Privacy Policy

Introduction

AetherLabs ("AetherLabs," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Flow, our AI-powered insurance management platform.

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other applicable data protection laws.

Information We Collect

Personal Information

• Name, email address, phone number, and professional details
• Company name and business registration details
• Payment and billing information
• Government-issued identification numbers (when required for compliance)

Business Data

• Policy documents and customer records you upload
• Commission and payout records
• RFQs, quotes, and related documentation
• Communication logs and customer interactions

How We Use Your Information

• To provide and maintain Flow services
• To process transactions and send related information
• To send administrative information (updates, security alerts)
• To respond to inquiries and provide customer support
• To improve our products and services through analytics
• To comply with legal obligations and regulatory requirements

Data Security

We implement industry-standard security measures to protect your data. All private details are encrypted and hashed to ensure maximum security. Our security practices include:

• AES-256 encryption for data at rest and in transit
• Cryptographic hashing for sensitive credentials
• Regular security audits and penetration testing
• Data stored on secure servers located in India
• Access controls and role-based permissions

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Business data uploaded by you remains in your control and can be exported or deleted at any time through your dashboard.

Your Rights Under DPDPA

As a data principal, you have the right to:

• Access information about personal data being processed
• Correct inaccurate or incomplete personal data
• Erase personal data (subject to legal obligations)
• Nominate another person to exercise rights on your behalf
• Grievance redressal through our Data Protection Officer

Third-Party Services

We use trusted third-party services to operate and enhance our platform. These are well-reputed companies, and their compliance certifications can be viewed on their respective profiles:

• Mailgun: Email delivery services
• Google (Firebase, Vision AI, Gemini AI): Database, authentication, and AI processing
• Meta: Communication and integration services
• Cloudinary: Media management and storage
• MongoDB: Database management

These providers are bound by strict confidentiality agreements and only process data necessary for providing their services.

Contact Us

For privacy-related queries or to exercise your rights, contact our Data Protection Officer: