Privacy
Policy.

1. Who we are

Gowin The AI (“we”, “us”) is an AI automation agency operating in India through the website gowinthe-ai.tech. For the purposes of India’s Digital Personal Data Protection Act, 2023, we are the data fiduciary for personal data collected through this website. For visitors in the European Economic Area or the United Kingdom, we act as the data controller under the GDPR.

You can reach us about anything in this policy at contact@gowinthe-ai.tech.

2. What we collect

Information you give us

When you submit the contact form on this website, we collect the information you type into it:

• Name — so we know who we are replying to
• Email address — so we can reply
• Phone number — optional, and only used if you ask us to call you back
• Business type — so we can judge which services are relevant
• Your message — what you would like automated

If you email us directly, we hold whatever you choose to put in that email. We do not require you to create an account to browse this site or to contact us.

Information collected automatically

When you submit the contact form, our server records the IP address the request came from, alongside the submission. This is used to rate-limit submissions and to block spam and abuse. Our hosting provider also keeps standard server logs, which include IP addresses and browser user-agent strings, for operational and security purposes.

Client portal and payments

If you become a client and use our client portal, we additionally process your name, email address, phone number, company name and project details in order to deliver the service you have engaged us for.

We do not currently take payments through this website. Invoices are raised and settled directly with you. We therefore hold no card, UPI or banking credentials of any kind. If we introduce online payment in future, it will be handled by a third-party provider on their own systems, and we will update this policy before doing so.

3. Why we process it, and on what basis

• To reply to your enquiry. Legal basis: your consent, given when you submit the form, and our legitimate interest in responding to people who contact us about our services.
• To deliver services you have engaged us for. Legal basis: performance of a contract with you.
• To prevent spam, fraud and abuse. Legal basis: our legitimate interest in keeping the service available and secure.
• To meet legal, tax and accounting obligations. Legal basis: compliance with a legal obligation.

We do not use your personal data to make automated decisions that produce legal or similarly significant effects about you.

4. What we will never do

• We do not sell your personal data. Not to anyone, for any price.
• We do not rent or trade contact lists.
• We do not add you to a marketing newsletter or drip campaign because you submitted an enquiry. If we ever offer a mailing list, it will be opt-in and separate.
• We do not use the content of your enquiry as a public case study, or name you as a client, without asking you first.

5. Who else sees it

We share personal data only with service providers who help us operate, and only as far as they need it to do that job:

• Our hosting provider — runs the website and its servers
• Our database provider — stores enquiry and client records
• Our email provider — delivers the notification of your enquiry and our reply to you

We may also disclose personal data where we are legally required to, for example in response to a valid order from a court or a competent authority. If that happens and we are permitted to tell you, we will.

Some of these providers operate servers outside India. Where personal data is transferred internationally, we rely on the provider’s contractual safeguards and, for transfers out of the EEA or UK, on Standard Contractual Clauses or an equivalent approved mechanism.

6. How long we keep it

• Enquiries that do not become projects — kept for up to 24 months so we have context if you come back to us, then deleted.
• Client records — kept for the duration of our engagement and for as long afterwards as tax and accounting law requires, which in India is generally 8 years for financial records.
• Server and security logs — kept for a short operational period, typically no more than 90 days.

You can ask us to delete your data sooner. See the next section.

7. Your rights

You have the right to ask us to:

• Access — tell you what personal data of yours we hold, and give you a copy
• Correct — fix anything that is wrong or out of date
• Erase — delete your data, where we are not legally required to keep it
• Withdraw consent — stop processing that relies on your consent, at any time
• Object or restrict — object to processing based on legitimate interests, or ask us to limit it
• Port — receive your data in a structured, machine-readable format
• Nominate — under the DPDP Act, nominate someone to exercise these rights on your behalf if you die or become incapacitated

Email contact@gowinthe-ai.tech and we will respond within 30 days. We will not charge you for this, and we will not treat you differently for asking.

If you are unhappy with how we have handled your request, you can complain to the Data Protection Board of India, or — if you are in the EEA or UK — to your local supervisory authority.

8. Keeping it secure

We protect personal data with encryption in transit (HTTPS across the whole site), access controls and multi-factor authentication on administrative accounts, and hashed credentials. Payment credentials never reach our systems at all.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to result in a risk to you, we will notify the Data Protection Board of India and affected individuals as required by law, without undue delay.

9. Children

This website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, email us and we will delete it.

10. Changes to this policy

If we change how we handle personal data, we will update this page and change the “last updated” date shown alongside it. If the change is significant and we hold your contact details, we will tell you directly rather than relying on you to notice.