1. Who we are
EpicureAI Labs Private Limited, Bengaluru, Karnataka, India, is responsible for personal data collected through epicureailabs.com and, in the circumstances described below, through the Forsight platform. This policy explains what we collect, why, and what rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. Our role for Forsight data
Forsight is generally deployed to organisations, often white-label through a partner platform. In those deployments, the employing organisation (or the partner) is the Data Fiduciary that decides why and how employee data is processed, and EpicureAI Labs acts as a Data Processor, processing that data only on documented instructions under a data-processing agreement. Employees should consult their employer's or the partner's privacy notice for the terms governing their data. This policy governs data for which EpicureAI Labs is itself the Data Fiduciary — principally website visitors and direct enquiries.
3. What we collect
3.1 Website visitors
If you accept optional analytics, Google Analytics collects information such as pages viewed, approximate location derived from IP address, device and browser type, referring source, and session duration. Analytics is not loaded before your choice. Hosting providers may also process standard server logs to deliver and secure the website.
3.2 Enquiries
If you contact us by email, we process the contents of your message and your contact details in order to respond.
3.3 Forsight platform data
When Forsight is operated for an organisation, the Platform processes employment-related data supplied by that organisation or entered by employees — for example role and skills information, goals, performance-review records, assessment responses and an optional resume. As set out in section 2, this data is processed on the organisation's instructions.
4. Why we process it
- To respond to enquiries and provide support
- To operate, secure and improve our website and the Forsight platform
- To provide the Forsight service on behalf of, and as instructed by, the Data Fiduciary organisation
- To comply with legal, tax and regulatory obligations
We process personal data on the basis of your consent, or where processing is necessary to perform a contract, or to comply with a legal obligation. You may withdraw consent at any time; withdrawal does not affect processing already carried out.
5. Sharing
We do not sell personal data. We share it only with:
- Service providers who host, secure or support our systems, under contractual confidentiality and security obligations
- Partner organisations and employers, in the case of Forsight deployments, in accordance with the applicable data-processing agreement and their own privacy notice
- Authorities, where disclosure is required by law or valid legal process
6. Retention
Website and enquiry data is retained only as long as needed for the purpose collected, and to meet statutory requirements. Forsight platform data is retained for the duration of the organisation's engagement and in accordance with the applicable data-processing agreement, after which it is deleted or returned as instructed. You may request earlier deletion, subject to our and the Data Fiduciary's legal obligations.
7. Security
We apply reasonable technical and organisational safeguards, including encryption in transit, access controls on a need-to-know basis, and privacy-by-design in product architecture. No system is perfectly secure, and we cannot guarantee absolute security. In the event of a personal data breach we will notify the Data Protection Board of India and, as applicable, the relevant Data Fiduciary and affected individuals as required under the DPDP Act.
8. Your rights
Under the DPDP Act you have the right to access a summary of the personal data processed about you, to request correction or completion of inaccurate data, to request erasure where retention is no longer required, to nominate another individual to exercise your rights, to withdraw consent, and to raise a grievance. Where EpicureAI Labs acts as a Data Processor for Forsight, requests are directed to and handled by the Data Fiduciary organisation; we will assist that organisation as required. For data for which we are the Data Fiduciary, write to info@epicureailabs.com.
9. Cookies
This website stores your analytics preference in this browser. Optional Google Analytics is loaded only after you accept it, and only on epicureailabs.com. You can decline or withdraw your choice using the controls below. Withdrawing stops future analytics collection after the page reloads. Cookies already set by Google Analytics may also be removed through your browser settings. Email enquiries open your email application; this website does not store enquiry form submissions.
Optional analytics has not been enabled.
10. International transfers
Some service providers may process data on servers outside India. Where this occurs, we transfer data only to jurisdictions permitted under the DPDP Act and require appropriate contractual safeguards.
11. Changes
We may update this policy from time to time. The revision date at the top of this page reflects the current version. Material changes will be communicated where practicable.
12. Grievance contact
Concerns about how we handle personal data may be raised with our Grievance Officer at info@epicureailabs.com. If your concern is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India.