardless of whether they appear in singular or plural.

1.2 Definitions

Company: refers to MIDGENIE AI LABS PRIVATE LIMITED, The Gateway by Wadhwa, Hira Nagar, Mulund West, Mumbai, Maharashtra 400080, India.

Consent Manager: has the meaning given under the DPDP Act, where applicable to the processing in question.

Cookies: are small files placed on Your computer, mobile device, or other device by a website, containing details of Your browsing history among other uses.

Country: refers to India.

Data Fiduciary: means the entity that determines the purpose and means of processing Personal Data under the DPDP Act. In respect of the website-visitor, demo-form, and marketing-contact data described in this Policy, the Company determines the purposes and means of processing. This Policy — and the Company's role as described above — does not extend to Personal Data processed for enterprise Platform Users; that processing is addressed separately in Our Enterprise Data Processing Policy, under which the Subscribing Organization is the Data Fiduciary and the Company acts only as a Data Processor.

Data Principal: means the individual to whom the Personal Data relates ("You").

Device: means any device that can access the Website, such as a computer, mobile phone, or tablet.

Personal Data: means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act.

Service Provider: means any natural or legal person who processes data on behalf of the Company.

Usage Data: refers to data collected automatically, either generated by use of the Website or from the Website infrastructure itself.

You: means the individual visiting the Website, submitting a demo request, or otherwise engaging with Us as a prospective customer or marketing contact.

2. Data We Collect

2.1 Personal Data

When You visit the Website, submit a demo request, or otherwise contact Us, We may collect:

• Name
• Email address
• Phone number (where provided)
• Company name and job title (where provided)
• Any other information You choose to include in a demo request or contact form

2.2 Usage Data

Usage Data is collected automatically and may include Your Device's IP address, browser type and version, pages visited, time and date of visit, time spent on pages, device identifiers, and other diagnostic data. When accessed via mobile device, We may also collect device type, unique device ID, IP address, operating system, browser type, and other diagnostic data.

2.3 Tracking Technologies and Cookies

We use Cookies (browser and Flash) and web beacons to monitor activity and store information. Cookies may be session-based or persistent. You may refuse cookies through Your browser settings, though some parts of the Website may not function properly as a result. We use cookies for essential site functionality, remembering preferences, and analytics/performance tracking.

3. How We Use Your Data

We use Your Personal Data to:

• Respond to Your demo requests and inquiries
• Provide and maintain the Website
• Send You marketing communications about mple.ai's products and services, where You have consented or as otherwise permitted by law (You may opt out at any time)
• Manage customer support requests
• Conduct business transactions such as mergers, acquisitions, or asset transfers, subject to confidentiality obligations
• Perform data analysis to improve the Website and Our marketing

4. Retention of Your Personal Data

We retain Personal Data collected under this Policy only as long as needed for the purposes outlined above and to comply with legal obligations — generally for the duration of Our prospective or ongoing commercial relationship with You, plus a reasonable period thereafter, unless a longer period is legally mandated.

Usage Data is generally retained for a shorter period, unless required for security, improvement purposes, or a longer period is legally mandated.

Personal Data is stored on secure cloud servers in India, with encryption in transit and at rest. Access is restricted to authorized personnel and is logged for audit purposes.

5. Your Rights as a Data Principal

Consistent with the DPDP Act, You have the following rights:

Right to be informed and give consent: Before We collect any Personal Data, We will clearly explain what We need, why, and how it will be used, and We will only collect it with Your explicit consent where required.

Right to access Your data: You may request access to the Personal Data We hold about You, to review and verify its accuracy and completeness.

Right to correction and erasure: If You find errors or missing information in Your data, You may request correction. You may also request erasure of Personal Data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations.

Right to grievance redressal: You may raise a grievance regarding the processing of Your Personal Data with Our Grievance Officer (Section 6), who will respond within the timelines prescribed under the DPDP Act.

Right to nominate: You may nominate another individual to exercise Your rights under the DPDP Act in the event of Your death or incapacity, by writing to the Grievance Officer.

Right to withdraw consent: You may withdraw consent for Us to process Your Personal Data at any time. On withdrawal, We will stop processing Your data for the purpose originally agreed upon, unless continued processing is required by law. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact Our Grievance Officer using the details in Section 6.

6. Grievance Officer

In accordance with the DPDP Act, We have appointed a Grievance Officer to address Your concerns regarding Personal Data processing.

We will acknowledge and respond to grievances within the timelines prescribed under the DPDP Act and its rules.

7. Children's Privacy

The Website is not intended for individuals under the age of 18, in line with the DPDP Act's treatment of children. We do not knowingly collect Personal Data from children. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact the Grievance Officer immediately, and We will take steps to delete such data.

8. Links to Other Websites

The Website may contain links to external sites not operated by Us. We are not responsible for the content or privacy practices of any linked site, and this Policy does not extend to them.

9. Platform Users (Enterprise Employees)

If You are accessing the mple.ai Service through Your employer or another organization that has licensed the Service, this Policy does not apply to You. Please refer to Our Enterprise Data Processing Policy for information about how Your Personal Data is processed, and contact Your organization's administrator to exercise any data-rights requests.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of material changes by email (where We hold one for You) or through the Website, and will update the "Last updated" date above. You are encouraged to review this Policy periodically.

11. Contact Us

For any questions about this Privacy Policy, contact: