Privacy notice

elan1.ai is run by ELAN1 AGENTIC TECHNOLOGIES PRIVATE LIMITED (CIN U62099TZ2026PTC040028), with its registered office at 112/2 F4, Fourth Floor, Iyyngaran Apt, 3rd Cross Street, Fairlands, Salem 636016, Tamil Nadu, India and its office at 114, B Block, Second Floor, Sir Theagaraya Road, T Nagar, Chennai 600017, Tamil Nadu, India. For the personal data described here, we are the data fiduciary under India’s Digital Personal Data Protection Act 2023 (DPDP Act) and the controller under the EU and UK General Data Protection Regulation (GDPR).

This notice covers visitors to elan1.ai and its pages, people who contact us, apply for a role or subscribe to updates, and representatives of the organisations we work with.

It does not cover personal data that our customers process using the elan1 platforms. For that data the customer is the data fiduciary or controller, and we act as their data processor under a written agreement. If your data is in a customer’s system, contact that organisation first; we will help them answer you.

Sites run by other brands, including commerce1.ai, strategy1.ai and brand1.ai, have their own notices.

• What you send us: your name, work email, organisation, role and message when you use a contact route, raise a grievance, apply for a role or ask for sandbox access.
• Technical data: IP address, browser type, pages requested and the time of the request, kept in server logs to run and secure the site.
• Preferences: your cookie choice and colour theme, stored in your own browser. See the cookie notice.
• Analytics, only with your consent: aggregate measures of visits. Off unless you turn it on.

We do not knowingly collect sensitive or special-category data through this site. Please do not send it in a contact form.

• To answer you, on the basis of your consent (DPDP Act s.6) or the steps you ask us to take before a contract (GDPR art. 6(1)(b)).
• To run and secure the site, including keeping logs and preventing abuse, as a legitimate use (DPDP Act s.7) and in our legitimate interests (GDPR art. 6(1)(f)).
• To meet legal duties, such as keeping logs under the CERT-In directions 2022 or answering a lawful request (DPDP Act s.7; GDPR art. 6(1)(c)).
• To measure visits, only with your consent, which you can withdraw as easily as you gave it.

We do not make decisions about you on this site by automated means alone, and we do not build advertising profiles.

• Contact and sandbox enquiries: 24 months from our last exchange, unless a contract follows.
• Grievances: 3 years from resolution, so we can show how each was handled.
• Job applications: 12 months, or longer if you join the talent pool and agree.
• Server logs: 180 days, as the CERT-In directions require, then deleted.
• Consent records: as long as the choice applies, plus the period needed to show it was given.

We process personal data in India, in AWS Mumbai. We do not use a US region.

If a service provider must process data outside India, we do so only where the DPDP Act allows it, and, for data about people in the EU or UK, with an adequacy decision or standard contractual clauses in place.

We share personal data only with service providers who run parts of our service for us, under contracts that limit them to our instructions:

• Hosting and infrastructure (Amazon Web Services, Mumbai region)
• Email and communications providers
• Recruitment tools, for applications

We disclose data to authorities only when the law requires it. We never sell personal data, and never share it for advertising.

Under the DPDP Act 2023

• Access a summary of your personal data and how it is processed
• Correct, complete, update or erase it
• Withdraw consent at any time
• Raise a grievance with our grievance officer, and then with the Data Protection Board of India
• Nominate someone to exercise these rights if you die or cannot act

Under the GDPR (EU and UK)

• Access, rectification and erasure
• Restriction of processing and objection to it
• Data portability
• Withdrawal of consent, without affecting earlier processing
• Complaint to your data protection supervisory authority

To use any of these rights, write to hariharan@elan1.ai. We reply within 2 working days and resolve requests within one week where we can, and always within the time the law allows.

This site is for business audiences and is not directed at anyone under 18. We do not knowingly collect children’s data. If we learn we have, we delete it.

We encrypt data in transit, limit access to people who need it, and log access. If a breach affects your personal data, we tell you and the Data Protection Board of India as the DPDP Act requires. More on security and data residency.

When we change this notice, we update the review date and version above and record the change in the version history below. Significant changes are flagged on this page for 30 days.