Privacy Policy

Last updated: June 2026. This is a general template provided for transparency and is pending review by ScaleGrowth Digital's legal counsel.

1. Introduction and Scope

ScaleGrowth Digital Solutions Private Limited (CIN U62013MH2026PTC467947) ("we," "us," or "Company") operates AI Native at ainative.in. This Privacy Policy explains how we collect, use, store, and protect information when you use the Service, and describes your rights under applicable law including India's Digital Personal Data Protection Act, 2023 (DPDP Act).

This Policy applies to all users of the Service. By using the Service, you consent to the practices described here.

2. Information We Collect

We collect the following categories of information:

  • Account details: Your name, email address, and company or organization name that you provide when registering.
  • Billing details: Payment information is collected and processed by our payment gateway provider. We do not store full card numbers or bank credentials on our systems; we receive only a transaction reference and status from the payment gateway.
  • Brand and domain data: Brand names, domain names, competitor names, and query configurations that you enter to set up measurements.
  • Usage and device logs: Pages visited, features used, timestamps, browser type, operating system, IP address, and session identifiers. This information helps us operate, secure, and improve the Service.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate your sessions.
  • Process credit purchases and track credit balances.
  • Run brand measurement scans and generate dashboard reports as requested by you.
  • Communicate with you about your account, purchases, and the Service (including transactional emails and service notices).
  • Detect, investigate, and prevent fraudulent or abusive activity.
  • Comply with legal obligations and enforce our Terms of Service.
  • Improve the Service through aggregate, anonymized analysis of usage patterns.

We do not sell your personal data to third parties.

4. Legal Basis and Consent

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), we process your personal data on the following bases:

  • Consent: By creating an account and using the Service, you provide consent to the processing described in this Policy. You may withdraw consent at any time (see "Your Rights" below), though withdrawal may limit your ability to use the Service.
  • Legitimate uses: Processing necessary to provide the Service you have contracted for, to detect fraud, and to comply with legal obligations.

We act as the Data Fiduciary for personal data you provide. Where we share data with processors, those processors act on our instructions.

5. Sharing and Processors

We share your information only as necessary to operate the Service:

  • Payment gateway: To process credit purchases and handle payment authentication. The payment gateway processes your payment details under its own privacy policy.
  • Cloud hosting and infrastructure: To store data and run the Service's backend systems. Data is processed on servers operated by our infrastructure provider.
  • Transactional email: To send account notifications, purchase receipts, and service communications to your registered email address.
  • Analytics: Aggregate, anonymized usage data may be processed by analytics tooling to help us understand Service performance. This does not involve sharing personally identifiable information.

We do not share your personal data with advertisers or data brokers. We may disclose information if required by law, court order, or a lawful request from a government authority.

6. Data Retention

We retain your account and personal data for as long as your account is active or as needed to provide the Service. If you request account closure, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it by law (for example, financial and tax records as required under Indian law). Measurement scan results and usage logs may be retained in anonymized form for service improvement.

7. Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These include encrypted data transmission (HTTPS), access controls, and periodic security reviews. No method of transmission or storage is completely secure; we cannot guarantee absolute security but we take reasonable steps to protect your information.

8. International and India Data Location

The Service is operated by a company incorporated in India. Data may be stored and processed on servers located in India or in other countries where our infrastructure providers operate. We take steps to ensure that any cross-border transfers of personal data are subject to appropriate safeguards consistent with the DPDP Act and applicable law.

9. Your Rights

As a Data Principal under India's DPDP Act 2023, and as applicable under other laws, you have the following rights:

  • Access: You may request a summary of the personal data we hold about you.
  • Correction: You may request correction of inaccurate or incomplete personal data.
  • Erasure: You may request deletion of your personal data, subject to legal retention obligations.
  • Withdraw consent: You may withdraw consent to processing at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Grievance redressal: You may raise a complaint or grievance with our Grievance Officer (see below).

To exercise any of these rights, contact us at [email protected] from your registered email address. We will respond within the timeframe required by applicable law.

10. Cookies and Sessions

We use a session cookie to keep you logged in during your use of the Service. This cookie is essential for the Service to function and is deleted when you log out or close your browser session. We do not use third-party advertising cookies or tracking pixels.

11. Children

The Service is not directed at persons under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at [email protected] and we will delete it promptly.

12. Grievance Officer and Contact

In accordance with the DPDP Act 2023 and the Information Technology Act, 2000 and rules thereunder, the contact details of the Grievance Officer are:

  • Organization: ScaleGrowth Digital Solutions Private Limited
  • Email: [email protected]
  • Response time: We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will notify you of material changes by email or through the Service. Continued use of the Service after the revised Policy takes effect constitutes your acceptance of the updated Policy.