Privacy policy

Who we are

AI SpeedForce is not a company. It is the trading name of Poonam Devi, an individual who runs the business as a sole proprietor from India. When this policy says "we", "us" or "our", it means Poonam Devi, trading as AI SpeedForce.

We decide why and how the personal data described here is used. That makes us the Data Fiduciary under India's Digital Personal Data Protection Act 2023, and the controller under the EU and UK General Data Protection Regulation (GDPR). You, as the person the data is about, are the Data Principal under Indian law and the data subject under the GDPR.

What this policy covers

This policy covers personal data we handle when you:

• visit aispeedforce.com;
• send us an inquiry through the contact form, or arrange a call with us;
• write to us by email; and
• hire us for a project, where we may see material you share with us.

During a project we sometimes work inside your systems, and those systems can hold personal data about your own customers or staff. For that data you decide what happens to it and we act on your written instructions. You are the Data Fiduciary or controller, and we are your Data Processor or processor. The client confidentiality section and your project agreement cover how we handle it.

What we collect

Inquiry form and call bookings

When you use the contact form, or arrange a call with us, we collect:

• your name;
• the email address you give us, usually a work address;
• your company name, if you provide it;
• the type of work you are interested in; and
• your message, which describes a task and may name the systems your business uses.

The form posts to a script on this website's own server. That script sends your inquiry to us as a single email. The email also records when it was sent, the IP address it came from and your browser's user agent string, which help us spot spam and tell whether an AI assistant sent it for you. No outside form service, CRM or tracking pixel is involved.

Agent-readiness scanner

When you use the agent-readiness scan, we receive the website address you enter. The report for that site is kept for ten minutes so a repeat scan is instant. To stop the tool being abused, we also keep a one-way hash of your IP address, which cannot be turned back into the address, and a count of recent scans. Both are deleted within an hour. The requests to the scanned site come from our server, so that site does not see your IP address.

Email correspondence

If you write to us, we keep your email address, your message and anything you attach, along with our replies.

Server logs and IP address

Like every web server, ours records each request it receives. A log entry holds your IP address, the date and time, the page or file requested, the response status, the referring page if your browser sends one, and your browser's user agent string. We do not use these logs to profile you or to follow you across other sites.

Analytics

This site does not currently run any analytics or tag manager, and it sets no cookies. If we add analytics later, we will update this policy and the cookie policy before it goes live, and ask for your consent first where the law requires it.

Client project material

If you hire us, you may share documents, data samples, example tasks, system access, credentials and other material so we can do the work. Some of it may contain personal data. We only use it as described in client confidentiality below.

What we do not ask for

We do not ask for sensitive personal data through this website. That includes passwords to personal accounts, bank, card or other payment details, health information and biometric data. Please do not put them in the contact form.

Why we use it, and our legal bases

We use personal data only for the purposes below. Each purpose has a legal basis under Indian law and under the GDPR.

Where we rely on your consent, you can withdraw it at any time by writing to us. Withdrawing consent does not affect anything we did before you withdrew it. We may not be able to carry on a project without the data it needs.

We do not sell personal data, use it for advertising, or add you to a mailing list.

Indian law that applies

We handle personal data in line with the Digital Personal Data Protection Act 2023 and the rules made under it, to the extent they are in force. We also follow the Information Technology Act 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, known as the SPDI Rules, to the extent they apply.

Under the SPDI Rules, "sensitive personal data or information" includes passwords, financial information, health information and biometric data. We do not collect it through this website. If a client shares it with us during a project, we handle it only under that project's written agreement and only for that project.

Who we share it with

We share personal data only with service providers who help us run the business or deliver a project. They process it on our instructions. The types of provider are:

• Hosting. The server that runs this website and the contact form, including its server logs.
• Email. The service that carries and stores our email, including inquiries from the contact form.
• Analytics. None at present. See what we collect.
• AI model and API providers. During a project, the AI systems we build send data to the model and API providers chosen for that project.

The providers used on a project, including the AI model and API providers, are named in that project's agreement. Many are accounts you open and pay for yourself, as the terms explain.

We may also disclose personal data where Indian law or a lawful order requires it, or where we need to protect our legal rights.

Client confidentiality

During a project we may see your data, your systems and data about your customers. We treat all of it as confidential.

• We use client data only to deliver the engagement it was shared for. We do not use it for anything else, and we do not use it for another client.
• We access only the systems and data the task needs, using the access you grant. You can revoke that access at any time.
• You own the code, prompts, tools and eval cases we build for you. Ownership passes to you on full payment, as set out in the terms.
• At the end of the engagement we return or delete your data, as your project agreement says, unless the law requires us to keep a record.

AI systems keep records of what they did, such as run traces and logs. These records can contain personal data from your systems. They are kept in accounts you control, or handled as your project agreement sets out.

International transfers

We are based in India, so personal data we receive is handled in India. Some of our service providers, and the AI model and API providers on a project, may store or process data in other countries.

If you are in the EU or the UK, sending your data to us in India is an international transfer. We rely on it being necessary to answer your inquiry or deliver the contract you asked for. Where a project involves ongoing transfers, we agree suitable safeguards with you, such as standard contractual clauses, in the project agreement.

We will not transfer personal data to a country the Government of India has restricted under the DPDP Act.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires.

• Inquiries that do not become a project: kept while we discuss the work with you, then deleted when it is clear the conversation has ended, unless you ask us to keep it.
• Client correspondence, contracts and invoices: kept for as long as Indian tax and accounting law requires.
• Client project material: kept during the engagement, then returned or deleted as your project agreement says.
• Scanner reports and IP hashes: deleted within an hour.
• Server logs: kept for a limited period for security and troubleshooting, then rotated out and deleted.

You can ask us to delete your data sooner. See your rights.

How we protect it

We take reasonable steps to protect personal data from loss, misuse and unauthorized access. They include:

• serving the whole website over encrypted HTTPS connections;
• limiting access to inquiries and client material to what the work needs;
• asking for the narrowest access a task needs on a client's systems, using credentials the client can revoke;
• keeping write actions behind human approval by default in the AI systems we build; and
• deleting data we no longer need.

No system is fully secure. If a personal data breach affects you, we will tell you and the authorities required by law, without undue delay.

Your rights

Under India's DPDP Act 2023

As a Data Principal you have the right to:

• get a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with;
• have your personal data corrected, completed, updated or erased;
• withdraw consent you have given;
• have a grievance about our handling of your data answered; and
• nominate another person to exercise your rights if you die or become unable to.

If you are not satisfied with our answer to a grievance, you can complain to the Data Protection Board of India.

Under the EU and UK GDPR

If you are in the EU or the UK, you have the right to:

• access your personal data and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use your data;
• receive your data in a portable format;
• object to our use of your data where we rely on legitimate interests;
• withdraw consent at any time; and
• complain to the data protection authority in the country where you live or work. In the UK this is the Information Commissioner's Office.

How to exercise your rights

Email support@aispeedforce.com and say which right you want to use. We may ask you to confirm your identity before we act, so we do not hand your data to someone else.

We respond within 30 days. Using your rights is free. If a request is clearly unfounded or excessive, we will tell you why we cannot act on it.

If your request is about data in a client's systems, where we act as a processor, we will pass it to that client and help them answer it.

Children's data

Our services are for businesses. This website is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

Cookies

This website sets no cookies. If you use the theme button, your browser saves your light or dark choice on your device. It is never sent to us. The cookie policy explains this in detail.

Changes to this policy

When we change this policy, we publish the new version on this page and update the "Last updated" date and the version history. If a change materially affects how we use personal data we already hold, we will also tell current clients by email before it takes effect.

Grievance Officer

Under India's DPDP Act 2023 and the Information Technology Act 2000 and its rules, you can raise a grievance about how we handle your personal data. Our Grievance Officer is:

• Name: Poonam Devi
• Email: support@aispeedforce.com
• Phone: +91 7669002473
• Address: New Delhi 110063, India

We acknowledge a grievance and give a full response within 30 days of receiving it.

Related policies

Read this policy with our terms of service, refund and cancellation policy, cookie policy and disclaimer.

Contact

AI SpeedForce is run by Poonam Devi as a sole proprietor. Questions about this document, or any of our policies, go to:

• Name: Poonam Devi, proprietor, trading as AI SpeedForce
• Email: support@aispeedforce.com
• Phone: +91 7669002473
• Address: New Delhi 110063, India

Effective date: 22 September 2026
Last updated: 22 September 2026

Version history