Privacy Policy

Your Privacy

At Slaab AI, we are committed to protecting your personal data and maintaining transparency in how we collect, use, and safeguard your information.

Effective Date: July 12, 2025
01

Introduction & Purpose

Slaab AI ("we," "us," or "our") is a global provider of AI-automated business solutions designed to meet the operational needs of any industry and any scale of business. From startups to enterprises, our next-generation AI agents are built to optimize workflows, improve accuracy, and accelerate growth across all departments.

Our guiding philosophy is simple: "Whatever You Do, We Automate It." Our automation tools are smarter, faster, and scalable, tailored precisely to your business needs. Whether you're enhancing customer service, streamlining back-office operations, or automating decision-making, our AI systems are designed to plug into your existing infrastructure and deliver measurable results.

This Privacy Policy has been created both to comply with global data protection regulations (including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the UAE Personal Data Protection Law (PDPL)), and to demonstrate our commitment to transparency and accountability. We recognize that privacy is a fundamental right and understand the importance of safeguarding your personal data in a trustworthy and responsible manner.

We adhere to the following core principles in our data practices:

Transparency:Clear, open communication about how your data is collected, used, and shared
Data Minimization:Only the data necessary for a specific purpose is collected and retained
Purpose Limitation:Data is processed solely for the purposes disclosed to you
Integrity & Confidentiality:Strong security protocols are in place to protect your data
User Rights:You have the right to access, rectify, and request deletion of your data

This policy applies to all individuals who interact with Slaab AI through our website (https://slaab.ai), forms, communication channels, or services; including existing clients and potential future clients. Whether you're engaging with us for a project discussion, requesting a proposal, or exploring how our automation tools can enhance your operations, this policy outlines how we protect your privacy every step of the way.

02

Definitions

To ensure clarity and full understanding of this Privacy Policy, the following terms are defined in accordance with applicable data protection laws:

"Personal Data"

refers to any information relating to an identified or identifiable natural person. This may include names, contact details, identification numbers, online identifiers, and any other information specific to the identity of the individual.

"Processing"

means any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, alignment or combination, restriction, erasure, or destruction.

"Data Subject"

is any individual whose personal data is collected, held, or processed by Slaab AI. This typically includes clients, prospective clients, and website visitors.

"Data Controller"

means the natural or legal person, public authority, agency, or other body which determines the purposes and means of the processing of personal data. For the purposes of this Policy, Slaab AI is the Data Controller.

"Data Processor"

refers to a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

"Third Party"

means any person or organization other than the data subject, controller, processor, or persons who are authorized to process data under the direct authority of the controller or processor.

"Consent"

means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signify agreement to the processing of their personal data.

"Supervisory Authority"

refers to an independent public authority responsible for monitoring the application of data protection law, such as the Information Commissioner's Office (ICO) in the UK, the Data Protection Authority in the EU, or equivalent bodies in other jurisdictions.

"Sensitive Personal Data"

(also known as special category data) includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification, health data, or data concerning a natural person's sex life or sexual orientation.

"Anonymization"

is the process of removing personally identifiable information from data sets, so that individuals cannot be identified.

"Pseudonymization"

means the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information.

03

Scope & Applicability

This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by Slaab AI in the context of offering and delivering its services. The Policy covers data obtained from individuals through:

Visiting or using our website (https://slaab.ai)
Submitting inquiries, contact forms, or scheduling consultations
Engaging with our representatives during discovery, proposal, or contracting phases
Participating in any communication, email, or support interaction
Any other channel by which a client or prospective client discloses information to us voluntarily

This Policy applies regardless of the geographic location of the data subject or their device. Whether you are located in India, the European Union, the United Arab Emirates, the United States, or any other jurisdiction, we maintain the same high standards of data protection and regulatory alignment.

