Privacy policy

Who this applies to

This policy covers karmyug.in and the Karmyug delivery platform. Karmyug Ai, Muzaffarpur, Bihar, India is the controller for data collected through this website.

• Site visitors, including anyone sending an enquiry
• Clients at organisations that commission data work
• Contributors who record, label, review or evaluate data

What we collect

Enquiry details are used to reply and to scope the work. We do not add you to a marketing list from the contact form.

• Enquiry details: name, work email, company, project type and message
• Client account data: contacts, billing information and project records
• Contributor data: identity verification, profile, device information, work history, quality scores and payment details
• Contributed content: recordings, images, text and annotations, with a linked consent record
• Technical data: server logs, IP address and coarse device information, for security

Legal bases

We rely on contract for delivery and payment, consent for contributed content, legitimate interests for security and replying to enquiries, and legal obligation for tax and identity requirements.

Sharing

We share personal data with processors that run parts of our service, under contract and only for those purposes. Client deliverables go to the commissioning client under that engagement. We do not sell personal data.

Storage, security and transfers

Data is encrypted at rest with AES-256 and in transit with TLS 1.3. Media is served through signed URLs with no public access. Our primary region is AWS Mumbai. International transfers use standard contractual clauses or an equivalent mechanism.

Retention

Enquiry correspondence is kept for up to 24 months. Client and contributor records are kept for the engagement plus any statutory period. Raw project data is retained for the period agreed with the client and then deleted, archives included.

Your rights

You may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. Contributors can download their data and request deletion from within the platform.

Write to privacy@karmyug.in and we respond within 30 days. Residents of India have these rights under the DPDP Act 2023, the EEA and UK under the GDPR, and California under the CCPA.

Children

Our services are not directed at children and contributors must be 18 or older. Projects involving data about minors run under a separate agreement with verified guardian consent.