Privacy Policy

1. Who we are

ChainCraft Global ("ChainCraft", "we"), a sole proprietorship registered in Navi Mumbai, India, is an artificial intelligence solutions company headquartered in Mumbai, India. This policy explains how we handle personal data collected through our website and in the course of providing our services. For personal data we process on behalf of clients under a services agreement, the client is the data controller (or data fiduciary) and we act as a processor on their documented instructions.

2. Data we collect

We collect information you provide directly — name, work email, company, phone number, and the content of messages you send through our forms — plus limited technical data such as browser type, pages visited, and approximate location derived from IP address, collected via privacy-respecting analytics.

• Contact data: name, work email, company, phone number
• Enquiry content: what you tell us about your project or role application
• Application data: portfolio links and the written responses you submit through our careers form
• Technical data: browser and device type, referring page, pages visited, approximate location from IP
• Communication records: correspondence with our team, and notes from calls you have with us

3. How we use your data

We use your data to respond to enquiries, schedule consultations, deliver contracted services, send newsletters you have opted into, improve our website, and meet legal obligations. We do not sell personal data, and we do not use client data to train AI models.

4. Legal bases

Where GDPR or similar regulation applies, we process personal data on the bases of consent (newsletters), contract performance (service delivery), and legitimate interest (responding to enquiries and securing our systems). Where India’s Digital Personal Data Protection Act applies, we process on the basis of consent or for the legitimate uses that Act permits, and we honour data-principal rights as described below.

5. Sharing and processors

We share data only with service providers that help us operate — hosting, CRM, email, and analytics vendors — under data-processing agreements, and with authorities where legally required. Client project data is governed by individual service agreements, which take precedence. A current list of our subprocessors, including any AI model providers, is available on request.

6. AI and automated processing

We do not make decisions about you by automated means without human involvement. Where we use AI tools internally to draft or summarise, a person reviews the output before it affects you. Any AI model providers we use operate under zero-data-retention terms, meaning your information is not stored by them or used to train their models.

7. Data retention

Enquiry data is retained for up to 24 months after last contact. Contractual records are kept as required by Indian law. Newsletter data is kept until you unsubscribe. Job application data is retained for 12 months unless you ask us to delete it sooner. You may request earlier deletion at any time.

8. Security

We follow SOC2-aligned security practices: encryption in transit and at rest, role-based access, audit logging, and regular reviews. Access to client and enquiry data is limited to the people who need it and is revoked when an engagement ends. No method of transmission is perfectly secure, but we treat your data with the same care we apply to client systems.

9. International transfers

We are based in India and use service providers located in India, the European Union and the United States. Where personal data is transferred internationally, we rely on the safeguards our providers offer, including standard contractual clauses where applicable, and we can arrange region-specific data residency for client engagements that require it.

10. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, restrict, or delete your personal data, and to withdraw consent. To exercise any of these, email chaincraftglobal@gmail.com — we respond within 30 days. If you are unsatisfied with our response, you may complain to your local data protection authority.

11. Cookies

We use strictly necessary cookies and lightweight analytics. We do not run third-party advertising trackers. You can control cookies through your browser settings, and blocking non-essential cookies will not affect your ability to use this site.

12. Children

Our website and services are intended for business users and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy as our services evolve. Material changes will be announced on this page with a revised "last updated" date. Where a change materially affects how we handle data you have already given us, we will contact you directly.