Legal

Privacy Policy

Effective date: 6 August 2026 · Applies to rnagenesis.ai, the rna genesis client portal, contact and careers channels.

1. Who we are

rna genesis ("rna genesis", "we", "us") is an enterprise AI transformation, AI consulting, AI operations, AI agent development, AI workflow automation, creative workflow automation, enterprise process automation, business workflow optimization and technology consulting business headquartered at Covai Tech Park, Coimbatore, Tamil Nadu, India. This Privacy Policy explains how we collect, use, store and protect personal data across our website, client portal, contact and careers channels. It is drafted with reference to applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, and is intended for review by a qualified Indian legal professional before publication. [To be updated: registered legal entity name, CIN and registered office details.]

2. Information we collect

Depending on how you interact with us, we may collect: contact form information (full name, company name, business email address, company website, phone number, country, company size, service interest, preferred meeting date/time and your message); client portal information (login email, account credentials, usage and session data); career applicant information (name, contact details, employment history, qualifications, skills, portfolio and professional profile links, compensation expectations and availability); documents you upload such as resumes/CVs and cover letters; and technical data such as IP address, browser type, device and pages visited.

3. Business email and website verification

To protect our consulting team from spam and to ensure we engage with genuine businesses, strategy-session and contact requests require a business email address whose domain matches the company website provided. We verify ownership of the email address using a one-time verification code (OTP) sent to that address before a request is accepted. Free or personal email providers (for example Gmail, Yahoo, Hotmail, Outlook and similar services) are not accepted for enterprise contact requests.

4. How we use your information

We use personal data to: respond to enquiries and schedule strategy sessions; operate and secure the client portal; deliver consulting, AI operations and automation services under contract; evaluate career applications and communicate with candidates; send service-related communications; improve our website and services; and comply with legal obligations. We do not sell personal data.

5. Cookies and analytics

We use essential cookies to keep you signed in to the client portal (secure, httpOnly session cookies) and may use privacy-respecting analytics to understand aggregate website usage. You can control cookies through your browser settings; disabling essential cookies will prevent portal sign-in.

6. Legal basis and consent (India)

For visitors and candidates, we process personal data on the basis of your consent, which you provide when submitting a form, and for legitimate uses recognised under the DPDP Act. You may withdraw consent at any time by contacting us (see Grievance section). Withdrawal does not affect processing already performed. For clients, processing is additionally necessary for the performance of our engagement contract.

7. Data storage and security

Website and portal data is stored on secure cloud infrastructure. Candidate resumes and documents are stored in private, access-controlled object storage and are never exposed at public URLs. We apply encryption in transit, hashed password storage, rate limiting and access controls. [To be updated: data residency regions, if contractually required.]

8. Data retention

Contact and enquiry data is retained for up to 24 months unless an engagement begins. Client engagement data is retained for the duration of the contract plus any period required by law. Unsuccessful candidate applications are retained for up to 12 months for recruitment purposes, after which they are deleted, unless you ask us earlier or consent to a longer retention for future roles.

9. Third-party services and processors

We use a limited set of service providers to operate our business: cloud hosting, transactional email delivery, calendar and meeting tools, and — for client engagements and only under contract — AI model and technology providers. Where client data is processed by AI systems, it is governed by the data-processing terms of the relevant engagement contract. We do not permit providers to use your personal data for their own purposes.

10. AI systems and automated processing

As an AI consulting business, some client-facing systems we operate may process information using AI models (for example, support agents or document intelligence). Such processing occurs only within the scope of a client contract, with access controls, audit logging and human oversight. We do not use website contact-form data to train AI models.

11. Data sharing and disclosure

We do not sell, rent or trade personal data. We may share data with service providers acting on our instructions, with professional advisers under confidentiality obligations, or where required by law, court order or government authority, or to protect our rights, security and property.

12. Your rights

Subject to applicable law (including the DPDP Act), you may request access to your personal data, correction or erasure of inaccurate data, withdrawal of consent, and nomination of a representative. To exercise any right, contact us at support@rnagenesis.ai. We respond within a reasonable period prescribed by law.

13. Careers applicants

Candidate data is used solely for recruitment evaluation and communication. We collect only what is necessary; we never request Aadhaar numbers, PAN, bank details, passwords or other sensitive identity or financial information at the application stage. References and background verification, where applicable, occur only after offer stage and with your knowledge.

14. International transfers

As we serve clients globally, data may be processed in countries outside India where our providers operate, subject to applicable law and appropriate safeguards. [To be updated: specific transfer mechanisms, if required by client contracts.]

15. Grievance and contact

For any privacy question, concern or grievance, contact our Grievance Officer at: rna genesis, Covai Tech Park, Coimbatore, Tamil Nadu, India · Email: support@rnagenesis.ai. [To be updated: designated Grievance Officer name and response timeline as required under the DPDP Rules.]

16. Updates to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the effective date shown above. Material changes will be communicated to active clients and candidates by email where appropriate.

This policy is a professional draft prepared for rna genesis and should be reviewed by a qualified Indian legal professional before reliance. It does not constitute legal advice or a certification of compliance.