LAST UPDATED · 12 JULY 2026
Privacy Policy
1Who we are
‹Registered Entity Name Pvt Ltd› ("Eureka", "we", "us") is a company registered in India, with its registered office at ‹address, Mumbai, Maharashtra ‹PIN››. We build AI models and applications, and we deliver AI training programmes.
This policy explains what personal data we collect through eurekamoment.co, why, and what you can do about it. It is written to meet our obligations under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where it applies to you, the EU/UK GDPR.
For personal data processed on behalf of a client during a project engagement, we act as a data processor and the client's own privacy notice governs. This policy covers only the data we collect as a data fiduciary / controller in our own right — principally, enquiries made through this website.
2What we collect
When you submit an enquiry: your name, work email, and — if you choose to give them — phone number, organisation, role, indicative budget, and the contents of your message. We also record the fact and time of your consent.
Automatically, when you visit: a one-way hashed version of your IP address (we never store the raw address), your browser user-agent string, the page you submitted from, the referring page, and any UTM campaign parameters in the URL.
We do not collect: payment details, government identifiers, biometric data, or any special-category data through this website. Please don't put confidential or sensitive information in the enquiry message — use the email addresses in §9 for anything that needs care.
3Why we use it
| Purpose | Basis |
|---|---|
| Replying to your enquiry and having a commercial conversation | Your consent, given at the form |
| Understanding which channels bring us useful enquiries | Legitimate interest in operating the business |
| Detecting and blocking spam and abuse of the form | Legitimate interest in security |
| Meeting legal, tax, and regulatory obligations | Legal obligation |
We do not sell your data. We do not share it with advertisers. We do not use enquiry data to train any AI model — ours or anyone else's.
4Who sees it
Only the people at Eureka who need to answer you. Beyond that, three categories of processor, each bound by contract and each processing only on our instructions:
- ‹Neon / database hosting› — stores the enquiry record.
- ‹Vercel / application hosting› — serves the website.
- ‹Resend / transactional email› — delivers the notification that your enquiry arrived.
Some of these providers operate infrastructure outside India. Where data is transferred internationally, we rely on the provider's standard contractual clauses and equivalent safeguards. We will name the current processors on request.
5How long we keep it
Enquiries are retained for 24 months from your last contact with us, then deleted. Enquiries marked as spam are deleted within 30 days. If you become a client, project records are governed by the engagement contract, not this policy.
6Your rights
Under the DPDP Act (and the GDPR, if it applies to you) you may ask us to:
- tell you what personal data of yours we hold and what we've done with it;
- correct anything that's wrong or incomplete;
- erase it;
- withdraw your consent — which we'll honour, though it means we can't continue the conversation;
- nominate someone to exercise these rights on your behalf if you're unable to;
- raise a grievance with us, and escalate to the Data Protection Board of India if we don't resolve it.
Write to ‹privacy@eurekamoment.co›. We respond within 30 days. There is no charge.
7Security
Data in transit is encrypted (TLS 1.2+). Data at rest is encrypted by our database provider. Access to enquiry records is restricted by role and logged. IP addresses are hashed with a rotating salt before storage, so we cannot reverse them. We keep a documented process for reporting a personal data breach to the Data Protection Board and to affected individuals, as the DPDP Act requires.
No system is perfectly secure, and we won't pretend otherwise. If something goes wrong, we will tell you.
8Cookies
This site uses no advertising or tracking cookies. See the Cookie Policy.
9Contact and grievances
Grievance Officer: ‹Full Name›
Email: ‹privacy@eurekamoment.co›
Post: ‹Registered Entity Name Pvt Ltd›, ‹address›, Mumbai, Maharashtra ‹PIN›, India
If you're not satisfied with our response, you may complain to the Data Protection Board of India.
10Changes
If we change this policy materially, we'll update the date at the top and, where we have your contact details and the change affects you, tell you directly.