This Policy applies to:

Clients:Businesses or representatives of businesses who engage with us for consultation, project planning, or service implementation
Prospective Clients:Businesses or representatives exploring our services through the website, inquiry forms, or meetings
Website Visitors:Individuals browsing or interacting with our website
Legal or Regulatory Authorities:Reviewing our practices under applicable legal or certification standards (e.g., ISO)

This Privacy Policy does not apply to:

Third-party websites linked from our platform. We encourage users to review the privacy practices of any external site before providing any data.
Data received from third parties who act as independent controllers (e.g., referral partners)
Employees, contractors, or internal personnel, who are governed by internal data handling policies separate from this document
04

Data Controller Details

The entity responsible for the collection, processing, and protection of your personal data under this Privacy Policy is:

VIDYASETU ED TECH PRIVATE LIMITED

Trading as: Slaab AI

Headquarters Address:

14, 15, 16, FF, Akshardham Residency,
Opp. RAF Camp, Ring Road, Vastral,
Ahmedabad, Gujarat, 382418, India

Official Communication Email:

[email protected]

Slaab AI is the legal controller of all personal data processed in the course of delivering its services and operating its platform. We assume responsibility for ensuring that your data is handled securely, fairly, and in compliance with all applicable data protection regulations.

We do not currently appoint a dedicated Data Protection Officer (DPO); however, privacy and compliance matters are handled by an authorized officer within our leadership team. Any inquiries related to data privacy, access requests, deletions, rectifications, or supervisory authority engagement should be directed to the above email.

We encourage all data subjects to contact us first with any concerns regarding the handling of personal information before approaching a supervisory authority, as we are committed to resolving all matters efficiently and transparently.

05

Types of Data Collected

Slaab AI collects only the information necessary to respond to inquiries, engage in service discussions, and fulfill contractual obligations for custom AI automation services. The categories of personal data we collect include the following:

5.1 Data You Provide Directly

We collect data that you voluntarily submit to us via our website forms, email, phone, or during live consultations. This includes:

Contact Information:Name, email address, phone number, company name, job title
Project Details:Nature of the automation needed, industry, specific operational challenges, departmental context
Communication Records:Email threads, meeting notes, and chat transcripts during discovery and proposal stages

5.2 Data Collected Automatically

When you interact with our website or digital assets, we collect certain data automatically using analytics tools:

Device & Usage Data:IP address, browser type, device identifiers, operating system, referring URLs, time zone, and time spent on pages
Interaction Data:Pages visited, links clicked, scroll behavior, and form interactions

This data is primarily collected via Google Analytics to understand site performance and improve user experience. We do not use marketing or ad cookies.

5.3 Data Collected During Contracting

Once a client proceeds beyond consultation:

Business Identity Information:GST number, legal entity name, and registered address (if applicable)
Authorized Signatory Information:Full name, designation, contact info of the signing party for the client organization
Service-Related Input:Details, documents, and references required to execute the AI implementation project as per Scope of Work

5.4 Sensitive Personal Data

Slaab AI does not intentionally collect or process sensitive personal data (such as health data, religious beliefs, or biometric data) as part of its services. If such data is shared inadvertently, it will be handled securely and deleted unless expressly required for the performance of the contract with clear written consent.

5.5 Third-Party Data

We do not buy or rent data from third parties. If a client submits data belonging to a third party (e.g., employee workflow samples or customer flows), it is the client's responsibility to ensure they have obtained valid consent from those individuals and to provide it upon request.

06

Methods of Data Collection

Slaab AI collects personal data through the following lawful and transparent methods:

6.1 Direct User Submission

We collect data when users:

Submit contact or inquiry forms on our website
Communicate with us via email or phone
Participate in scheduled consultations
Share documents or information voluntarily during discovery or onboarding phases

All such submissions are initiated by the user and are used strictly for the purposes disclosed at the time of collection.

6.2 Automated Technologies

When users browse or interact with our website, we use Google Analytics and related tools to collect data automatically. This includes:

Tracking of user interaction and device/browser metadata
Usage logs and behavior analytics to optimize our services
Session data for performance and error analysis

We do not use any form of automated profiling, third-party cookies, or behavioral targeting.

6.3 Engagement During Contract Execution

Once an agreement is in place, further data may be collected through:

Collaborative document exchanges (e.g., SOW, deliverables, project documentation)
Secure file-sharing platforms used to facilitate the onboarding and automation setup
Team-level communication during project delivery (e.g., via email, scheduled calls, feedback submissions)

All such data is stored securely, restricted to authorized personnel, and processed exclusively for project execution.

6.4 Offline Interactions

Occasionally, data may be collected through:

In-person meetings or client workshops
Printed or scanned documents shared during project alignment
Business cards or physical forms shared during exhibitions or formal briefings

Such information is digitized and treated with the same safeguards as digital submissions.

