This explains what Incluziv AI Accelerate does with personal data. It covers two different people: our customers, and the people whose business contact details appear in what we sell. The second group did not choose us, so their part comes first.
We compile business contact information — a name, a job title, a work email address, a company — from sources that publish it: company websites, public business listings, business registries, and licensed contact databases. When a customer asks for it, we may also give them a mobile number or a personal email address that a licensed contact database holds for you; they are told it is personal, and to stop if you ask. We never give out the personal email address of anyone in the EU, the UK or Switzerland, and we hold nothing about you outside your professional role.
You can ask what we hold about you, ask us to correct it, or ask us to remove it entirely. Write to remove@incluziv.in and we will action it and confirm, or use the removal page — no account, no reason needed.
Once removed, your address is taken out of every customer account on this service and added to a permanent suppression list so it is not collected again by a later search.
We hold your name and email address (and, if you sign in with Google, your profile picture); the website and business brief you give us; your searches; the companies you open; the emails you send through the service and the replies to them; the files you upload; and your payment references. We do not hold your card details — Razorpay does. We also keep a short record of how the account is used: the days each person opened it, how many searches were made, the days the plans page was opened, and whether a payment that was started went through, so that we can help you get value from it and follow up with you. If you sign in with a code by email, we keep only a scrambled form of the code, for ten minutes.
If the account owner adds you to their team, we hold your email address, your name, your role and when you last signed in, so that you land in that account. What you note, mark or assign on a prospect is recorded with your name for your colleagues to see. If you import a spreadsheet of companies, it becomes part of that account's list, marked as imported; we add nothing to those rows that the file did not say.
We do not sell customer data, and we do not use one customer's brief to serve another.
From our home page we keep the name, work email, phone number and company you give us, the time you booked, what you want to talk about and what you told us you sell, and nothing else — not the address you wrote from. We use them to hold your slot, send you the calendar invitation, and call or write back to you; our team is told at its own address. You receive only that invitation (and our reply), never a newsletter. Both are kept for one year.
On our home page you can type your website, or two lines about what you sell, to see the kind of companies we would reach for you. We read only that website's public pages, as any visitor would, and never a page that asks not to be read. We keep what we found for seven days, so the same site comes back at once, and we keep the site's address, what it says you sell, who buys it and how many companies matched, so that we can see how the preview is used. The address you wrote from is held in memory for the day's limit and never stored. The preview shows companies only — no person, email address or phone number.
If you add your own booking page (Google Calendar, Calendly, Cal.com and the like), replies the assistant drafts for people who ask for a call end with it, through a link on our domain; when the person opens it, we note when, on that company in your account, and send them on to your page. We are not told about the bookings themselves.
Where you use our reply tracking, campaign emails carry a reply address on our domain. Replies to those emails reach us, are recorded against the campaign, and are forwarded to you. This gives us no access to your mailbox: we cannot read your other mail, your contacts or your calendar. The one exception is if you choose to connect your mailbox, below.
Reply contents are kept for 90 days and then deleted; only the fact that a reply happened, and what kind of reply it was, remains.
If you choose to, you can connect your own Gmail or Outlook / Microsoft 365 mailbox from Settings (under Connections), so that we can find your clients, the companies you deal with and the first emails of yours that got a reply. Nobody else can connect it for you, and each person in a team connects only their own.
Incluziv AI Accelerate's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can also remove our access at any time from your Google Account (Security → Third-party apps) or your Microsoft account (Apps and services), though we hold none to remove.
Alerts to you. If you tick the box on your brief, our own WhatsApp number sends you account alerts — a prospect replied, credits added, a payment received, your plan's dates. We keep your number, the words you agreed to and when. Reply STOP, or turn them off on your brief, and they stop at once.
Your own number, if you connect it. Connecting your WhatsApp Business number through Meta lets this service receive the messages you exchange on that number, the contacts you sync and, once, up to six months of chat history, as Meta sends them. From that we keep, for companies on your prospect list only, the time of the last message each way, the latest message text and the number; for numbers not on your list, the last 100 messages so you can link them to a prospect. Meta's access token is stored encrypted and is never shown to anyone. Messages we send for you are only replies inside the 24 hours after the person last wrote, when you press send. Disconnect at any time from your brief or from your WhatsApp Business app (Settings → Account → Business Platform); we then delete the token and stop receiving anything.
Everything held for customers — accounts, prospect lists, emails and replies, uploaded files and reports — is encrypted by us before it is stored (AES-256), with the key kept in Google Cloud's secret store in India, and Google encrypts its storage again. Data travels only over encrypted connections (HTTPS) and is stored on Google Cloud in Mumbai, with a daily encrypted backup, also in Mumbai, that nobody can alter or delete for 30 days. Only the service itself and the few people who run it can reach it; any access to the data or the key other than by the service is logged and raises an alert. Each customer sees only their own account, and your sign-in is kept where the page's own scripts cannot read it.
If personal data is ever exposed, we tell the people affected and the Data Protection Board of India without delay, as the Digital Personal Data Protection Rules 2025 require, and report the incident to CERT-In.
Google Analytics, on our home page only. If you press Allow on the home page, Google Analytics counts your visit with its cookies: the pages of the home page you saw, roughly where you came from, your browser and device, and a few steps — whether you looked at the prices, chose yearly, started the free preview, booked a call or signed in. It never receives your name, email, company or anything you type. Until you allow it, it gets only counts without cookies. It is not used inside the app once you sign in, and not for advertising. To change your mind, clear this site's data in your browser.
Nobody else. We do not sell personal data, do not share it with advertisers, and there is no tracking on this site beyond keeping you signed in, the record of account use described above, and Google Analytics on the home page if you allow it — no advertising cookies. Some of these providers process data outside India (for example Anthropic, Meta and our email provider); the law allows this, and we send them only what the task needs.
Customer accounts and the reports you have paid for: for as long as your account is open. Payment records: seven years after, because tax law requires it — and nothing else with them. Reply contents: 90 days. The text of an email you sent: 30 days after it went (what was sent to whom, and when, stays on the account). What was found in a mailbox you connected: until you choose what to use, and never more than seven days. Delivery and security logs: about a year. The record of account use: 70 days. Calls booked and requests for a proposal from our home page: one year. Backups: 31 days, so deleted data is gone from them within 31 days too. Suppression lists: permanently, because that is what makes them work.
To delete your account and everything held for it — including WhatsApp data — the account owner can do it at once under Settings → Your data, or write to the grievance officer below; it is done within 30 days and confirmed to you. The same place lets you download a copy of everything held for the account, and sign out on every device.
Under the Digital Personal Data Protection Act 2023 you may ask for access, correction, or erasure of your personal data, nominate someone to act for you, and complain if we get it wrong.
Sandeep Bhola
sandeep@incluziv.in
Lower Ground Floor, Rasvilas, Saket District Centre, New Delhi 110017
We answer within 30 days. If you are not satisfied, you may escalate to the Data Protection Board of India.
Gig Consultants, trading as Incluziv AI Accelerate
Lower Ground Floor, Rasvilas, Saket District Centre, New Delhi 110017
GSTIN 07AAVFG8581H1ZN
leads@incluziv.in