Privacy Policy — Activatr

1. Introduction

Activatr Worklabs Private Limited ("Activatr", "we", "us", or "our") operates the website goactivatr.com. We are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable data protection laws.

This policy explains what personal data we collect, why we collect it, how we process and store it, who we share it with, and what rights you have as a Data Principal under the DPDP Act.

2. Data We Collect and Why

We collect the following categories of personal data:

Data	Purpose	Basis
Name, work email, phone, company, organisation type	Processing demo requests; responding to enquiries	Consent (§6 DPDP Act)
Name, work email, phone (FAQ gate)	Personalising knowledge-base access; product updates	Consent (§6 DPDP Act)
IP address, browser/device data, pages visited	Website analytics; improving user experience	Consent (§6 DPDP Act)
Session recordings, heatmaps	UX research via Microsoft Clarity	Consent (§6 DPDP Act)
Company/domain (inferred from IP)	B2B visitor identification via Apollo.io	Consent (§6 DPDP Act)

We collect only data that is necessary for the specified purpose. We do not collect sensitive personal data as defined under the DPDP Act.

3. Consent

We collect and process your personal data only after obtaining your free, specific, informed, unconditional, and unambiguous consent as required by Section 6 of the DPDP Act.

For forms (demo requests, FAQ access): you provide consent via an explicit checkbox before submission.
For analytics cookies (Google Analytics, Microsoft Clarity, Apollo): you consent via the cookie banner shown on your first visit.
You may withdraw your consent at any time by contacting us at privacy@goactivatr.com or submitting a data request.

4. Third-Party Data Processors

We share your personal data with the following third-party processors solely to fulfil the purposes described above. Each processor is bound by data processing terms:

Processor	Purpose	Data shared
Supabase (supabase.com)	Cloud database for storing form submissions	Name, email, phone, company, message
Web3Forms (web3forms.com)	Email notification service	Name, email, phone, company, message
Google Analytics (google.com)	Website usage analytics (analytics consent required)	Anonymous usage data, IP address
Microsoft Clarity (microsoft.com)	Session recording and heatmaps (analytics consent required)	Session interactions, anonymised data
Apollo.io (apollo.io)	B2B visitor identification (analytics consent required)	Company/domain inferred from IP

Analytics processors (Google Analytics, Microsoft Clarity, Apollo.io) are loaded only after you give analytics consent via the cookie banner.

5. Data Retention

Data Category	Retention Period
Demo request submissions (database)	24 months from submission, or until you request deletion
FAQ access leads (database)	12 months from submission, or until you request deletion
FAQ access cookie (browser)	12 months (previously 365 days, now capped at 12 months)
Analytics data (Google Analytics)	As per Google's retention settings (default 14 months)
Cookie consent preference (browser)	12 months

We erase personal data when the specified purpose is no longer served or upon withdrawal of consent, as required by Section 8(7) of the DPDP Act.

6. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights:

Right to access (§11): Request a summary of your personal data we hold and who it has been shared with.
Right to correction (§12): Request correction of inaccurate or incomplete personal data.
Right to erasure (§12): Request deletion of your personal data.
Right to withdraw consent (§6(4)): Withdraw your consent at any time. This will not affect the legality of processing before withdrawal.
Right to grievance redressal (§13): Lodge a complaint with us regarding any breach of your rights.
Right to nominate (§14): Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, submit a Data Subject Request or email us at privacy@goactivatr.com. We will respond within 30 days.

7. Cookies

We use the following categories of cookies:

Essential cookies: Required for the site to function (e.g., FAQ access session). Cannot be disabled.
Analytics cookies: Used by Google Analytics, Microsoft Clarity, and Apollo.io to understand site usage. Only set after you give explicit consent via the cookie banner.

You can change your analytics cookie preference at any time by clearing your browser's localStorage (key: activatr_consent) and revisiting the site, which will re-show the consent banner.

8. International Data Transfers

Some of our processors (Supabase, Google, Microsoft, Apollo) may store or process data outside India. We ensure such transfers are subject to appropriate safeguards. If the Central Government restricts transfers to specific jurisdictions under Section 16 of the DPDP Act, we will comply with such restrictions.

9. Children's Data

This website is intended for business professionals and is not directed at children (persons under 18 years). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or breach, as required by Section 8(5) of the DPDP Act. In the event of a data breach affecting your data, we will notify you and the Data Protection Board of India as required by Section 8(6).

11. Grievance Redressal

If you have a complaint or grievance regarding our processing of your personal data, contact us at:

Activatr Worklabs Private Limited

Email: privacy@goactivatr.com

General: sales@goactivatr.com

We will endeavour to resolve your grievance within 30 days of receipt. If your grievance is not resolved, you may approach the Data Protection Board of India once it is established.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the site after changes constitutes acceptance of the revised policy.