Data Protection & Privacy Requests

QUBENIX AI PRIVATE LIMITED (“Qubenix”, “Company”, “we”, “us”, or “our”) is committed to transparent, lawful, and accountable governance of personal information. This Data Protection & Privacy Requests page establishes the dedicated public mechanism through which individuals whose personal data we collect or process can exercise their statutory rights, inquire about their personal records, and submit data protection grievances.

We operate in accordance with applicable Indian legal standards, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules, 2011”), and the evolving phased framework of the Digital Personal Data Protection Act, 2023 (“DPDP Act, 2023”).

This operational page works directly in conjunction with our comprehensive Master Privacy Policy. For detailed disclosures on what categories of information Qubenix collects (such as consultation inquiry forms, voluntary submissions, and technical log parameters), the legal grounds for processing, third-party infrastructure hosts, cross-border considerations, and security safeguards, please consult the complete document:

Subject to identity verification and statutory limitations under Indian law, individuals whose personal data is maintained by Qubenix may submit requests within the following categories:

• Request for Information / Access: Seeking confirmation of whether Qubenix holds personal data pertaining to you, along with a summary of the data and categories of processing.
• Correction & Rectification: Requesting the correction, updating, or completion of inaccurate, outdated, or misleading personal information.
• Erasure & Deletion: Requesting the deletion or purging of personal information that is no longer necessary for the commercial purpose for which it was originally collected.
• Withdrawal of Consent: Withdrawing consent previously provided for voluntary marketing communications, exploratory consultations, or elective digital touchpoints.
• Grievance & Redressal: Registering a formal complaint regarding the handling, confidentiality, or processing of your personal information.

To maintain strict data confidentiality, Qubenix does not transmit privacy requests through third-party marketing databases or unencrypted public forms. All privacy requests are received and tracked directly by our Corporate Privacy & Legal Administration department via electronic correspondence to info@qubenix.in.

To expedite processing, you may use the Privacy Request Form & Template Generator below to structure your inquiry before dispatch:

Alternatively, you may draft your request manually from your verified email address and send it directly to:

info@qubenix.in

To safeguard personal information against fraudulent impersonation, unauthorized access, or social engineering attacks, QUBENIX AI PRIVATE LIMITED will not execute substantive data disclosure, modification, or erasure without first verifying the genuine identity of the requesting individual.

Our verification protocol operates as follows:

• Matching Communication Channels: Requests must originate from the verifiable email address previously submitted in connection with the record in question.
• Contextual Corroboration: We may request confirmation of specific engagement metadata (such as the approximate date of consultation booking, commercial company affiliation, or transaction reference numbers).
• No Unsolicited Identity Harvesting: We do not demand government-issued identity documents (such as Aadhaar, PAN card, or Passport) for routine website inquiries. If high-assurance verification is strictly necessitated by sensitive commercial records, such verification will be conducted via secure, dedicated channels.

Under Rule 5(6) of the SPDI Rules, 2011, and Section 12 of the DPDP Act, 2023, individuals who have supplied personal data have the right to review their information and have any inaccurate, incomplete, or misleading records corrected.

When submitting a correction request:

• Specify the exact data field requiring amendment (e.g., incorrect spelling of name, updated corporate title, or amended enterprise email address).
• Provide the accurate replacement information.
• Upon verification, Qubenix will update its active business systems and notify any relevant internal teams within our standard processing timeline.

You may request the deletion or purging of your personal information from our active records where:

• The personal data is no longer necessary for the commercial consultation, partnership evaluation, or contract for which it was originally collected.
• You have validly withdrawn consent upon which the processing was founded, and no independent statutory ground obligates Qubenix to retain the record.

Upon verification of an eligible deletion request, Qubenix will securely expunge the personal information from active databases and request corresponding deletion by infrastructure processors, subject to the legal retention exceptions delineated in Section 11 below.

Where our processing of your personal information is predicated solely upon your voluntary consent (for example, receiving technical updates or participating in voluntary discovery calls), you possess the right under Rule 5(7) of the SPDI Rules, 2011 to withdraw such consent at any time.

To withdraw consent:

• Send an email stating your withdrawal to info@qubenix.in with the subject line “Withdrawal of Consent”.
• For elective email communications, click the “unsubscribe” link embedded in the footer of any informational email.
• For website preference cookies, adjust your settings using the Cookie Preferences Manager.

Please note that the withdrawal of consent does not affect the lawfulness of processing undertaken prior to the withdrawal.

In addition to access, correction, and deletion, individuals may communicate objections regarding specific processing modalities:

• Direct Communications Opt-Out: You may object at any time to receiving direct business development or promotional communications from Qubenix.
• International Data Principal Rights: For visitors accessing our services from jurisdictions outside India (such as the European Union, United Kingdom, or California), we evaluate requests for restriction of processing or data portability in accordance with applicable cross-border data protection principles and contractual obligations.

QUBENIX AI PRIVATE LIMITED does not retain personal information indefinitely. We adhere to structured data lifecycle parameters:

• Website Inquiries: Unconverted prospective client inquiries submitted through web forms are retained for up to twelve (12) to twenty-four (24) months for business continuity and reference, after which they are systematically reviewed and purged.
• Server Logs: Transient server log parameters (IP addresses, user-agent strings) generated for network security and DDoS mitigation are retained for short operational windows (typically 30 to 90 days) before automated rotation.
• Commercial Client Records: Data relating to executed software engineering engagements, tax invoices, and formal contracts is retained in accordance with statutory limitation and accounting statutes.

Statutory privacy rights are not absolute. Qubenix may lawfully decline, delay, or restrict the fulfillment of an erasure or restriction request where retention is strictly required or authorized by law, including:

• Statutory & Tax Compliance: Maintaining commercial invoices, payment records, and accounting ledgers under the Companies Act, 2013, and the Goods and Services Tax (GST) laws of India.
• Legal Claims & Defense: Establishing, exercising, or defending against actual or threatened legal disputes, contractual claims, or arbitral proceedings under the Indian Contract Act, 1872.
• Law Enforcement Mandates: Responding to lawful summons, court orders, or directives issued by competent law enforcement or regulatory authorities under the Code of Criminal Procedure or Information Technology Act, 2000.
• Security Incident Investigation: Preserving log evidence necessary to investigate cybersecurity incidents or fraudulent attacks against our technical infrastructure.

In compliance with Rule 5(9) of the SPDI Rules, 2011, and the grievance redressal framework of the DPDP Act, 2023, Qubenix maintains an internal escalation hierarchy:

1. First-Tier Submission: Submit your privacy grievance in writing to info@qubenix.in with the subject line “Data Protection Grievance – Formal Escalation”.
2. Internal Review & Redressal: Our Corporate Privacy & Legal Administration department will review the matter, examine server and communication records, and issue a reasoned written response.
3. Regulatory Recourse: Under Section 13 of the DPDP Act, 2023, once the relevant institutional provisions are fully commenced, a Data Principal who remains aggrieved following the exhaustion of the Data Fiduciary's internal grievance redressal process may escalate their complaint to the Data Protection Board of India (DPBI) in the manner prescribed by the Central Government.

Upon receipt of a verified privacy request, Qubenix adheres to the following operational procedure:

If exceptional technical complexity or multiple concurrent requests necessitate an extension of the resolution timeframe, Qubenix will notify the applicant in writing within the initial thirty-day window, explaining the reasons for the delay.

All data protection inquiries, statutory rights requests, and privacy grievances must be directed to:

Please review our companion Privacy Policy, Terms & Conditions, and Cookie Policy for complete legal frameworks governing our digital services.