Privacy Policy

1. Who We Are
spexecute.com is operated by Dev Tripathy AI Systems, a Udyam-registered sole proprietorship based in India, operating under India’s Digital Personal Data Protection Act 2023 (DPDP Act) and, where applicable to European visitors, the General Data Protection Regulation (GDPR).

For all privacy matters: contact@spexecute.com

2. Scope
This policy applies to personal data collected through spexecute.com, our contact form, call booking system, pre-call intake, and any complimentary diagnostic service we provide. It applies to all visitors regardless of location.

3. What Data We Collect and Why

Contact Form
Name, company name, email address, phone number (optional), reason for enquiry, and message content. Used to respond to your enquiry and route it appropriately before a call is scheduled. Legal basis: consent (GDPR Article 6(1)(a)) / legitimate interest (DPDP Act).

Call Booking
Name, email address, and appointment details. Used to schedule and confirm calls. Processed through Cal.com. Legal basis: contract performance.

Pre-Call Intake
Prior to a scheduled call we collect company name, current operational context, areas of interest, and any additional details you choose to share. This is used solely to prepare for and conduct the call effectively. Legal basis: legitimate interest / contract performance.

Call Records
We take written notes during or after calls for internal reference. Calls are recorded only with your explicit prior consent. Recordings are stored securely and used only for the purpose agreed at the time of consent. Legal basis: consent.

AI Diagnostic (launching soon)
Business information submitted via form for automated assessment. Processed through AI systems to generate your diagnostic output. This policy will be updated before the service launches with full processing details.

Website Analytics
General usage data — pages visited, session duration, approximate location. No personally identifiable information collected at this stage. This section will be updated before any analytics tools are activated.

4. Cross-Border Data Transfers
Dev Tripathy AI Systems is based in India. If you are located in the European Economic Area, your data may be transferred to and processed in India and by our sub-processors globally.
For EEA visitors we rely on the following transfer mechanisms under GDPR Article 46:

Standard Contractual Clauses with applicable sub-processors
Sub-processor commitments to GDPR-compliant data handling

Under India’s DPDP Act 2023 we process personal data only for the purposes disclosed in this policy and retain it only as long as necessary.

5. Sub-Processors
We use the following third-party services. Each is bound by their own data processing terms:

Cal.com — call scheduling
Brevo (or equivalent) — email communications
n8n (self-hosted) — workflow automation and diagnostic processing
Supabase — database infrastructure
Cloudflare — storage and security infrastructure
Google (Gemini API) — AI processing within the diagnostic system

We share only the minimum data necessary for each service to function. We do not sell data to any third party under any circumstances.

6. Data Retention

Contact form submissions: 24 months
Call booking and pre-call intake: 24 months
Call notes: 24 months
Call recordings: 12 months from date of recording unless otherwise agreed
Diagnostic data: 12 months from delivery unless a client relationship is established
Client engagement data: duration of engagement plus 36 months

You may request deletion at any time. We will respond within 30 days unless retention is required by law.

7. Your Rights
If you are in the EEA (GDPR):

You have the right to access, rectify, erase, restrict, or port your personal data. You have the right to object to processing and to withdraw consent at any time. You may lodge a complaint with your local supervisory authority.

If you are in India (DPDP Act 2023):

You have the right to access information about your personal data, correct inaccurate data, and request erasure where processing is no longer necessary. You have the right to nominate a representative for data-related decisions.

To exercise any right: contact@spexecute.com. We respond within 30 days.

8. Security
We implement appropriate technical and organisational measures to protect your personal data. Data is encrypted in transit (TLS) and at rest. Access is restricted to authorised personnel only. Our n8n automation infrastructure is self-hosted on a secured VPS with firewall and access controls in place.

9. Cookies
We currently use only essential cookies necessary for the website to function. We do not use tracking, advertising, or profiling cookies. This section will be updated before any analytics or tracking tools are activated.

10. Children
Our services are directed exclusively at business professionals. We do not knowingly collect personal data from individuals under the age of 18.

11. Changes to This Policy
We will update this policy as our services develop. Material changes will be communicated by email where we hold your contact details. The date at the top of this page reflects the most recent revision.

12. Governing Law and Jurisdiction
This policy is governed by the laws of India, including the Information Technology Act 2000, the DPDP Act 2023, and applicable rules thereunder. Disputes are subject to the exclusive jurisdiction of the courts in India.
EEA visitors retain all rights afforded under GDPR regardless of governing law.

Contact
Dev Tripathy AI Systems , India
contact@spexecute.com