Last updated 30 September 2026
Privacy policy
The short version: this website collects almost nothing. It sets no cookies, runs no analytics and loads nothing from anyone else. What follows is the long version.
1. Who we are
nineight is run by Anirudh KS, Jeevan Kumar B, Shyam UK and Srinivasa Prasad, together as nineight, Bengaluru, Karnataka, India (“nineight”, “we”). For this website we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“the Act”) and the Digital Personal Data Protection Rules, 2025 (“the Rules”).
Questions about this policy, requests about your data and complaints are handled by our customer service team at business@nineight.ai. We have not been notified as a Significant Data Fiduciary, so we have not appointed a Data Protection Officer.
2. The personal data we handle
| What | How we get it | Why | Basis | Kept for |
|---|---|---|---|---|
| Server logs: IP address, date and time, the page requested, browser type | Recorded by our web host when your browser asks for a page | To deliver the website, keep it secure and investigate misuse | Legitimate use under section 7(a) of the Act: your browser sends these details to get the page | Up to one year, for security, as Rule 6 of the Rules provides |
| Your privacy choice: the notice version, the time, your language and your choice for each purpose | Saved in your own browser when you choose | To remember your choice so we do not ask on every visit, and as your record of it | Necessary to honour your choice | 12 months, then you are asked again. It never leaves your browser |
| Browser details: local time and time zone, languages, screen size, browser and system, the site you came from, light or dark setting, processor threads, input type, time on the page | Read by the page on your device, only if you allow it | To show you what your browser tells every website | Your consent (section 6 of the Act) | Not kept. Never stored or sent to us. Gone when you close the page, press Erase or withdraw consent |
| What you write to us: your email address, your name if you give it, and your message | You send it by email, including through “Work with us” | To reply and follow up on what you asked | Legitimate use under section 7(a) of the Act: you gave it voluntarily for that purpose | As long as we need it to deal with what you wrote about. Then we erase it, unless a law requires us to keep it |
| The assessment | Not live yet. Today, “Start the assessment” opens an email, which is handled like any other email above. We will update this policy before the assessment collects anything. | |||
We do not use cookies, analytics, advertising, tracking pixels, social media plugins or embedded content from other services. We do not buy, sell or rent personal data, and we do not use it to profile you.
3. Consent, and withdrawing it
We ask for consent only for the optional browser details. They stay off until you switch them on. You can withdraw consent at any time, as easily as you gave it, from “Privacy settings” at the foot of the page or in the menu (section 6(4)). The page stops reading your browser at once and removes what it showed. Withdrawing does not affect anything done before you withdrew.
4. Who we share it with
Only the service providers who process it for us under a contract, as Data Processors under section 8(2): our web hosting provider and our email provider. We may also disclose personal data where the law requires it.
5. Transfers outside India
Our service providers may store data on servers outside India. Any such transfer follows section 16 of the Act and any restriction the Central Government notifies.
6. How long we keep it
As set out in the table. Once a purpose is served and no law requires us to keep the data, we erase it (section 8(7)).
7. Your rights
- Access (section 11): a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
- Correction and erasure (section 12): to have your personal data corrected, completed, updated or erased.
- Grievance redressal (section 13): to have a complaint about how we handle your data answered.
- Nomination (section 14): to name someone to exercise these rights for you if you die or become unable to.
- Withdrawing consent (section 6(4)): at any time, as set out above.
8. How to exercise them
Write to our customer service team at business@nineight.ai, saying which right you want to exercise. We may ask for information that confirms it is you. We respond within 90 days, as Rule 14 of the Rules requires, and sooner where we can.
9. Complaints to the Data Protection Board
If we do not resolve your grievance, you can complain to the Data Protection Board of India. The Act asks you to use our grievance process first (section 13(3)).
10. Your duties
Section 15 of the Act asks you, when you exercise these rights, to follow the law; not to impersonate anyone; not to hide material information when giving personal data for a document, identifier or proof of identity or address issued by the State; not to file a false or frivolous grievance or complaint; and to give only verifiably authentic information when asking for correction or erasure.
11. Children
This website is for businesses. We do not knowingly process the personal data of anyone under 18. If we ever need to, we will first obtain verifiable consent from a parent or lawful guardian, as section 9 of the Act and Rule 10 of the Rules require. If you think a child has written to us, tell us and we will erase it.
12. Security and breaches
We protect the personal data we hold with reasonable security safeguards, as section 8(5) of the Act and Rule 6 of the Rules require. If a personal data breach affects you, we will tell you and the Data Protection Board, as section 8(6) and Rule 7 require.
13. Changes
If we change this policy, we update the date at the top. If a change affects how we use data we already hold, or adds anything that needs your consent, we will ask you again before it takes effect.