Privacy Policy

Last updated: April 2026 · Effective date: April 2026

At a glance: SuiteAI collects the minimum data we need to deliver the plugins you engage us for. We never sell your data, we host on Indian-compliant infrastructure where requested, and you can request deletion at any time under India's Digital Personal Data Protection Act 2023 (DPDP Act).

1. Who we are

SuiteAI is operated by SuiteAI (the “Company”, “we”, “us”). Our registered office is in India. For any privacy question, email hello@suiteai.in.

2. What we collect

Information you give us directly

Contact details: name, email, phone, company, job title when you book a call or submit a brief.
Project context: what you want to build, budget range, team size, tools in your stack.
Business data (during an engagement): the specific datasets we need to run your plugins (e.g. bank statements for reconciliation, employee data for payroll, invoices for AR). The scope is defined per engagement.

Information we collect automatically

Usage analytics: pages visited, time on page, referrer, device type (via Google Analytics 4). Aggregate only, no PII.
Cookies: functional cookies for site operation and optional analytics cookies. You can disable non-essential cookies.

3. How we use it

To respond to your enquiry and run the plugins you’ve engaged us for.
To deliver, monitor and improve our services.
To send operational emails (e.g. plugin status, monthly reports). Marketing emails only with your explicit opt-in.
To meet legal obligations (tax filings, audit trails, compliance requests).

4. How we store + protect your data

Hosting: primary infrastructure on AWS (Mumbai region), with website content delivered via a global CDN. For Indian clients with data-residency requirements (BFSI, healthcare, regulated industries), we offer Indian-region deployment on AWS Mumbai or your own cloud account. Specified per engagement.
Encryption: all data encrypted in transit (TLS 1.3) and at rest (AES-256).
Access controls: least-privilege access, MFA required for all team members, audit logs retained for 1 year.
Third-party AI models: when we call Claude, OpenAI or similar APIs for plugin functions, we operate under their enterprise / zero-retention agreements. Your data is not used to train their models.

5. Who we share it with

We share your data only with:

Sub-processors we’ve contracted: hosting (AWS), analytics (Google), AI providers (Anthropic / OpenAI), payment processors (Razorpay / Stripe). Current list available on request.
Regulators or courts when legally compelled.
We do not sell your data to third parties, ever.

6. Your rights (DPDP Act 2023)

As a Data Principal under India’s DPDP Act, you have the right to:

Access the data we hold about you.
Correct any inaccurate data.
Request deletion (“right to erasure”) subject to legal retention requirements.
Withdraw consent for non-essential data processing.
Nominate another person to exercise these rights on your behalf.
Register a grievance with our Data Protection Officer (see below) or the Data Protection Board of India.

To exercise any of these, email hello@suiteai.in with the subject line “DPDP request”. We respond within 7 business days.

7. Data retention

Active engagement data: retained for the duration of the engagement plus 1 year for audit purposes.
Financial records: retained for 8 years as required by Indian tax law.
Website analytics: 26 months (Google Analytics default).
Enquiry data (no engagement): 12 months, then deleted unless you’ve opted in to marketing.

8. Cookies

We use cookies for core functionality (session, CSRF protection) and optional analytics (Google Analytics 4). You can disable non-essential cookies via your browser settings without losing core site functionality.

9. International transfers

Our primary hosting is AWS Mumbai (India); website content is served worldwide via a global CDN, and some sub-processors (analytics, AI providers, form handling) may process data in the US or EU. For clients requiring India-only data residency, we offer AWS Mumbai or BYO-cloud deployment. State this upfront and we will configure accordingly.

10. Children

SuiteAI is a B2B service for companies. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We update this policy as our services evolve. Material changes will be communicated to active clients via email. The “Last updated” date at the top always reflects the current version.

12. Contact & grievance officer

For any privacy concern, data-subject request, or grievance:
Data Protection Officer: [To be named]
Email: hello@suiteai.in
Subject line: DPDP request

This is a template policy. Before going live with real clients, have this reviewed by a lawyer familiar with DPDP Act 2023 + your specific jurisdictions. The Data Protection Officer name must be filled in.