Privacy Policy

1. Who we are

Digital Ignyte ("Digital Ignyte", "we", "us") is an AI automation practice that designs, builds and operates AI systems for founder-led businesses. We operate the website at digitalignyte.com and deliver client engagements under separate written agreements.

This policy explains what personal information we handle, why, and what you can ask us to do about it. We are the controller of the personal information described in this policy, except where we act as a processor on behalf of a client (see section 6).

2. What this covers

This policy applies to our website, our enquiry and contact forms, and our communications with prospective and current clients. It does not cover third-party websites we link to, or systems we build and hand over to a client once that client operates them under their own policies.

3. Information we collect

Information you give us

• Enquiry details — your name, email address, company, and whatever you choose to write in the enquiry form or in an email to us.
• Engagement correspondence — messages, call notes, documents and requirements you share while we scope or deliver work.
• Billing details — the information needed to invoice you. We do not collect or store full payment card numbers; payments are handled by third-party payment providers.

Information collected automatically

• Technical data — IP address, browser and device type, referring page, and pages viewed, collected through our hosting and analytics tooling.
• Usage data — how you move through the site, so we can see which sections are useful.

4. How we use information

• To reply to your enquiry and assess whether we are a sensible fit for your problem.
• To scope, deliver, support and improve engagements you have asked us to carry out.
• To send operational messages about work in progress, and invoices.
• To keep the site secure, diagnose faults, and understand aggregate usage.
• To meet legal, tax and accounting obligations.

Where the law requires a lawful basis, we rely on performance of a contract (delivering work you engaged us for), legitimate interests (running and securing our business, responding to enquiries), consent (non-essential analytics, where applicable), and legal obligation (tax and accounting records).

We do not sell personal information, and we do not share it with advertisers.

5. AI processing & sub-processors

Building AI systems means content you share with us may be processed by third-party model providers and infrastructure vendors. We think you should know exactly how that works.

• Model providers. We use commercial large language model APIs to build and run agent systems. Content sent to these APIs is processed under the provider's enterprise or commercial terms.
• No training on your data. We configure model providers so that client content submitted through their APIs is not used to train their models. Where a provider's default differs, we tell you before any of your data goes near it.
• Infrastructure. Hosting, databases, vector stores, error logging, email and scheduling vendors process data in the course of running the systems we build.
• Scoping. We send the minimum content a task requires. Where a system can work on redacted, synthetic or sampled data, we prefer that.

6. Client business data

During an engagement you may give us access to your systems and data — email, calendars, CRM records, documents, support tickets, or production databases. That material belongs to you.

• We process it only to deliver the work set out in our agreement with you, and only for as long as that work requires.
• Where it contains personal information about your customers or staff, you are the controller and we act as your processor, on your documented instructions.
• We work to least-privilege access: scoped credentials, read-only where read-only will do, and no standing access we do not need.
• We do not use your business data to train models, to build products for other clients, or as case-study material without your written permission.
• A mutual non-disclosure agreement is signed before assessment work begins.

7. Cookies & analytics

Our site uses cookies and similar technologies that are strictly necessary for it to function, and analytics tooling that helps us understand aggregate traffic. Analytics cookies may be set through a tag manager.

You can block or delete cookies in your browser settings. Strictly necessary cookies cannot be switched off without breaking parts of the site. Blocking analytics cookies does not affect your ability to use it.

8. When we share information

We share personal information only in these situations:

• Service providers and sub-processors who help us run the business and deliver engagements, bound by contract to protect it.
• Professional advisers — accountants and lawyers — where genuinely necessary.
• Legal requirements — where we must comply with a valid legal obligation, court order, or lawful request, or to protect our rights, safety, or property.
• Business transfer — if the business is reorganised, merged or acquired, information may transfer as part of that, subject to this policy.

9. How long we keep it

• Enquiries that do not become engagements — up to 24 months, then deleted.
• Engagement records and correspondence — for the life of the engagement and a reasonable period afterwards for support, warranty and dispute purposes.
• Client business data and credentials — returned or deleted at the end of an engagement, on the timetable in your agreement. Credentials are revoked at handover.
• Invoices and tax records — for the period required by applicable tax law.

10. How we protect it

We apply measures proportionate to the sensitivity of the data: encryption in transit, access controls and least-privilege credentials, secrets held in managed secret stores rather than in code or documents, audit logging on agent actions, and approval gates before any system takes a high-stakes or irreversible action.

No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects your personal information, we will notify you and any relevant authority as required by law, without undue delay.

11. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and get a copy.
• Correct information that is inaccurate or incomplete.
• Request erasure of information we no longer have grounds to keep.
• Object to, or request restriction of, certain processing.
• Receive your information in a portable format.
• Withdraw consent at any time, where we relied on consent.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity, where local law provides for it.
• Complain to your data protection authority.

If you are in India, these rights sit under the Digital Personal Data Protection Act, 2023. If you are in the EEA or UK, they sit under the GDPR. To exercise any of them, write to us at the address in section 15. We will respond within the period the applicable law allows, and we may need to verify your identity first.

12. International transfers

We are based in India and work with clients and vendors in other countries, so personal information may be transferred to and processed outside the country where you live, including in jurisdictions with different data protection laws. Where we transfer personal information internationally, we rely on appropriate safeguards such as standard contractual clauses or an equivalent mechanism.

13. Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as our practices, vendors or the law change. The "last updated" date at the top of this page reflects the current version. If a change materially affects how we handle your personal information, we will take reasonable steps to tell you directly.

15. Contact us

For privacy questions, data requests, or a current sub-processor list:

If you are not satisfied with our response, you may escalate to the data protection authority in your jurisdiction.