07

Legal Basis for Processing

Slaab AI processes personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the UAE Personal Data Protection Law (PDPL). Our data processing activities are grounded in one or more of the following lawful bases:

7.1 Consent

Where required by law, we obtain your clear and unambiguous consent before collecting or processing your personal data. This applies particularly to optional communications such as promotional emails or newsletters. You may withdraw your consent at any time by contacting [email protected], and withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

7.2 Performance of a Contract

We process your personal data when it is necessary for the negotiation, execution, or performance of a contract with you or your organization. This includes collecting and using your information to provide consultation, develop project proposals, manage agreements, and deliver automation services as described in the Scope of Work.

7.3 Legitimate Interests

We may process your data when it is reasonably necessary for our legitimate business interests, provided those interests are not overridden by your privacy rights. Examples include:

Improving website performance and user experience
Securing our systems against fraud or abuse
Managing client relationships and communication workflows
Internal auditing and compliance with ISO certification processes

In all cases, we perform legitimate interest assessments (LIAs) to ensure that our interests do not unfairly impact your rights.

7.4 Legal Obligation

We may be required to process or retain certain personal data to comply with applicable legal obligations. For example, we may retain invoicing data for tax compliance, respond to lawful data access requests, or maintain documentation for ISO or government audits.

7.5 Vital Interests

Although rare, we may process personal data where it is necessary to protect your vital interests or those of another natural person, particularly in the context of legal disputes or incidents impacting system integrity.

08

Purpose of Data Processing

Slaab AI processes personal data strictly for specified, explicit, and legitimate purposes aligned with the expectations of our clients and site visitors. We do not use your personal information in ways that are incompatible with these purposes.

8.1 Communication & Consultation

We process your contact details and inquiry information to:

Respond to requests and inquiries made via our website or email
Schedule and conduct consultation calls
Understand your automation requirements

8.2 Proposal & Contract Fulfillment

We process relevant business and project information to:

Draft and share proposals tailored to your business use case
Prepare and execute contractual documentation such as Scope of Work and NDAs
Facilitate onboarding and project planning

8.3 Service Delivery & Performance

Once contracted, we process operational and contextual data to:

Design, implement, and optimize AI solutions according to agreed specifications
Track project progress and internal task execution
Collect client feedback and support post-delivery reviews

8.4 Analytics & Website Optimization

We collect interaction and usage data to:

Monitor website traffic, engagement patterns, and error logs
Analyze user experience and improve website layout or communication clarity
Assess performance of outreach or lead generation channels

8.5 Regulatory Compliance & Documentation

We retain and process data as necessary to:

Maintain audit trails and contractual records for ISO certifications
Comply with applicable tax, accounting, and data retention laws
Cooperate with lawful requests from supervisory or regulatory authorities

8.6 Promotional and Informational Communication

Where consent has been provided, we may use your contact details to:

Send you updates, newsletters, or announcements about our services
Share educational material or AI automation insights
Invite you to participate in user surveys or business events

You can opt-out of receiving such communications at any time using the unsubscribe link in our emails or by contacting [email protected].

09

Automated Decision-Making and Profiling

At Slaab AI, we do not engage in any form of automated decision-making or profiling that produces legal effects or similarly significant consequences for individuals as defined under GDPR Article 22, CCPA, or UAE PDPL.

9.1 No Automated Decisions with Legal or Material Impact

We do not use algorithms or automated processes to make decisions that:

Affect your legal rights
Have significant impacts on your employment, financial position, or service eligibility
Result in denial of access to our services based solely on automated processing

All strategic decisions regarding client engagement, proposal development, service scoping, and solution design are made by qualified human professionals after thorough review and consultation.

9.2 Limited Use of Automation for Internal Efficiency

Where automation is used (e.g., analytics dashboards, lead sorting, or task reminders), it is strictly to assist internal operations and does not result in any decisions that impact data subjects without human oversight.

9.3 Transparency and Control

If in the future we introduce any automated tools that might meet the threshold of profiling or automated decision-making under law, we will:

Clearly inform you of its existence and purpose
Offer meaningful information about the logic involved
Provide you with the right to request human intervention and contest the decision
10

Data Sharing & Disclosure

Slaab AI is committed to protecting your personal data and does not engage in the sale or unauthorized disclosure of your information. However, under specific circumstances, we may share your data with carefully vetted third parties and authorities, strictly for the purposes outlined below and only where lawful.

10.1 Internal Access

Your personal data is accessible only to Slaab AI staff, contractors, and authorized personnel who require access to perform their duties. All internal access is role-based, subject to confidentiality agreements, and governed by strict access control policies.

10.2 External Service Providers (Processors)

We may engage third-party vendors to support our operations, such as:

Cloud storage providers
Analytics providers (e.g., Google Analytics)
Compliance or certification bodies (e.g., ISO audit partners)

These vendors are contractually bound to:

Process personal data only as instructed by us
Implement adequate security measures
Comply with applicable data protection laws

We ensure that all processors undergo rigorous due diligence and enter into Data Processing Agreements (DPAs) with us.

10.3 Legal and Regulatory Disclosures

We may disclose personal data where required to:

Comply with applicable laws, court orders, or legal processes
Respond to legitimate requests from regulatory authorities or law enforcement bodies
Fulfill obligations related to tax filings, financial audits, or certification audits

10.4 Business Transfers

In the event of a merger, acquisition, sale, or corporate restructuring, your data may be transferred to the new entity, subject to this same Privacy Policy or an equivalent level of protection. You will be notified of any such change in control that affects your data rights.

10.5 With Your Explicit Consent

In rare cases, we may share your data with external collaborators, advisors, or partners — but only after obtaining your clear, written consent and informing you of the purpose and scope of the data sharing.

10.6 International Data Transfers

Where data is transferred across borders (e.g., for cloud services or remote team operations), we ensure:

The destination country has adequate data protection laws, or
Standard Contractual Clauses (SCCs) or equivalent safeguards are in place
Transfers comply with GDPR Chapter V, CCPA restrictions, and UAE PDPL cross-border rules

We do not transfer data to jurisdictions that lack appropriate safeguards unless absolutely required by contract and accompanied by risk assessments and protective measures.

11

International Data Transfers & Safeguards

Slaab AI operates globally, and in certain cases, your personal data may be transferred to and processed in countries other than the one in which you reside. These transfers are conducted in strict compliance with applicable data protection regulations and with robust contractual and technical safeguards in place to ensure the security and confidentiality of your personal data.

11.1 Legal Frameworks for International Transfers

We ensure that all international data transfers are legally permissible under:

GDPR (General Data Protection Regulation, EU/EEA)
CCPA (California Consumer Privacy Act, U.S.)
PDPL (UAE Personal Data Protection Law)

We transfer data only when:

The destination country is officially recognized as providing an adequate level of protection; or
Appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place; or
You have explicitly consented to the transfer after being informed of potential risks.

11.2 Types of Transfers

Data may be transferred internationally in the following contexts:

Cloud Hosting & Infrastructure: When using global cloud service providers (e.g., AWS, Google Cloud)
Remote Team Collaboration: Internal access by authorized personnel working from different countries
Backup & Disaster Recovery: Secure, geo-redundant storage for business continuity

11.3 Safeguards Implemented

To protect your data during international transfers, we implement:

Encryption at rest and in transit
Access controls and multi-factor authentication for remote systems
Signed Data Processing Agreements (DPAs) with all processors
Transfer Impact Assessments (TIAs) where required

We regularly review and update these mechanisms to maintain full alignment with evolving legal standards and best practices.

11.4 Transfers to Countries Without Adequate Protection

If personal data must be transferred to a country not recognized as offering adequate protection, we will:

Obtain your explicit, informed consent prior to transfer; or
Rely on a valid derogation under applicable law (e.g., performance of a contract at your request)

In such cases, we will look through all the associated risks and apply all available safeguards to mitigate them.

12

Data Retention Policy

Slaab AI retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, contractual, operational, or certification requirements. We follow a structured data retention schedule to ensure compliance with global data protection laws and to minimize unnecessary data storage.

12.1 General Retention Principles

Purpose Limitation: Data is retained only for the specific purpose it was collected for and not reused for unrelated objectives.
Data Minimization: We regularly review and delete data that is no longer necessary.
Compliance with Legal Requirements: Retention durations are aligned with applicable statutory and regulatory requirements.

12.2 Retention Periods by Data Category

Contact form submissions18 months from last interaction
Consultation call records & notes24 months or until project initiation
Proposal & quotation documents7 years from issue date
Signed contracts, NDAs, SOWsMinimum 7 years from date of termination/expiry
Project deliverables & references7 years or as per contract requirements
Financial, billing, tax documents8 years (India), or as per applicable law
Analytics and website usage logs26 months (Google Analytics standard retention)
Backup archives12 months in encrypted storage

12.3 Criteria for Determining Retention Duration

In deciding how long to retain personal data, we consider:

Legal and regulatory obligations
Contractual commitments
Business and operational requirements
Data type, sensitivity, and relevance
Industry best practices and certification standards (e.g., ISO 27001)

12.4 Data Disposal & Deletion

When retention periods expire, or data is no longer necessary, we ensure:

Secure deletion from active systems
Removal from backups within a defined purge cycle
Confirmation that third-party processors have also deleted the data

12.5 Data Retention Reviews

We conduct periodic audits of stored data to:

Identify outdated or redundant information
Validate justification for extended retention
Ensure compliance with current laws and risk mitigation standards
13

Data Security Measures

Slaab AI implements a robust, multi-layered data security framework to safeguard personal data against unauthorized access, alteration, disclosure, or destruction. Our practices adhere to leading international standards, including ISO/IEC 27001 and industry best practices.

13.1 Technical Safeguards

Encryption: All data is encrypted at rest and in transit using strong encryption protocols (e.g., AES-256, TLS 1.2+).
Access Control: Role-based access, enforced with strong authentication mechanisms including two-factor authentication (2FA) for administrative access.
Network Security: Firewalls, intrusion detection systems, and network segmentation protect data from external threats.
Secure Configuration: Systems are hardened and regularly patched against known vulnerabilities.

13.2 Organizational Measures

Confidentiality Agreements: All employees and contractors handling personal data are bound by signed confidentiality and data protection agreements.
Training & Awareness: Personnel receive regular training on data protection, cybersecurity hygiene, and secure handling practices.
Data Minimization & Anonymization: Only the minimum amount of data necessary is retained and pseudonymization/anonymization is applied where applicable.

13.3 Physical Security

Secure Facilities: Our primary systems are hosted in ISO-certified data centers with 24/7 surveillance, biometric access control, and environmental safeguards.
Device Security: Company-issued devices are protected with endpoint security solutions, encryption, and remote wipe capabilities.

13.4 Monitoring & Incident Response

Continuous Monitoring: We use automated tools to monitor system activity, detect anomalies, and prevent breaches.
Breach Notification Protocol: In the event of a data breach, we will notify affected data subjects and regulators within the legally mandated timeframes and take immediate corrective actions.
Vulnerability Testing: We perform periodic penetration testing, risk assessments, and security audits.

13.5 Third-Party Risk Management

Vendor Assessment: Third-party service providers undergo security and privacy due diligence.
Data Processing Agreements: All vendors processing data on our behalf must sign legally binding agreements ensuring data protection and confidentiality.

13.6 Business Continuity & Disaster Recovery

Backup Strategy: Encrypted backups are performed regularly and stored in geographically redundant locations.
Disaster Recovery Plan: We maintain and periodically test a disaster recovery plan to ensure service continuity in case of incidents.
14

Your Rights Under Applicable Laws

As a data subject, you have specific rights under applicable privacy regulations such as the GDPR (EU), CCPA (California), and UAE PDPL. Slaab AI respects and upholds these rights, and we are committed to making it easy for you to exercise them.

14.1 Right to Access

You have the right to request confirmation as to whether your personal data is being processed, and where that is the case, access to the personal data, including the purposes of processing, categories of data, and any third parties with whom it has been shared.

14.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data about you.

14.3 Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data where:

The data is no longer necessary for the purpose for which it was collected;
You withdraw consent and no other legal basis exists;
You object to the processing and there are no overriding legitimate grounds;
The data has been unlawfully processed;
Erasure is required by law.

14.4 Right to Restriction of Processing

You can request a restriction on the processing of your data in specific circumstances, such as when contesting the accuracy of your data or when you object to processing but we need time to verify overriding legitimate grounds.

14.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

14.6 Right to Object

You have the right to object to the processing of your personal data based on our legitimate interests or for direct marketing purposes.

14.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

14.8 Right Not to be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you, unless such decisions are:

Necessary for entering into or performing a contract;
Authorized by law; or
Based on your explicit consent.

14.9 Non-Discrimination (CCPA-Specific)

We will not discriminate against you for exercising any of your CCPA rights, including by denying services, charging different prices, or providing a different level or quality of service.

To exercise any of the above rights, please contact us at: [email protected]. We may require you to verify your identity before acting on your request.

15

Exercising Your Rights (Procedures)

Slaab AI has established clear, transparent procedures for individuals to exercise their data protection rights in accordance with applicable laws.

15.1 Submitting a Request

To exercise your rights under this Policy, you may submit a request via:

Subject Line: "Data Subject Request - [Your Full Name]"
Required Information: Please include your full name, contact email, nature of the request (e.g., access, erasure, rectification), and any reference to previous interactions with Slaab AI to help us verify your identity.

15.2 Verification Process

To protect your personal data, we must verify your identity before processing any request. Verification steps may include:

Confirming identifying details (e.g., email address or company name used in prior communications)
Requesting additional documentation if necessary (e.g., proof of authorization for a representative)

15.3 Response Timelines

We aim to acknowledge your request within 5 business days and respond in full within 30 calendar days. Where legally permitted, we may extend the response period by an additional 30 days depending on the complexity and number of requests. In such cases, you will be notified of the extension and the reason.

15.4 Fees

Requests are generally processed free of charge. However, we may charge a reasonable administrative fee if:

The request is manifestly unfounded or excessive
Repeated requests are submitted without valid justification

You will be informed of any fees in advance and given the opportunity to modify or withdraw your request.

15.5 Denial of Requests

We may deny a request if:

We cannot verify your identity
The request conflicts with legal, contractual, or regulatory obligations
The request is abusive or harassing in nature

If your request is denied, we will provide a clear explanation and inform you of your right to lodge a complaint with a supervisory authority.

15.6 Appeals and Supervisory Authority Contact

If you are dissatisfied with our response or decision, you may appeal in writing by replying to our email response and requesting a review.

You also have the right to contact the relevant supervisory authority in your jurisdiction:

EU: Your national Data Protection Authority (DPA)
India: Data Protection Board (DPB) under India DPDP Act
UAE: UAE Data Office
California: California Privacy Protection Agency (CPPA)
16

Cookies, Tracking Technologies, and Preferences Management

Slaab AI values your privacy and transparency when it comes to digital tracking technologies. This section explains how and why we use cookies and similar technologies, and how you can control them.

16.1 What Are Cookies?

Cookies are small text files placed on your device by a website or service provider. They help recognize your browser and capture and remember certain information to improve site experience, monitor activity, or analyze trends.

16.2 Types of Cookies Used

Slaab AI uses only essential and analytics cookies. We do not use tracking, profiling, or advertising cookies.

Essential CookiesEnable basic site functionality and security
Analytics CookiesMeasure and understand website traffic, pages visited, and time spent

We primarily use Google Analytics to collect aggregated, non-personal data about site usage to improve our content and navigation structure.

16.3 Cookies Set by Third Parties

We do not permit third-party advertising cookies or trackers on our website. Google Analytics may set third-party cookies to measure performance but no personally identifiable information is shared with advertisers.

16.4 Managing Your Preferences

While we do not use non-essential cookies that require opt-in, users can still manage cookie behavior through:

Browser Settings: You can modify your browser to block cookies, alert you when cookies are sent, or delete stored cookies.
Opt-Out Tools: To disable Google Analytics tracking, you can install the Google Analytics Opt-Out Browser Add-on.

16.5 Do Not Track (DNT) Signals

Our website currently does not respond to "Do Not Track" signals from browsers due to the lack of a consistent industry standard. However, no personal data is used for behavioral targeting.

16.6 Cookie Duration and Expiry

Most cookies used by Slaab AI expire within 30 days unless required longer for analytics. Session cookies expire once you close your browser.

17

Children's Privacy

Slaab AI does not knowingly collect or solicit personal data from children under the age of 18. Our website, services, and offerings are intended exclusively for use by individuals who are 18 years of age or older.

17.1 Age Verification and Exclusion

We do not offer services to or knowingly engage in commercial activities with individuals below the age of 18. If we learn that we have inadvertently collected personal data from a child under 18 without verifiable parental consent, we will:

Promptly delete the data from our records;
Disable any access or interaction capability if applicable; and
Take steps to prevent future occurrences.

17.2 Parental Controls and Consent

If you are a parent or guardian and believe that your child under the age of 18 may have provided us with personal data, please contact us immediately at [email protected] so that we can take appropriate corrective actions.

17.3 Minors in Specific Jurisdictions

Certain jurisdictions may define the age of consent differently (e.g., under 13 in the U.S. for COPPA compliance or under 16 in some EU states). We align with the highest applicable threshold and act proactively to avoid the unintentional collection of children's data.

18

Links to Third-Party Sites

Our website and communications may contain links to external websites, applications, or services that are not operated or controlled by Slaab AI. This Privacy Policy does not apply to any third-party services, and we are not responsible for the content, security, or privacy practices of those third-party entities.

18.1 Responsibility Disclaimer

When you follow a link to a third-party site:

You are subject to that site's privacy policy and terms.
We encourage you to read the privacy policies of any external websites you visit.
We disclaim any responsibility for data handling practices or content accuracy on third-party platforms.

18.2 Embedded Content or Integrations

Occasionally, we may embed third-party tools (e.g., video players, maps, forms) or integrations to enhance user experience. These services may set cookies or collect usage data independently. In such cases:

The third-party provider is responsible for their data collection practices.
We take reasonable steps to only integrate providers with strong reputations for privacy compliance.

18.3 Third-Party Login or Redirects

We do not currently support third-party login functionality (e.g., "Login with Google") or automated redirects to client systems. If added in the future, we will update this policy accordingly and ensure compliance with relevant privacy frameworks.

19

Changes to This Privacy Policy

Slaab AI reserves the right to update, revise, or modify this Privacy Policy at any time to reflect changes in our business practices, legal or regulatory obligations, technological advancements, or service offerings. We are committed to ensuring that you are informed of how your personal data is handled.

19.1 Notification of Changes

When changes are made, we will:

Post the updated Privacy Policy on our website with a new "Effective Date."
Optionally notify users who have opted in via email of significant updates.

We recommend checking this page periodically to stay informed of how we protect your information.

19.2 Material Changes

If we make material changes that affect your rights or the way we use personal data:

We will provide prominent notice on our homepage or via direct communication, where appropriate.
Where legally required, we will obtain your explicit consent before applying the changes.

19.3 Version Control

We maintain a version history and log the date of each update to ensure transparency. Older versions of the Privacy Policy will be archived and made available upon request for audit and compliance purposes only.

20

Governing Law and Dispute Resolution

This Privacy Policy and any dispute arising out of or relating to it shall be governed by and interpreted in accordance with the laws of the Republic of India, without regard to its conflict of law principles.

20.1 Jurisdiction

All disputes, claims, or controversies arising out of or in connection with this Privacy Policy, including its interpretation, breach, or termination, shall be subject to the exclusive jurisdiction of the courts located in Ahmedabad, Gujarat, India.

20.2 Dispute Resolution Process

Before initiating legal proceedings, Slaab AI encourages affected parties to attempt an informal resolution by contacting our data protection contact at [email protected]. We will use reasonable efforts to respond to concerns and resolve complaints amicably.

If no resolution is achieved within 30 days of notification, either party may escalate the matter to formal legal proceedings in accordance with the jurisdiction stated above.

20.3 Language

All proceedings, notices, and documentation shall be conducted in English. Any translations provided are for reference only and are not legally binding.

21

Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy, our data handling practices, or your personal data, you may contact us using the details below:

Slaab AI

Operated by VIDYASETU ED TECH PRIVATE LIMITED

Operating Headquarters:

14, 15, 16, FF, Akshardham Residency,
Opp. RAF Camp, Ring Road, Vastral,
Ahmedabad, Gujarat, 382418, India

Response Time:

Within 7 business days

We strive to respond to all inquiries within seven (7) business days. Please clearly indicate the nature of your request (e.g., data access, correction, complaint) in the subject line of your message.

For data protection and privacy rights matters, including GDPR, CCPA, or UAE PDPL-related issues, please include your country of residence so we can tailor our response accordingly.