GDPR Policy

AIBI-Studio.com
Effective Date: 01 December 2025
Last Updated: 30 November 2025

1. Introduction & Our Commitment

AIBI-Studio (“we”, “us”, “our”, or “AIBI-Studio”), a division of Smart Group Incubations Private Limited, operates the website https://aibi-studio.com and related services (collectively, the “Platform”).

We are deeply committed to protecting your privacy and handling your personal data responsibly, transparently, and in full compliance with applicable laws including the Information Technology Act, 2000, Digital Personal Data Protection Act, 2023 (DPDPA), General Data Protection Regulation (EU) 2016/679 (GDPR) where applicable, CCPA/CPRA (California), LGPD (Brazil), and other relevant global privacy frameworks.

This Privacy Policy explains what information we collect, why we collect it, how we use, store, share, and protect it, and your rights regarding your personal data when you visit our website, request demos, subscribe to newsletters, attend events, apply for jobs, or engage with us as a prospective/incubated startup founder or enterprise client.

2. Who We Are

Data Controller AIBI-Studio (Smart 24×7 Response Services Pvt. Ltd.) Registered Office: GM 10, DLF 2, Gurgaon – 122002, Haryana, India Email for privacy queries: privacy@aibi-studio.com 

3. Categories of Personal Data We Collect

3.1 Automatically Collected Data

• IP address, browser type, operating system, referring URLs
• Device identifiers, approximate location (city/country level)
• Cookies, pixels, and similar technologies (see Section 9)
• Usage data: pages viewed, time spent, clickstream behavior

3.2 Information You Provide Directly

• Name, job title, company name, email, phone number
• Content of messages when you contact us via forms, email, or chat
• Resume/CV and professional details when applying for jobs
• Billing and payment information (processed via PCI-DSS compliant gateways only)
• Any additional data you voluntarily share during webinars, demos, or consultations

3.3 Data from Incubated Startups & Enterprise Clients When you become a client or incubated startup, we may process:

• Business contact details of team members
• KYC/AML documents (stored encrypted and access-restricted)
• Project-related data, including sample datasets (always under strict NDA & DPA)

4. Purposes & Lawful Bases of Processing

5. Data Sharing & Third Parties

We do not sell your personal data. We share only when necessary:

5.1 Service Providers (Processors)

• Cloud hosting: AWS Mumbai & Frankfurt regions
• Analytics: Google Analytics (anonymized IP), Hotjar (opt-out available)
• CRM & marketing: HubSpot, Mailchimp (double opt-in)
• Payment gateways: Razorpay, Stripe (PCI-DSS compliant)
• Communication: Intercom, Zoom

All processors are bound by Data Processing Agreements (DPAs) meeting DPDPA Section 8 & GDPR Art. 28 standards.

5.2 Legal & Safety We may disclose data if required by law, court order, or to protect rights, property, or safety.

5.3 Business Transfers In the event of merger/acquisition, your data may be transferred with prior notice and continued protection.

6. International Data Transfers

Data is primarily processed in India (Adequate country under DPDPA) and EU (AWS Frankfurt). Where transfers occur outside, we use:

• Standard Contractual Clauses (SCCs) approved by EU & Indian authorities
• Binding Corporate Rules (intra-group)
• Adequacy decisions where applicable

7. Data Retention Periods

After retention periods, data is securely deleted or anonymized.

8. Your Rights Under Applicable Laws

8.1 Indian Residents (DPDPA 2023)

• Right to Access, Correction, Erasure
• Right to Nomination (in case of incapacity)
• Right to Grievance Redressal within 30 days
• Right to withdraw consent

8.2 EU/UK Residents (GDPR)

• Right to Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17)
• Restriction (Art. 18), Data Portability (Art. 20), Object (Art. 21)
• Right not to be subject to automated decision-making

8.3 California Residents (CCPA/CPRA)

• Right to Know, Delete, Opt-Out of Sale (we do not sell), Non-discrimination

To exercise any right: privacy@aibi-studio.com (response within 30 days; identity verification required).

9. Cookies & Tracking Technologies

We use:

• Strictly necessary cookies (session management)
• Performance/analytics cookies (Google Analytics – anonymized)
• Functional cookies (language preferences)
• Targeting/marketing cookies (only with explicit consent)

You can manage preferences via our Cookie Banner or browser settings. Detailed Cookie Policy available at /cookie-policy.

10. Children’s Privacy

Our Platform is not directed at individuals under 18. We do not knowingly collect data from children.

11. Security Measures

We implement industry-leading safeguards:

• Encryption at rest (AES-256) and in transit (TLS 1.3)
• Zero-trust network architecture
• Regular penetration testing & vulnerability scans
• Role-based access & audit logging
• ISO 27001:2022 certified information security management system

12. Changes to This Policy

We may update this Policy periodically. Material changes will be notified via email (for registered users) and prominent website notice. Continued use after changes constitutes acceptance.

13. Grievance Officer (India – IT Rules 2021)

Grievance Officer Email: grievance@aibi-studio.com Response within 24 hours; resolution within 15 days.

14. Contact Us

For any privacy-related questions: Email: privacy@aibi-studio.com Post: Data Protection Team, AIBI-Studio, GM 10, DLF 2, Gurgaon – 122002, Haryana, India

Thank you for trusting AIBI-Studio with your data. We are committed to earning that trust every day.