Privacy Policy

Introduction

AetherLabs Technologies Private Limited ("AetherLabs," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Flow, our AI-powered insurance management platform.

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other applicable data protection laws.

Information We Collect

Personal Information

• Name, email address, phone number, and professional details
• Company name and business registration details
• Payment and billing information
• Government-issued identification numbers (when required for compliance)

Business Data

• Policy documents and customer records you upload
• Commission and payout records
• RFQs, quotes, and related documentation
• Communication logs and customer interactions

How We Use Your Information

• To provide and maintain Flow services
• To process transactions and send related information
• To send administrative information (updates, security alerts)
• To respond to inquiries and provide customer support
• To improve our products and services through analytics
• To comply with legal obligations and regulatory requirements

Data Security

We implement industry-standard security measures to protect your data:

• AES-256 encryption for data at rest and in transit
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Data stored on secure servers located in India
• Access controls and role-based permissions

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Business data uploaded by you remains in your control and can be exported or deleted at any time through your dashboard.

Your Rights Under DPDPA

As a data principal, you have the right to:

• Access information about personal data being processed
• Correct inaccurate or incomplete personal data
• Erase personal data (subject to legal obligations)
• Nominate another person to exercise rights on your behalf
• Grievance redressal through our Data Protection Officer

Third-Party Services

We may share data with third-party service providers who assist in operating our platform (e.g., cloud hosting, payment processing). These providers are bound by strict confidentiality agreements and are only permitted to use your data as necessary to provide services to us.

Contact Us

For privacy-related queries or to exercise your rights, contact our Data Protection Officer: