Privacy Policy

1. Introduction

truConsent ("we," "our," or "us") is a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDPA"). This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website, interact with our advertisements — including on third-party platforms such as LinkedIn and Google — or use our services. We process personal data lawfully, fairly, and transparently, and only for specified, explicit, and legitimate purposes.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when you:

• Request a demo or contact us
• Subscribe to our newsletter
• Download our resources
• Use our chat support
• Submit an inquiry through a third-party lead form (for example, a LinkedIn Lead Gen Form). Where you submit your details through such a form, the information you provide (such as name, work email, company, and job title) is shared with truConsent by the platform and is handled in accordance with this Privacy Policy.

2.2 Automatically Collected Information

We automatically collect certain information about your device and usage patterns, including:

• IP address and browser information
• Pages visited and time spent
• Referring website information
• Device and operating system details
• Cookies and similar tracking technologies (see Section 3 below)

2.3 Information From Our Advertising Partners

We run advertising campaigns on LinkedIn and Google. As part of these campaigns:

• We use the LinkedIn Insight Tag and Google Ads / Analytics conversion tracking on our website to measure ad performance, attribute conversions, and build retargeting audiences.
• These tools collect information such as IP address, device and browser details, timestamps, and the pages or events you interact with, and share it with LinkedIn Corporation and Google LLC respectively.
• If we build custom or matched audiences for ad targeting, we may share hashed contact information (such as a one-way hash of an email address) with LinkedIn and Google. Hashing is irreversible: neither we nor the advertising platform can derive your original contact details from the hashed value.

3. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate correctly, understand site usage, and support advertising. The main categories are:

Where required under applicable law, we obtain your consent for non-essential (analytics and advertising) cookies through our cookie consent banner before they are set, and you may withdraw that consent at any time through the same banner or your browser settings. You can separately opt out of LinkedIn's use of your data for analytics and advertising at linkedin.com/psettings/guest-controls/retargeting-opt-out, and manage Google ad personalisation at adssettings.google.com.

4. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Respond to your inquiries and provide customer support
• Send marketing communications (with your consent, and you may unsubscribe at any time via the link in each communication)
• Measure, attribute, and improve the performance of our advertising campaigns
• Improve our website and services
• Comply with legal obligations

5. How We Share Your Information

We do not sell your personal information. We may share it with:

• Service providers who help us operate our website and business — such as hosting, analytics, communications, and customer relationship management providers — solely for the purposes described in this Policy, and under contractual obligations to protect your information
• Advertising platforms (LinkedIn, Google), limited to conversion, retargeting, and hashed audience-matching data described in Section 2.3, under those platforms' own data-processing terms
• Authorities or third parties where required by law or to protect our legal rights

6. Cross-Border Storage and Transfer

Our service providers and advertising partners — including hosting, analytics, and platforms such as LinkedIn Corporation and Google LLC — may store and process personal data in India and other jurisdictions, including the United States. We only transfer personal data outside India in a manner consistent with Section 16 of the DPDPA, 2023. As of the date of this Policy, the Central Government has not notified any countries to which such transfers are restricted.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, after which it is deleted or anonymised:

• Demo, contact, and lead inquiry data: 24 months from your last interaction with us, or until you withdraw consent, whichever is earlier
• Newsletter and marketing subscriber data: until you unsubscribe, plus a reasonable period to process that request
• Chat support transcripts: 12 months
• Website analytics and advertising cookie data: per the retention period of the applicable cookie, as described in our cookie banner

We may retain data for longer where required to comply with a legal obligation or to resolve an active dispute.

8. Your Rights Under the Digital Personal Data Protection Act (DPDPA), 2023

As a Data Principal under the DPDPA, you have the right to:

• Access — obtain a summary of the personal data we process about you and the processing activities involved
• Correction and erasure — request correction of inaccurate or incomplete personal data, or erasure of data no longer necessary for the purpose it was collected
• Withdraw consent — withdraw your consent to processing at any time, as easily as it was given
• Grievance redressal — raise a grievance regarding our processing of your personal data or our handling of your rights, and receive a response within a reasonable time (see Section 9)
• Nominate — nominate another individual to exercise your rights under this Act in the event of your death or incapacity, by writing to us at the contact details in Section 14

To exercise any of these rights, contact us using the details in Section 14.

9. Grievance Redressal

If you have a grievance about how we process your personal data, please contact our Grievance Officer using the details below. We will acknowledge your grievance and aim to resolve it within 30 days.

If your grievance remains unresolved after exhausting this process, you have the right to file a complaint with the Data Protection Board of India.

10. Children's Privacy

Our services are directed at businesses and professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

12. Notice at the Point of Collection

In addition to this Policy, the forms through which we collect personal data (for example, our demo request, contact, and newsletter sign-up forms) display a short, itemised notice describing the specific personal data collected and the purpose of that collection, consistent with Section 5 of the DPDPA.

13. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. We will notify you of material changes by posting the updated Privacy Policy on this page with a revised "Last updated" date.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

• Email: privacy@truconsent.io
• Address: Bangalore, India