Privacy Policy

OpenI Partners LLP ("we", "us", "our") is committed to protecting your privacy. This policy applies to the website (www.openi.ai) and platform (app.openi.ai), together the "Site", and platform explains what personal data we collect, why, how we use and share it, how long we keep it, and your rights. We are the "data fiduciary" for personal data processed through the Site under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it. Our registered office is at OpenI Partners LLP, NESCO IT Park, Building 4, North Wing, Western Express Hwy, Goregaon, Mumbai, Maharashtra 400063, India.

This policy describes our data practices and where applicable, forms part of the notices we provide under the DPDP Act. By providing personal data to us, or by giving consent through the Site (for example when you register or accept cookies), you consent to the processing described herein. You may withdraw your consent at any time as described in section 9; withdrawal does not affect processing lawfully carried out before withdrawal.

We may collect and process personal data about you and your organisation, including: your name, e-mail address, phone number, job title, company name, company registration number and contact details; demographic information such as industry, preferences and interests; profile and business information you enter, such as funding sources and amounts, patents and patent applications, products and challenges; your persona and plan; billing information (payment itself is handled by our payment provider, and we do not store full card numbers); information you share with other users; your correspondence with us; and reports you make about problems with the Site.

We also collect information automatically about your device and use of the Site, such as IP address, browser type, domain names, access times, pages visited and referring website addresses. This is used to operate the Site, maintain the quality of the service and produce general usage statistics.

We do not knowingly collect personal data from anyone under 18. The Site is intended for business users. If you believe a person under 18 has provided us with personal data, please contact the Grievance Officer and we will delete it.

We process your personal data for the following purposes, on the basis of your consent or, where the DPDP Act permits, for legitimate uses such as performing our contract with you or complying with law:

• to create and manage your account and provide the Site and services, including matching, evaluation, challenges and messaging between users;
• to process payments and manage subscriptions;
• to generate AI Output (search results, evaluation scores, maps and recommendations) as described in the Terms of Use;
• to communicate with you about your account, service changes and support requests;
• to send you marketing about our services, where you have consented or where permitted by law, with an opt-out in every message;
• to secure the Site, prevent fraud and abuse, and enforce our terms;
• to analyse and improve the Site, using aggregated or anonymised data wherever possible; and
• to comply with legal obligations and respond to lawful requests from authorities.

Except as described in this policy, we will not disclose your personal data to any third party without your consent.

When you use the Site, certain profile information, including your name, organisation, location and any image, may be displayed to other registered users to enable the interactions the Site is designed for. Your profile privacy settings allow you to limit what is visible. Other users may contact you through private messages on the Site. Detailed information you mark as confidential, or that we tell you will be kept confidential, is not displayed to other users without your consent.

We may disclose personal data to: service providers who host, support, process payments for or analyse the Site on our behalf, who may use it only to provide those services and must keep it confidential; our subcontractors and business partners for the purpose of fulfilling our obligations to you; analytics and search-engine providers who help us improve the Site; a prospective buyer or seller in the event that we sell or buy any business or assets, or a party acquiring us or substantially all of our assets; and any person where we are under a duty to disclose in order to comply with a legal obligation, or to enforce or protect the rights, property or safety of OpenI, our customers or others.

We host the Site and store data on a cloud server. Your data may be transferred to, stored at and processed in locations outside your state or country, including by our staff and service providers, and those locations may have data-protection laws that differ from your own. We transfer personal data outside India only where permitted by the DPDP Act and applicable rules, and we put in place contractual and technical safeguards to protect it. By submitting your personal data you agree to this transfer, storage and processing.

We retain personal data only for as long as reasonably necessary for the purposes described above, including to provide and improve the Site and services, fulfil contractual obligations, keep proper records and accounts, and establish or defend legal claims, in each case in accordance with applicable law. When the purpose is fulfilled and no legal requirement applies, we delete or anonymise the data. If your account remains inactive for 24 months, we will delete or anonymise your personal data, subject to any data that we are required or permitted to retain under applicable law.

You may request deletion of your personal data at any time by contacting our Grievance Officer. We will consider and process such requests in accordance with applicable law and subject to any legal or other permitted requirements to retain certain information.

We implement technical and organisational safeguards designed to protect your data, and we regularly monitor our systems for vulnerabilities and attacks. OpenI is certified to ISO/IEC 27001:2022 for its information-security management system covering the development, deployment, and support of the B2B platform for Open Innovation & Startup Investment ecosystem management. No method of transmission or storage is completely secure, and we cannot guarantee that data will never be accessed, disclosed, altered or destroyed by a breach of our safeguards; transmission to the Site is at your own risk.

As permitted under the applicable law, if a personal data breach affects you, we will notify you and the Data Protection Board of India in the manner and within the time required by the DPDP Act and rules, by e-mail to the address on your account or by notice on the Site.

You can view and edit your personal information in your account after signing in with your credentials.

From the date on which the relevant provisions of the DPDP Act apply to OpenI's processing, you will have the right to: obtain a summary of the personal data we hold about you and how it is processed, and the identities of the parties with whom it has been shared; have inaccurate or incomplete data corrected, completed or updated; have your personal data erased where it is no longer needed for the purpose for which it was collected, unless we must keep it by law; withdraw consent at any time, as easily as you gave it; nominate another person to exercise your rights if you die or become incapacitated; and have your grievances heard by us and, if unresolved, by the Data Protection Board of India or where applicable law currently provides equivalent or similar rights.

You can exercise these rights through your account settings or by e-mailing the Grievance Officer at info@openi.ai. We may need to verify your identity. We will acknowledge and respond to your request within the time required by applicable law (and in any case within 30 days). You also have the right to ask us not to process your personal data for marketing; every marketing e-mail includes an unsubscribe link.

Our Site may contain links to and from websites of our partner networks, advertisers and affiliates. Those websites have their own privacy policies, for which we accept no responsibility. Please check them before submitting personal data.

Where the Site lets you post notes, messages, profiles, opinions, images, videos or other material ("Posted Content"), you confirm that you have all permissions and consents required to post it and that it complies with the Terms of Use and the Acceptable Use Policy, which sets out the content standards (including the prohibitions required under the Information Technology Act, 2000 and rules made under it). OpenI is not responsible for and does not endorse Posted Content.

We will post any changes to this policy on the Site and, where a change is material, notify you by e-mail or through the platform before it takes effect. Your continued use of the Site after a change takes effect means you accept the updated policy. If you object, you may stop using the Site and ask us to delete your data.

If you have a concern, complaint, question or request about this policy, our handling of your personal data or content or conduct on the Site, please contact our Grievance Officer:

Name: Vanessa B
E-mail: info@openi.ai
Address: OpenI Partners LLP, NESCO IT Park, Building 4, North Wing, Western Express Hwy, Goregaon, Mumbai, Maharashtra 400063

We will acknowledge and address grievances within the timelines prescribed under applicable law.