Privacy Policy

1. Introduction

Welcome to SpaceBlanket.AI. This Privacy Policy applies when you visit our website, contact us, request a consultation, purchase a service, or use our AI automation, chatbot, voice agent, outreach, and workflow automation services.

This policy is intended to be clear, accessible, and compliant with applicable Indian privacy requirements, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 to the extent applicable.

2. Who We Are

SpaceBlanket.AI is an AI automation agency based in Bangalore, Karnataka, India. We build and operate AI systems for business workflows, customer engagement, sales outreach, CRM automation, chatbots, voice agents, and related services.

For information collected directly through our website, sales process, billing, support, and business operations, SpaceBlanket.AI acts as the data fiduciary or controller. For personal data that a client provides for processing inside a client project, SpaceBlanket.AI generally acts as a service provider or processor.

3. What Data We Collect

• Identity Data: name, job title, company name, role, and professional profile information.
• Contact Data: email address, phone number, postal address, social media handle, and communication preferences.
• Business Data: company details, industry, team size, business requirements, project briefs, CRM fields, lead information, workflow details, and demo or consultation information.
• Account and Support Data: login identifiers, support tickets, messages, call notes, meeting recordings or transcripts where applicable, service usage records, and feedback.
• Technical and Usage Data: IP address, device identifiers, browser type, operating system, pages visited, referral source, approximate location, cookies, analytics identifiers, diagnostics, and website interaction history.
• Marketing and Advertising Data: campaign source, ad interaction, form submissions, consent status, newsletter preferences, and opt-out choices.
• Payment and Commercial Data: invoices, transaction references, billing address, tax details, plan details, order history, and payment status.
• AI Service Data: prompts, messages, transcripts, call recordings, chatbot conversations, voice agent outputs, workflow logs, CRM sync logs, and other content processed to deliver a client service.

4. How We Collect Data

• Direct interactions: when you fill out a form, schedule a call, request a demo, subscribe to updates, sign an agreement, make a payment, or communicate with us.
• Automated technologies: when cookies, pixels, analytics tools, server logs, and similar technologies collect technical and usage data.
• Client systems: when a client connects or shares CRM, spreadsheet, call, chat, email, or workflow data so we can deliver an agreed service.
• Third-party sources: such as business directories, social media platforms, ad networks, analytics providers, payment processors, calendar tools, communication providers, and integration partners.

5. How We Use Data

• To provide, operate, maintain, and improve our website, products, and services.
• To respond to inquiries, schedule consultations, prepare proposals, onboard clients, and provide support.
• To design, configure, test, monitor, and troubleshoot AI automation systems, chatbots, voice agents, integrations, and workflows.
• To process transactions, issue invoices, manage subscriptions or retainers, and maintain business records.
• To personalize website content, understand visitor behavior, measure performance, improve user experience, and run analytics or conversion tracking.
• To send service notices, project updates, security alerts, administrative messages, and relevant marketing communications where permitted.
• To detect, prevent, and respond to fraud, misuse, security incidents, spam, unauthorized access, and technical issues.
• To comply with legal obligations, enforce agreements, resolve disputes, and protect our rights, users, clients, and business.

6. Legal Basis and Consent

We process personal data when we have a lawful reason to do so, including your consent, performance of a contract, compliance with legal obligations, protection of legitimate business interests, fraud prevention, security, and delivery of services requested by you or by our clients.

Where consent is required, we seek it in a clear manner. You may withdraw consent at any time by contacting us, but withdrawal may affect our ability to provide certain services.

7. Cookies, Analytics, and Advertising

We use cookies and similar technologies to operate the website, remember preferences, analyze traffic, improve performance, measure campaigns, and support advertising or retargeting.

We may use services such as Google Analytics, Google Tag Manager, Google Ads, Microsoft Clarity, Meta pixels, LinkedIn pixels, or similar tools. These providers may process information according to their own privacy policies. You can manage cookies through your browser settings and may opt out of certain Google advertising personalization through your Google account ad settings.

8. How We Share Information

We do not sell personal information. We may share information only when reasonably necessary for the purposes described in this policy, including with:

• Service providers that help us host, analyze, secure, support, communicate, bill, and operate our business.
• AI, automation, communication, CRM, telephony, email, payment, cloud, analytics, and integration providers used to deliver client projects.
• Professional advisers such as lawyers, accountants, auditors, and consultants.
• Government authorities, regulators, courts, or law enforcement when required by law or to protect rights and safety.
• Business transferees if we are involved in a merger, acquisition, financing, restructuring, or sale of business assets.

9. AI Systems and Client Data

Our services may involve AI models, automation tools, call systems, chat systems, CRM integrations, spreadsheets, messaging platforms, and third-party APIs. Data processed through these systems is used to deliver the contracted service, monitor quality, debug issues, improve workflow performance, and maintain security.

We do not use client confidential data or end-customer personal data to train public AI models unless a client has expressly authorized that use in writing.

10. Data Security

We use reasonable technical, administrative, and organizational safeguards designed to protect personal data from unauthorized access, disclosure, alteration, loss, misuse, and destruction. These safeguards may include access controls, role-based permissions, encryption in transit where supported, secure cloud infrastructure, monitoring, backups, vendor review, and internal handling practices.

No method of transmission or storage is completely secure. If we become aware of a data breach that requires notification, we will take appropriate steps under applicable law.

11. Data Retention

We retain personal data only for as long as needed for the purposes described in this policy, including to provide services, maintain records, comply with legal, tax, accounting, and contractual requirements, resolve disputes, enforce agreements, and protect security.

When data is no longer needed, we delete, anonymize, or securely archive it where reasonably possible.

12. Your Rights and Choices

• Access the personal data we hold about you.
• Request correction or updating of inaccurate or incomplete data.
• Request deletion or erasure of personal data, subject to legal, contractual, and legitimate retention requirements.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications.
• Ask us to restrict or object to certain processing where applicable.
• Nominate another person to exercise rights on your behalf where applicable law provides for nomination.
• Raise a complaint or grievance regarding our handling of your personal data.

13. International Data Transfers

We may use cloud, AI, analytics, payment, communication, and infrastructure providers located in India and other countries. When personal data is transferred outside India, we take reasonable steps to ensure that it receives appropriate protection in accordance with this Privacy Policy, applicable contracts, and applicable law.

14. Third-Party Links and Services

Our website and services may link to external websites, platforms, tools, or integrations. We are not responsible for the privacy practices, content, security, or policies of third-party services. Please review their privacy policies before providing information to them.

15. Children's Privacy

Our website and services are intended for businesses and are not directed to children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

16. Contact and Grievance Officer

If you have questions, requests, complaints, or concerns regarding this Privacy Policy or our handling of personal data, contact us at:

17. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page, with the effective date updated accordingly.