Legal & Policies

Overview

This page brings together the core policies that apply to the AI Rawat website, platform and related services (together, the “Services”).

AI Rawat is an enterprise data intelligence platform. We add a conversational intelligence layer on top of your existing systems — connecting data across ERP, CRM, data warehouses and business applications so your teams can ask questions in natural language and let AI agents surface answers, anomalies and risks in real time.

In this document, “AI Rawat”, “we”, “us” and “our” refer to AI.RAWAT GLOBAL, the company that operates the Services, with its registered office at B-1/212, Paschim Vihar, New Delhi 110063, India. “You” and “your” refer to the individual or organization using the Services. By accessing our website or using the platform, you agree to the policies below that apply to you.

Privacy Policy

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the rights you have over it.

1. Information we collect

a) Information you provide

• Account & contact data — name, business email, phone number, company name, job title and login credentials when you register, request a demo, or book an assessment.
• Communications — messages, support requests and feedback you send to us (e.g. via email or scheduling a discovery call).
• Billing data — where you subscribe to a paid plan, billing contact details and transaction records (payment card data is handled by our payment processor, not stored by us).

b) Information collected automatically

• Usage & device data — IP address, browser and device type, pages viewed, referring URLs, and interactions with the Services, collected through cookies and similar technologies (see the Cookie Policy).
• Log & diagnostic data — event logs, performance metrics and error reports used to operate, secure and improve the platform.

c) Customer Data from connected systems

When you connect a data source (for example Salesforce, SAP, Snowflake, BigQuery, Oracle, NetSuite, HubSpot, PostgreSQL or similar), the platform processes the business data within those systems to deliver insights (“Customer Data”). Customer Data may incidentally include personal data about your own employees, customers or partners. For this Customer Data, your organization is the data controller and AI Rawat acts as a data processor, handling it only on your documented instructions. See Data Processing & Security.

2. How we use information

• To provide, maintain, secure and improve the Services;
• To create and manage your account and authenticate access;
• To respond to enquiries, provide support and send service-related communications;
• To process transactions and manage subscriptions;
• To monitor usage, prevent fraud and abuse, and ensure platform integrity;
• To send product updates or marketing where permitted (you may opt out at any time);
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your Customer Data to train foundational AI models.

3. Legal bases for processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the basis of: (i) performance of a contract; (ii) your consent (which you can withdraw); (iii) our legitimate interests in operating and improving the Services; and (iv) compliance with legal obligations.

4. How we share information

We share personal information only as needed to run the Services:

• Sub-processors & service providers — cloud infrastructure, analytics, communications, and AI/LLM providers who process data on our behalf under contract. See the sub-processor table in Data Processing & Security.
• Professional advisors — auditors, lawyers and accountants, bound by confidentiality.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.
• Legal & safety — where required by law, regulation, legal process, or to protect rights, property and safety.

5. International data transfers

We may process information in countries other than your own. Where we transfer personal data across borders, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and equivalent mechanisms, and we implement additional technical measures where required.

6. Data retention

We retain personal data only for as long as necessary for the purposes described above, to comply with legal, tax and accounting obligations, and to resolve disputes. Customer Data is retained according to your instructions and your subscription agreement; on termination we delete or return it as described in the Terms of Service.

7. Security

We apply organizational and technical safeguards including encryption in transit and at rest, role-based access controls, network isolation, logging and continuous monitoring. Details are set out in Data Processing & Security. No method of transmission or storage is completely secure, but we work hard to protect your information.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. Residents of the EEA/UK (GDPR), India (Digital Personal Data Protection Act, 2023) and California (CCPA/CPRA) have specific rights under those laws. To exercise a right, contact us using the details in Contact Us. Where AI Rawat processes Customer Data on your organization’s behalf, please direct such requests to that organization; we will assist them as their processor.

9. Children

The Services are intended for business use and are not directed to individuals under 16. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here with an updated “Last updated” date and, where appropriate, notify you of material changes.

Cookie Policy

We use cookies and similar technologies to run our website, remember your preferences, and understand how the site is used.

What are cookies?

Cookies are small text files stored on your device when you visit a website. They help the site function, remember settings, and provide analytics. We also use similar technologies such as local storage and pixels.

Types of cookies we use

Managing cookies

You can control non-essential cookies through your browser settings or any cookie preferences tool we make available on the site. Disabling some cookies may affect how the website functions. For more on how to manage cookies, see your browser’s help pages.

Terms of Service

These Terms govern your access to and use of AI Rawat’s website and platform. By using the Services, you agree to them.

1. Eligibility & accounts

You must be at least 18 and able to form a binding contract. If you use the Services on behalf of an organization, you represent that you are authorized to bind that organization. You are responsible for the accuracy of your account details and for keeping your credentials confidential and secure. You must notify us promptly of any unauthorized use.

2. The Services

AI Rawat provides a data intelligence platform that connects to your systems and generates insights, summaries and alerts. Outputs are generated with the assistance of automated systems and AI models and may contain inaccuracies. You are responsible for reviewing and validating outputs before relying on them for material business, financial, legal, medical or operational decisions.

3. Subscriptions, fees & billing

• Paid features are provided under an order form or subscription plan that sets out scope, fees and term.
• Unless stated otherwise, fees are billed in advance, are non-refundable except as required by law, and exclude applicable taxes.
• Subscriptions renew for successive terms unless cancelled before the renewal date. We may change fees on renewal with prior notice.

