Who is responsible
This notice covers Culvion Technologies’ own website enquiries, privacy requests and business relationship records. Culvion AI Private Limited operates the Culvion Technologies website. Registered office: 4005, Sector 67A, Ansal Essencia, Gurugram, Haryana, India. Privacy and grievance contact: Akshat Sharma. Contact: [email protected]. Client information processed under a BPO or software agreement is subject to that engagement’s instructions and data-processing terms; this notice does not replace the client’s own notice.
Information you provide
An enquiry requires your name, email address, phone number and area of interest. You can also add a message, company name, contact preference or time zone. Submitted details are stored with a reference number, time, source and the response-permission record. The operator can add conversation notes, ownership, proposal details, actual response records and follow-up dates. Privacy requests collect a reply email, request type and description; a name is optional. We need enough information to respond, but do not ask for identity documents through these forms. Please leave out passwords, financial account details, health information and confidential records about other people.
Purposes and legal grounds
We use enquiry information to answer the request, understand the proposed work and maintain a business conversation. We ask for specific permission to respond; it does not authorise unrelated marketing. Where UK or EEA law applies, requested pre-contract steps are used where the individual is a prospective contracting party; legitimate interests support relevant correspondence with business representatives and proportionate website security. Privacy requests are handled to respect information rights and applicable legal duties. Optional measurement uses your separate choice, which can be withdrawn. We do not use a sales enquiry as permission for newsletters, cold campaigns or automated prospect calls.
Website operation and preferences
The hosting service processes requests and technical information needed to deliver and protect the site. Our application uses hashed rate-limit identifiers rather than storing raw IP addresses in enquiry records. Essential storage supports login security, your motion choice and a project brief you choose to prepare. Optional first-party measurement is off until you enable it in Privacy choices. It counts permitted page and enquiry events and may attach limited campaign labels to an enquiry; events exclude enquiry text, contact fields and full URLs. Privacy-request pages are excluded from measurement. The cookie and storage notice explains the current storage and lifetimes.
Chat, voice and assisted notes
The website assistant uses approved business information. When AI chat is enabled, your question and recent chat context are sent to Mistral to generate a response; prepared website answers are available as a fallback. Browser voice starts only when you choose it and grant microphone access. Audio is transported through the project’s LiveKit server, transcribed by Soniox, processed with Mistral and answered using Inworld speech. The application does not record browser-call audio or save chat and browser-voice transcripts to the lead database. Provider processing and retention are governed by the configured accounts and their terms; this is not a promise that providers retain nothing. On-page conversation text lasts for the current page session. Only an enquiry you separately review and submit creates a sales record. Typing remains available. The assistant is AI, not a human representative, and cannot book or change accounts. Internal AI drafting, speech and telephone reminders require separately configured providers. When enabled, they can process relevant lead context, operator notes or audio for that task. The operator reviews drafts and recorded notes. We do not use the guide to make decisions with legal or similarly significant effects about visitors.
Recipients and overseas processing
Access is restricted to the authorised operator and providers required to operate the chosen services, with professional advisers or authorities involved when necessary and permitted. We do not sell personal information or share it for cross-context behavioural advertising. Confirmed provider and processing-location information: Cloudflare handles website traffic and security, Onlive Server hosts the application, and Resend delivers enquiry notifications. When enabled, Mistral processes assistant requests, Inworld generates speech, and Soniox transcribes browser voice on our LiveKit infrastructure. Provider processing can occur outside India. Cross-border processing requires the safeguards applicable to the actual transfer; mentioning a mechanism here does not create a signed transfer agreement. Ask through the privacy-request form for information about the arrangements relevant to your records.
Retention and protection
Inactive enquiries and their conversation notes are normally deleted or anonymised 12 months after the last meaningful business contact. We review inactive records monthly and can remove information earlier when it is no longer needed. Active proposals and customer relationships are reviewed while work continues. Records needed for a contract, accounting obligation, dispute or legal hold follow the relevant requirement, with access restricted and the reason for longer retention recorded. Automated reminders and internal edits do not restart the 12-month period. We normally keep a minimal record of a closed privacy request for 24 months to demonstrate how it was handled. Unnecessary attachments or identity evidence are removed earlier. An active dispute or legal obligation may require limited evidence to be kept longer. Records must be reviewed against their purpose, applicable obligations, disputes and legal holds. Archiving a lead hides it from the active queue; it does not erase it. A reviewed deletion process must also address conversation history, exports, provider copies and backups. Aggregate measurement counts are kept for 180 days; that period does not describe all lead or security-log retention. Access controls, protected sessions and bounded data handling reduce risk, but no website can promise absolute security.
Requests, withdrawal and complaints
Use the privacy-request form to ask for access or a copy, correction, deletion, restriction, objection, consent withdrawal or to raise a complaint. Rights, exceptions, appeals and response periods depend on the law that applies. You do not need a sales account or marketing consent. We may seek proportionate verification or clarification before releasing or changing information. Withdrawal does not invalidate earlier lawful processing and may affect a service that depends on that permission. We explain relevant restrictions or refusal and available review routes. Where UK rules apply, privacy complaints are acknowledged within 30 days and investigated without undue delay; rights-request deadlines are assessed separately and are generally one calendar month. You may also contact the relevant regulator. India’s DPDP rights and grievance framework is being introduced in phases; we will update the notice as the applicable provisions take effect.
Children and sensitive information
This is a business-services website intended for adults, not a service designed for children. Do not submit a child’s information or sensitive customer records in a general enquiry. If you believe such information has been provided, tell us through the privacy-request route so it can be reviewed and handled appropriately. This audience statement does not replace any child-protection or sector obligations that may apply to a future service.
Privacy signals and notice updates
Global Privacy Control keeps optional measurement disabled on this site, even if a previous browser choice allowed it. This is our site preference policy and is not a claim that analytics consent and every statutory sale or sharing opt-out are identical. We do not perform cross-site behavioural advertising. Older Do Not Track signals do not change essential service operation; optional measurement remains controlled by Privacy choices and Global Privacy Control. We date material notice changes and review the notice before adding providers, new uses or new data categories.
Independent advice and complaints
You can contact the regulator relevant to your situation, including the UK ICO, an EEA supervisory authority, the California Privacy Protection Agency, Australia’s OAIC or the Office of the Privacy Commissioner of Canada. These links do not mean every law applies to every enquiry. Contact us if you need help identifying the appropriate route.