This Privacy Policy describes our policies and procedures on the collection, use and disclosure of your information when you use the service and tells you about your privacy rights and how the law protects you.
We use your Personal data to provide and improve the service. By using the service, you agree to the collection and use of information in accordance with this Privacy Policy.
Notice on Language Availability: In compliance with Section 5 of the Digital Personal Data Protection Act (DPDPA), this Privacy Notice is available in English and can be accessed upon request in any of the 22 official languages specified in the Eighth Schedule to the Constitution of India.
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
| Category of Personal Data | What We Collect | How We Use It |
|---|---|---|
| Contact Information | Name, email address, mobile number, city/location |
|
| Recruitment & Employment Data | CV, educational qualifications, employment history, date of birth, gender, city |
|
| Government & Identification Data | Aadhaar, PAN, and other government-issued IDs |
|
| Financial Information | Bank account details, beneficiary information, payment-related details |
|
| Business, Partner & Vendor Data | Vendor details (including bank and GST details), partner and client contact information |
|
| Marketing & Engagement Data | Preferences, event/webinar participation data, campaign responses |
|
| Client Project Data (Processed on behalf of Clients) | Data shared by clients for analytics, cloud, or AI/ML services |
|
| Onboarding details | Name, email address, mobile number, city/location |
|
| Business Transfer Data | Personal data associated with users, employees, clients, or vendors is processed as part of business assets |
|
| Analytics & Service Improvement Data | Usage data, interaction data, preferences, feedback, and engagement data |
|
| Inquiry & Contact Data | Information submitted through contact forms, demo requests, or service inquiries (name, email, phone, company, message details) |
|
We may share your personal information in the following situations:
If the Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
When you access our website, we automatically collect certain technical information, such as your IP address, browser type, device information, operating system, date and time of access, requested pages, and server log information. This information is processed to maintain the security, integrity, availability, and performance of our website, detect fraudulent or unauthorized activities, troubleshoot technical issues, and comply with applicable legal obligations.
The Company may disclose your Personal Data in the good faith belief that such action is necessary to:
We process your Personal Data either on the basis of your Consent, or where permitted under the specified 'legitimate uses' listed under Section 7 of the DPDPA (set out below).
We process your Personal Data either on the basis of your Consent, or where permitted under the specified 'legitimate uses' listed under Section 7 of the DPDPA (set out below). we ensure that we have informed you about the type of data personal data being collected and purpose of such data collection. We ensure that such personal data is being used only for the informed and specific purpose. Where you have consented to a particular processing, you have a right to withdraw the consent at any time. You can withdraw your consent by writing to us at privacy@pibythree.com. If you do so, your personal data will be erased, unless there is any legal requirement to retain it. In alignment with the DPDPA, the process of withdrawing consent is designed to be as easy as the process of giving consent.
Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal.
For certain processing, we may also process the Personal Data for legitimate uses as provided under the Digital Personal Data Protection Act, 2023.
Our website may include content or features provided by third-party service providers, such as videos, maps, social media plugins, or other embedded content. When you interact with such content, the respective third-party provider may collect certain information about your device, browser, IP address, and interactions in accordance with its own privacy practices. We encourage you to review the privacy notices of these third-party providers before interacting with such content.
Our service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 18 without verification of parental consent, we take steps to remove that information from our servers.
If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.
In accordance with Section 9 of the DPDPA 2023, the Company strictly prohibits the processing of any personal data of children that is likely to cause a detrimental effect on the well-being of a child. Furthermore, we do not engage in tracking, behavioural monitoring, or targeted advertising directed toward individuals under the age of 18.
PibyThree ensures that the verifiable consent of the lawful guardian is obtained for the processing of personal data of a person with disability. If you are a lawful guardian of a person with disability, you can contact us at privacy@pibythree.com for any query related Personal Data of the Person with disability.
The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our service, or We are legally obligated to retain this data for longer time periods.
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to - and maintained on - computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.
The Company will take all steps that are reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
We maintain reasonable and appropriate security measures to protect Client Data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.
Examples of security measures include physical access controls, HTTPS, restricted access to data, monitoring for threats and vulnerabilities, etc.
We also subject our services to internationally recognised certification and attestation standards.
Data Breach Notification. In the event of a personal data breach, we will notify affected Data Principals and the Data Protection Board of India as required under Section 8(6) of the DPDPA, without regard to the severity of the breach.
Data Principals hold specific legal rights under the DPDPA framework:
Data Principals have certain rights with respect to their personal data. The rights given with respect to your personal data include:
In accordance with DPDPA mandates, grievances can be submitted formally to our Grievance Redressal Officer at privacy@pibythree.com. We are committed to responding to and resolving your statutory grievances within the timeframes prescribed under the Act.
Whenever you use our services, we aim to provide you with easy means to access, modify or erase your personal information.
We strive to give you ways to access, update/modify your data quickly, or delete it unless we have to keep that information for legal purposes. These rights can be exercised by contacting us using the details set out in the "Contact Information" section below.
The Digital Personal Data Protection Act, 2023, provides data principals with a right to nominate a person on their behalf to exercise their rights and to ensure the safeguarding of personal data.
This right can be exercised in the event of the data principal’s death or incapacity. To exercise your Right to Nomination, you may contact us at privacy@pibythree.com
If you have any questions regarding the processing of your data or if you want to exercise your rights, you can contact us at privacy@pibythree.com
Our service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
We will let you know via email and/or a prominent notice on our service, prior to the change becoming effective and updating the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy, please
Email: privacy@pibythree.com
Last updated: 07 July,2026
Download Privacy Policy