4. Customer Data & ownership

As between the parties, you own all rights to your Customer Data. You grant us a limited, non-exclusive license to host, process and transmit Customer Data solely to provide and support the Services and as instructed by you. We process Customer Data in accordance with the Data Processing & Security section and any Data Processing Agreement between us.

5. Acceptable use

Your use of the Services must comply with the Acceptable Use Policy. We may suspend or limit access for violations that threaten the security, integrity or availability of the Services.

6. Intellectual property

The Services, including all software, models, designs, text, graphics and trademarks (excluding your Customer Data), are owned by AI Rawat or its licensors and are protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable right to use the Services during your subscription. You may not copy, modify, reverse engineer, resell or create derivative works except as permitted by law.

7. Third-party services

The Services integrate with third-party systems and data sources. Your use of those third parties is governed by their own terms, and we are not responsible for their availability, content or practices.

8. Warranties & disclaimers

We provide the Services with reasonable skill and care. Except as expressly stated, the Services are provided “as is” and “as available” without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Services will be uninterrupted, error-free, or that outputs will be accurate or complete.

9. Limitation of liability

To the maximum extent permitted by law, AI Rawat will not be liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill. Our total aggregate liability arising out of or relating to the Services will not exceed the amounts you paid to us for the Services in the twelve (12) months preceding the event giving rise to the claim.

10. Indemnification

You agree to indemnify and hold harmless AI Rawat from claims, damages and expenses arising out of your Customer Data, your use of the Services in breach of these Terms, or your violation of applicable law or third-party rights.

11. Term & termination

These Terms apply while you use the Services. Either party may terminate a subscription in accordance with the applicable order form. We may suspend or terminate access for material breach. On termination, your right to use the Services ends, and we will delete or return Customer Data as described in your agreement and applicable law.

12. Governing law & disputes

These Terms are governed by the laws of India, without regard to conflict-of-law rules. The courts located in New Delhi, India will have exclusive jurisdiction, except where mandatory local law provides otherwise.

13. Changes to these Terms

We may update these Terms from time to time. Material changes will be posted here with an updated date and, where required, communicated to you. Continued use after changes take effect constitutes acceptance.

Acceptable Use Policy

This policy sets out activities that are prohibited when using the Services. It protects our users, our platform and the connected systems you rely on.

You agree that you will not, and will not permit anyone to:

• Use the Services for any unlawful, fraudulent, deceptive or harmful purpose;
• Upload or connect data you do not have the right to process, or that infringes the rights of others;
• Attempt to gain unauthorized access to the Services, other accounts, or connected systems, or bypass authentication, rate limits or security controls;
• Introduce malware, viruses or malicious code, or interfere with the integrity or performance of the Services;
• Probe, scan, or test the vulnerability of the platform without our prior written authorization;
• Reverse engineer, decompile or attempt to extract source code or models, except as permitted by law;
• Use the Services to build a competing product, or to train competing AI/ML models;
• Use automated means to access the Services in a way that exceeds reasonable use or degrades performance for others;
• Process special categories of personal data or regulated data (e.g. health data) except under an appropriate agreement and safeguards;
• Misrepresent AI-generated outputs as verified fact where doing so could mislead or cause harm.

We may investigate suspected violations and take appropriate action, including suspending or terminating access and cooperating with law enforcement.

Data Processing & Security

Security is foundational to AI Rawat. This section describes how we process Customer Data and the safeguards we apply.

1. Our role & your role

For Customer Data, your organization is the controller and AI Rawat is the processor. We process Customer Data only on your documented instructions, for the purpose of providing the Services, and in accordance with a Data Processing Agreement (DPA), which is available on request and forms part of your agreement with us.

2. Data residency & isolation

AI Rawat is designed to operate against data that remains in your own cloud environment (your VPC) wherever technically feasible, minimizing data movement. Where hosted processing is required, environments are logically isolated per customer, and access is restricted on a least-privilege basis.

3. Security measures

• Encryption — data encrypted in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
• Access control — role-based access control (RBAC), single sign-on (SSO) support, and multi-factor authentication for privileged access.
• Network security — network segmentation, firewalls and private connectivity to reduce exposure.
• Monitoring & logging — audit logs, data lineage and continuous monitoring, aligned with our Governance & Change Intelligence capabilities.
• Secure development — code review, dependency scanning and vulnerability management.
• Resilience — backups, redundancy and tested disaster-recovery procedures.
• Personnel — background checks where lawful, confidentiality obligations and security training.

4. Sub-processors

We engage vetted sub-processors to help deliver the Services. Each is bound by data-protection obligations no less protective than those in our agreement with you. The representative categories below reflect our current stack; a current, itemized list is available on request.

5. Breach notification

We maintain an incident-response process. In the event of a personal-data breach affecting your data, we will notify you without undue delay and provide information reasonably necessary to meet your notification obligations under applicable law.

6. Requesting our DPA or documentation

Customers and prospects can request our Data Processing Agreement, security whitepaper, sub-processor list and compliance reports (subject to NDA) by contacting us at hello@ai-rawat.com.

Contact Us

Questions about these policies, your data, or to exercise a privacy right? We’re here to help.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority. If you are in India, you may raise a grievance with our contact above under the Digital Personal Data Protection Act, 2023.