Legal

Privacy Policy

How Leap91 Solutions Pvt Ltd collects, uses, and protects personal data on the ConsentifyAI website. Effective 27 July 2026.

This Privacy Policy explains how Leap91 Solutions Pvt Ltd (“ConsentifyAI”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit this website, submit a contact or demo enquiry, or otherwise interact with us online.

For the purposes of India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025, we act as a Data Fiduciary in respect of the personal data described in this policy.

This policy applies only to our marketing website and related enquiry channels. When we process personal data on behalf of a customer through our Consent Management or Cookie Management products, we do so as a Data Processor under that customer’s instructions and a separate agreement. Those processing activities are not covered by this policy.

1. Personal data we collect

We collect personal data in the following ways:

  • Information you provide. When you fill in our contact form, book a demo, or email us, we collect your name, work email address, company name, phone number (if provided), and the content of your message or request.
  • Information collected automatically. Our hosting provider and any analytics tools we use may collect technical data such as IP address, browser type and version, device type, referring URL, pages visited, and timestamps. This helps us operate, secure, and improve the website.
  • Cookies and similar technologies. We use cookies as described in Section 4 below.

We do not intentionally collect sensitive personal data through this website, and we ask that you do not include such information in enquiry forms or emails unless it is necessary for us to assist you.

2. Purpose of processing

We use personal data to:

  • respond to your enquiries and schedule demos or sales conversations;
  • provide information about ConsentifyAI products and services that you have requested or agreed to receive;
  • operate, maintain, secure, and improve this website;
  • analyse aggregated usage patterns to understand how the site is used;
  • comply with applicable legal and regulatory obligations; and
  • establish, exercise, or defend legal claims where necessary.

We do not use personal data collected through this website for automated decision-making that produces legal or similarly significant effects on you.

3. Lawful basis

We process personal data on the basis of your consent when you submit a form, book a demo, or opt in to non-essential cookies or communications. You may withdraw consent at any time by contacting us (see Section 8). Withdrawal does not affect processing carried out while consent was valid.

Where the DPDP Act permits certain legitimate uses without consent — for example, to comply with law, respond to legal process, or ensure the security of our systems — we rely on those provisions only to the extent they apply.

4. Cookies

Cookies that are strictly necessary for the website to function (for example, to remember a consent preference or keep the site secure) are always active. Functional, analytics, or marketing cookies are set only after you opt in, and you may change or withdraw that choice at any time through our cookie controls, where available.

For more background on how cookie consent relates to broader data consent under the DPDP Act, see our blog and Learn DPDP pages.

5. Sharing and disclosure

We do not sell personal data. We share it only as needed to operate this website and respond to you, including with:

  • Service providers who process data on our behalf under contract — for example, website hosting, form delivery (such as Web3Forms), email, and calendar/scheduling tools (such as Calendly);
  • Professional advisers (legal, accounting, or compliance) where reasonably necessary; and
  • Authorities where disclosure is required by law, regulation, or lawful request, or to protect our rights, users, or the public.

Where a service provider processes personal data outside India, we take steps consistent with the DPDP Act and applicable rules, including any government restrictions on cross-border transfer that may apply.

6. Retention

We retain personal data only for as long as needed to fulfil the purpose for which it was collected — typically for the duration of an active sales or support conversation and a reasonable follow-up period thereafter — unless a longer period is required by law or needed to resolve disputes. When data is no longer required, we erase or anonymise it.

7. Security

We apply reasonable technical and organisational safeguards appropriate to the nature of the data and the risks involved. These include encryption in transit (HTTPS), access controls on a need-to-know basis, and secure hosting practices. No method of transmission or storage is completely secure; if we become aware of a personal data breach that requires notification under applicable law, we will take the steps required.

8. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

  • obtain a summary of the personal data we hold about you and the processing activities we carry out;
  • request correction, completion, or updating of inaccurate or incomplete personal data;
  • request erasure of personal data that is no longer necessary for the stated purpose, subject to legal retention requirements;
  • withdraw consent previously given, where processing is based on consent;
  • nominate another individual to exercise your rights in the event of your death or incapacity; and
  • raise a grievance with us and receive a timely response.

To exercise these rights, email support@consentifyai.com. We may need to verify your identity before fulfilling a request. We will respond within a reasonable period as required under applicable law.

9. Grievance redressal

If you have a concern about how we handle your personal data, contact our grievance redressal channel at support@consentifyai.com. We will acknowledge and address your grievance in good faith and within a reasonable timeframe.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India in accordance with the DPDP Act and applicable rules.

10. Children’s data

This website is intended for businesses and professionals. It is not directed at children. We do not knowingly collect personal data of a child (as defined under the DPDP Act) without verifiable consent of a parent or lawful guardian. If you believe we have collected such data in error, please contact us and we will take appropriate steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, products, or legal requirements. When we do, we will revise the effective date at the top of this page. Where changes are material, we will provide additional notice on this website as appropriate.

12. Contact

For questions about this Privacy Policy or our handling of personal data, contact: