Privacy notice

This notice explains what personal data Ayion collects through this website, why, and what control you have over it. If anything is unclear, write to us at [privacy contact email].

Who we are

Ayion is operated by [Registered company name], [CIN], [registered office address] (“Ayion”, “we”). Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here.

Data we process for our clients as part of a project is governed by our contract with that client, not by this notice.

What we collect, and why

We collect only what we need for each purpose below, and we use it only for that purpose.

If you write to us through the contact form

• What: your name, email address and message, your company if you give it, the language of the page you wrote from, and the version of the consent text you agreed to and when.
• Why: to read your message, reply to it, and keep a record of our conversation with you. Nothing else.

If you email us or apply for a job

• What: your email address and whatever you choose to send us, such as a CV.
• Why: to reply, and for job applications, to consider you for a role.

This website

The website does not set cookies. If analytics is switched on, the website sends page views and button presses to PostHog, in its EU region, without cookies and without any identifier stored in your browser. [Describe how PostHog handles IP addresses in this project’s configuration].

Where it is stored, and who processes it

Some service providers process data on our behalf, only for the purposes above and under contract:

• Supabase, to store messages sent through the contact form ([Supabase region])
• Resend, to deliver those messages to our team’s inbox. Email delivery may happen outside India.
• Cloudflare, to serve this website securely
• PostHog, for website analytics in its EU region, only if analytics is switched on
• [Email provider for the team’s inbox]
• [Other processors]

We do not sell personal data.

Who can see it

• The people at Ayion who handle your enquiry or application, and no one else at Ayion.
• The service providers above, only to do their part.
• We may disclose data where the law requires it. [Describe the process for lawful requests].

How long we keep it

• Contact form messages and emails: [retention period] after our last exchange with you, unless we go on to work together, when the contract sets out what we keep.
• Job applications: [retention period] after the role is filled, unless you ask us to keep your application for future roles.

Your rights, and how to use them

You can:

• Access the personal data we hold about you and how we use it.
• Correct, complete or update it.
• Delete it, unless the law requires us to keep something.
• Withdraw consent at any time, as easily as you gave it, by writing to [privacy contact email]. Withdrawing consent does not affect what was done before, but we stop from then on.
• Nominate someone to exercise these rights for you if you are unable to.

Write to [privacy contact email] to use any of these rights. We may ask you to confirm your identity first.

Grievances

Our grievance officer is [Grievance officer name], reachable at [grievance email] or [postal address]. We respond within [number of days] and in any case within 90 days, as the DPDP Rules, 2025 require.

If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Children

This website is for adults and businesses. We do not knowingly collect personal data from children. If you believe a child has given us their data, write to [privacy contact email] and we will delete it.

Security

We protect personal data with encryption in transit, access controls and [other safeguards]. If a breach affects your personal data, we will tell you and the Data Protection Board of India, as the law requires.

Changes to this notice

When we change this notice, we update the version number and effective date above. If a change affects how we use data you have already given us, we will ask for your consent again where the law requires it.