1. Introduction
Informed Decision ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document forensic analysis service.
2. Information We Collect
2.1 Personal Information
We may collect the following personal information:
- Name and contact information (email, phone number)
- Account credentials
- Payment information (processed securely through third-party providers)
- Communication records with our support team
2.2 Documents and Analysis Data
When you submit documents for analysis, we collect:
- Uploaded documents (job offers, contracts, emails)
- Document metadata (file type, size, creation date)
- Information you provide about the employer or sender
- Analysis results and reports
2.3 Technical Information
- IP address and browser type
- Device information
- Usage data and analytics
- Cookies and similar technologies
3. How We Use Your Information
We use collected information to:
- Provide and improve our document analysis services
- Process your analysis requests and deliver reports
- Communicate with you about your submissions and our services
- Process payments and prevent fraud
- Improve our AI models and analysis accuracy (anonymized data only)
- Comply with legal obligations
- Send service updates and notifications
4. AI Processing Disclosure
How AI Processes Your Data
Your submitted documents are processed using AI technology, for:
- Document text extraction and analysis
- Pattern recognition to identify potential fraud indicators
- Metadata analysis and verification
- Comparison with known fraud patterns
AI processing is conducted on secure servers. Your documents are not used to train public AI models without your explicit consent.
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third-party services that help us operate (cloud storage, payment processors, AI services)
- Legal Requirements: When required by law, court order, or government request
- Fraud Prevention: With law enforcement if we detect criminal activity
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties for marketing purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Secure cloud storage with access controls
- Regular security assessments
- Employee training on data protection
- Incident response procedures
7. Data Retention
We retain your data for the following periods:
- Account Information: Until you delete your account
- Submitted Documents: 90 days after analysis completion, unless you request earlier deletion
- Analysis Reports: 1 year, accessible through your dashboard
- Payment Records: As required by tax and financial regulations
8. Your Rights (Indian Data Protection)
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access: Request information about your personal data we hold
- Correction: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data when no longer necessary
- Grievance Redressal: File a complaint with our Grievance Officer
- Nominate: Nominate another individual to exercise your rights in case of death or incapacity
- Withdraw Consent: Withdraw consent for processing (may affect service delivery)
To exercise these rights, contact us at [email protected] or reach out to our Grievance Officer. We will respond within the timeframes prescribed by law.
For UK residents: You also have rights under UK GDPR including data portability and the right to object to certain processing activities.
9. Cookies
We use cookies and similar technologies to:
- Maintain your session and authentication
- Remember your preferences
- Analyze usage patterns to improve our service
- Prevent fraud and enhance security
You can control cookies through your browser settings.
10. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.
11. Indian Data Protection Compliance
As our primary market is India, we comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. We are committed to protecting the personal data of Indian citizens and maintaining full compliance with Indian data protection laws.
Data Fiduciary: Informed Decision
Operating From: United Kingdom
Grievance Officer: Available upon request
Contact: [email protected]
For UK residents: We also comply with UK GDPR and Data Protection Act 2018 for data of UK residents.
12. International Data Transfers
Your data may be processed on servers located outside India. We ensure appropriate safeguards are in place for international data transfers in compliance with the Digital Personal Data Protection Act, 2023, including:
- Processing data only in countries approved by the Indian government or with adequate data protection
- Implementing appropriate technical and organizational security measures
- Ensuring compliance with cross-border data transfer requirements
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when this Policy was last revised.