How EpicureAI Labs collects, uses, stores and protects personal data — in line with India's Digital Personal Data Protection Act, 2023.
Last updated: 19 July 2026 · EpicureAI Labs Pvt. Ltd., Bengaluru, India
EpicureAI Labs Private Limited, Bengaluru, Karnataka, India, is the Data Fiduciary responsible for personal data collected through epicureailabs.com and through our products and programmes. This policy explains what we collect, why, and what rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
Standard analytics data: pages viewed, approximate location derived from IP address, device and browser type, referring source, and session duration. We use Google Analytics for this purpose.
Name, email address, phone number, institution, year and branch of study, academic background, and any information you choose to include in your application, such as a resume or portfolio link. During the Programme we also process attendance, submitted work and assessment records.
If you contact us by email, we process the contents of your message and your contact details in order to respond.
AVOLA processes health-related personal data, including lab reports, prescriptions, diagnosed conditions, allergens and dietary information for members of a subscribing household. Forsight processes employment-related data supplied by an employer, including role history, performance review records and assessment responses. Where Forsight is deployed white-label by a partner organisation, that organisation is the Data Fiduciary and EpicureAI Labs acts as a Data Processor under its instructions. Product-specific privacy notices are provided at the point of sign-up.
We process personal data on the basis of your consent, or where processing is necessary to perform a contract with you, or to comply with a legal obligation. You may withdraw consent at any time; withdrawal does not affect processing already carried out.
Health data processed by AVOLA is treated as sensitive. It is used solely to generate clinically-safe nutrition plans for the household that provided it, is not used for advertising, and is never sold. Access is restricted to personnel who require it to operate the service.
We do not sell personal data. We share it only with:
Guest speakers in the reverse pitch do not receive applicant or participant personal data from us.
Application data for unsuccessful applicants is retained for up to twelve months, after which it is deleted or anonymised. Participant records and certification data are retained for as long as needed to verify certification, and to meet statutory record-keeping requirements. Product data is retained for the duration of the subscription or engagement, plus any period required by law. You may request earlier deletion, subject to our legal obligations.
We apply reasonable technical and organisational safeguards, including encryption in transit, access controls on a need-to-know basis, and privacy-by-design in product architecture. No system is perfectly secure, and we cannot guarantee absolute security. In the event of a personal data breach we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.
Under the DPDP Act you have the right to:
To exercise any of these rights, write to info@epicureailabs.com. We will respond within the period prescribed by law.
Where AVOLA processes data relating to a child member of a household, that data is provided by the parent or legal guardian, who consents to its processing on the child's behalf. We do not use children's data for tracking or targeted advertising. Programme applicants below eighteen require consent from a parent or legal guardian.
This website uses a small number of cookies. Essential cookies are required for the site to function. Analytics cookies, set by Google Analytics, help us understand how the site is used, and are set only where you have not opted out. You can block or delete cookies through your browser settings; blocking essential cookies may affect site functionality.
Some service providers may process data on servers outside India. Where this occurs, we transfer data only to jurisdictions permitted under the DPDP Act and require appropriate contractual safeguards.
We may update this policy from time to time. The revision date at the top of this page reflects the current version. Material changes will be communicated by email to affected individuals where practicable.
Concerns about how we handle personal data may be raised with our Grievance Officer at info@epicureailabs.com. If your concern is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India.
EpicureAI Labs Private Limited · Bengaluru, Karnataka, India