PGZ AI Solutions

PGZ AI Solutions("we," "us," or "our"), a sole proprietorship operated under the laws of India by Pugazhenthi N, is committed to protecting the privacy of individuals ("you" or "user") who visit our website at pgzai.solutions(the "Website").

This Privacy Policy explains what personal data we collect, why we collect it, how we process and store it, and your rights in relation to that data. This policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as well as the Digital Personal Data Protection Act, 2023 ("DPDP Act"), to the extent applicable.

1. Data Fiduciary

The Data Fiduciary responsible for your personal data is:

2. Personal Data We Collect

We collect personal data only when you voluntarily submit it through the contact form on our Website — specifically, your name, email address, and message. In detail:

• Name: to identify and address you in our correspondence.
• Email address: to respond to your inquiry and communicate with you.
• Message: to understand your requirements and respond meaningfully.

We do not collect sensitive personal data as defined under the IT Rules, 2011 (such as financial information, biometric data, health data, sexual orientation, or political opinions).

3. Purpose and Lawful Basis for Processing

We process your personal data for the following purposes:

• Responding to inquiries: When you submit the contact form, we use your data to understand your request and respond to you via email.
• Business development: To evaluate potential engagements and provide you with relevant information about our services.
• Record keeping: To maintain records of business communications for operational and legal purposes.

Under the DPDP Act, 2023, the lawful basis for processing your data is your explicit consent, provided when you voluntarily submit the contact form. You may withdraw your consent at any time by contacting us at the email address provided above.

4. Data Storage and Security

Your personal data submitted through the contact form is stored on Supabase, a cloud-hosted PostgreSQL database service. Our Supabase instance is hosted in the Mumbai (ap-south-1) region, meaning your data is stored on servers located within the territory of India.

The contact form is served and the initial submission is handled by Vercel Inc., which provides hosting and serverless compute for this Website. Our Vercel deployment uses the Mumbai (ap-south-1) region for serverless functions, meaning the submission is processed within Indian territory before being stored in Supabase. Vercel acts as a Data Processor on our behalf.

We implement reasonable security practices including:

• Encrypted data transmission using TLS (HTTPS) for all communications between your browser and our servers.
• Role-based access controls on the database, limiting access to authorised personnel only.
• Row Level Security (RLS) policies on the database to prevent unauthorised data access.
• Supabase's built-in infrastructure security, including encryption at rest and network isolation.

While we take all reasonable measures to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections in line with the obligations under Section 43A of the IT Act, 2000.

In the event of a personal data breach affecting your personal data, we will notify the Data Protection Board of India and the affected Data Principals in accordance with the requirements of the Digital Personal Data Protection Act, 2023, and the rules made thereunder.

5. Data Retention

We retain your personal data for a maximum period of one (1) year from the date of submission, or until the purpose for which it was collected has been fulfilled, whichever is earlier. After this period, your data will be permanently deleted from our systems unless retention is required by law or for the establishment, exercise, or defence of legal claims.

6. Data Sharing and Disclosure

We do not sell, rent, trade, or otherwise share your personal data with any third parties for marketing or commercial purposes.

Your data may only be disclosed in the following limited circumstances:

• Legal obligation: If required by law, regulation, legal process, or enforceable governmental request under applicable Indian law.
• Website hosting and serverless compute (Vercel): Vercel Inc. acts as our Data Processor, providing hosting and serverless functions for this Website. Your contact form submission is processed by a Vercel serverless function deployed in the Mumbai (ap-south-1) region, within Indian territory, before being written to the database.
• Database hosting (Supabase): Supabase Inc. acts as our Data Processor and hosts the database in which your contact form submission is stored. Our instance is located in the Mumbai (ap-south-1) region, within Indian territory.
• Transactional email (Resend): When you submit the contact form, the details you provide (name, email address, and message) are transmitted to Resend (Resend, Inc.), a transactional email delivery service, solely to generate an internal notification email to our team. Resend's servers are located in the United States, and Resend acts as a Data Processor on our behalf.

The contact form submission is processed entirely within India: your data passes through Vercel's serverless function in the Mumbai (ap-south-1) region and is stored in Supabase's Mumbai (ap-south-1) region. The only transfer of your personal data outside India is the limited transmission to Resend (US) described above, which is necessary solely to deliver an internal notification email to our team. Apart from this, your personal data does not leave Indian territory.

7. Cookies and Tracking Technologies

This Website sets no cookies of any kind — no session cookies, no authentication cookies, and no third-party advertising or tracking cookies. We do not use analytics services, tracking pixels, device fingerprinting, or any other tracking technology, and no personal data is collected from you passively simply by visiting the Website.

If this changes in the future, this Privacy Policy will be updated accordingly and, where required under applicable law, your consent will be obtained before any non-essential cookie or tracking technology is deployed.

8. Your Rights

Under the DPDP Act, 2023, you have the following rights as a Data Principal:

• Right to Access: You may request confirmation of whether we hold your personal data and obtain a summary of the data we process.
• Right to Correction: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data. Upon receiving such a request, we will delete your data within 30 days, unless retention is required by law.
• Right to Withdraw Consent: You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Nominate: You may nominate any other individual to exercise these rights on your behalf in the event of your death or incapacity, in accordance with Section 14 of the DPDP Act, 2023.
• Right to Grievance Redressal: You have the right to raise a complaint regarding the processing of your personal data.

To exercise any of these rights, please contact us at inquiry@pgzai.solutions. We will respond to your request within 30 days.

9. Grievance Officer

In accordance with Section 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Grievance Officer for this Website is:

10. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete such data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The updated policy will be posted on this Website with a revised "Effective Date." We encourage you to review this page periodically. Continued use of the Website after any changes constitutes your acceptance of the updated policy.

Change log — on 19 August 2026, this Policy was updated: the contact form was reduced to collect only name, email address, and message — two optional fields present in earlier versions of this Policy were dropped. Section 7 (Cookies and Tracking Technologies) was also rewritten to confirm that the Website sets no cookies.

12. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Chennai, Tamil Nadu, India.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: