Privacy Policy
How we collect, use and protect your data, under the DPDP Act, 2023 and DPDP Rules, 2025.
1. Who we are (Data Fiduciary)
Sandesh Kokate runs India AI Rulebook. Under the DPDP Act, we are the Data Fiduciary for data you give us here.
2. Personal data we collect
We only collect what you give us. That is your email when you subscribe, and a role (such as Founder) if you pick one. We also note the page you subscribed from. We use this to see which pages help, and never share it. We do not ask for your name, phone number, address, or any sensitive personal data.
Your email address, when you request a personalised DPDP readiness report from our assessment tool. We also store your assessment result type (e.g., "Data Fiduciary") to generate the report. It is stored with your email, so we treat it as personal data.
3. Purpose
We use your email only to send the newsletter. We may also send short notes about it, such as a sign-up check or a policy change.
If you request a readiness report: your email is used to deliver the report you requested. If you also ask for updates, we send you news of rule changes.
4. Lawful basis
We process your personal data on the basis of your consent, as required by Section 6 of the DPDP Act 2023. You may withdraw consent at any time (see section 8).
5. Retention
We keep your email while you are subscribed. After you leave, we keep it 30 more days. Then we delete it from our active systems.
Report emails: we keep your email only until the report reaches you and any resend is done. Then we delete it for good, as Section 8(7) of the DPDP Act requires. If you ask for updates, we keep your email until you leave. Then we delete it soon after.
6. Third-party processors
We use two processors. Google Workspace (Sheets and Gmail) holds subscriber and report data. Our report service runs on Cloudflare Workers. It gets your email and result type to build and send your report. We will never sell, rent, or share your data for marketing or commercial purposes.
We use Google Workspace (Google Sheets and Gmail) to store subscriber and report-request data and to deliver emails. Google's data processing terms apply. Google may store data outside India. Section 16 of the DPDP Act allows this, as no country is restricted yet.
7. Cross-border transfers
Our email vendor may store and process your email outside India. Such transfers are permitted under Section 16 of the DPDP Act 2023 unless and until the Central Government issues a restriction. We will update this notice if the position changes.
8. Your rights as a Data Principal
Under the DPDP Act you may: access a summary of the personal data we hold; correct or update inaccurate data; erase your data (done automatically when you unsubscribe); and withdraw consent at any time. To exercise these, email contact@indiaairulebook.com.
To request erasure of your personal data, email Erasure@indiaairulebook.com. Your data will be permanently deleted from all records upon request, in accordance with your rights under Section 12 of the DPDP Act 2023.
9. Cookies and analytics
This site has no outside analytics, ads or tracking cookies. We save a little data in your browser. It keeps your light or dark choice. If you use the readiness checklist, it also saves your progress. Both stay on your device, are never transmitted to us, and can be cleared from your browser settings. If we add tracking later, we will update this page and ask for consent where needed.
10. Children's data
This site is not directed at users under 18. We do not knowingly collect personal data from children. Every subscribe form requires confirmation that the subscriber is 18 or older.
11. Information for users in the European Economic Area (GDPR)
If you are in the EEA, you have additional rights under the GDPR, including data portability and the right to object to processing. Our lawful basis under the GDPR is your explicit consent (Article 6(1)(a)). To exercise GDPR rights or lodge a complaint, email contact@indiaairulebook.com; you may also complain to the supervisory authority in your EU member state.
12. Contact and grievance
Questions, concerns, or feedback about this policy or how we handle your data: email contact@indiaairulebook.com. We will respond in a reasonable time.
13. Changes to this policy
We may update this policy as our practices evolve or as Indian law changes. The "Last updated" date at the top reflects the most recent revision.
Last updated: 4 September 2026 · Written and edited by Sandesh Kokate
Educational only. Re-verify against the Gazette of India before relying on anything here.