Privacy Policy
Last updated: August 2026
Who we are
GenesisCipher Labs Private Limited, a company incorporated in India, operates this website and decides why and how personal data submitted here is processed. For the DPDP Act, 2023 we are the Data Fiduciary; under the EU and UK GDPR we are the data controller.
What this covers
This policy covers genesiscipherlabs.io only. HomeSafe and Pact process data inside the apps and are covered by the privacy notices shown in each app and on its App Store listing.
What we collect
Contact form: your name, email address, subject, message, and phone number if you choose to give one. HomeSafe city request form: your email address and the city you ask for. Both forms carry a hidden anti-spam field that a person never fills in. Separately, our host Vercel records aggregate traffic and basic technical data such as IP address, approximate region, user agent, and pages requested, for security and reliability.
Why we use it, and on what basis
Form submissions are used only to reply to you or to register your interest in a city — that is the specified purpose for which you give consent under the DPDP Act, and our legitimate interest in responding to enquiries under the GDPR. Technical and aggregate data is used to keep the site available and secure, which is a legitimate interest and, in India, a legitimate use for security purposes. We do not use your data for advertising, profiling, or automated decision-making, and we do not sell or share it for cross-context behavioural advertising.
Who else processes it
Vercel (hosting and aggregate analytics), our email provider for delivering and storing form messages, and Google, only if you load the map on the contact page. They act on our instructions or under their own published terms, and none of them receive your data for their own marketing. We do not otherwise disclose personal data except where the law requires it.
Where it goes
Our providers operate globally, so data submitted here may be stored or processed outside your country, including in the United States. For transfers out of the EEA or the UK we rely on the European Commission's standard contractual clauses or an equivalent safeguard offered by the provider.
How long we keep it
Form messages are normally deleted within 18 months of the exchange ending; aggregate analytics within one year. We erase personal data sooner if you withdraw consent or ask us to, unless we are required to retain it.
Your rights
You may ask us to give you access to your personal data, to correct or complete it, to erase it, or to restrict or object to how we use it, and you may ask for a copy in a portable form. You may withdraw consent at any time, as easily as you gave it — that does not affect processing already carried out. If you are in India you may also nominate a person to exercise these rights on your behalf in the event of your death or incapacity. Write to us at the address below and we will respond within the period the applicable law allows.
Cookies and tracking
This site sets no advertising or cross-site tracking cookies and runs no third-party ad or social pixels, so no cookie consent banner is needed. The map on the contact page is loaded from Google only when you open that page, and Google may set its own cookies at that point.
Children
This site is meant for adults and we do not knowingly collect personal data from a child, which in India means anyone under 18. We do not track or profile children or direct advertising at them. If you believe a child has sent us personal data, contact us and we will delete it.
Security and changes
We use reasonable technical and organisational safeguards, including rate limiting and input sanitisation on our forms, but no online system is completely secure. If a breach affects your personal data we will notify you and the relevant authority where the law requires. We may update this policy; the date below shows the current version.
Contact and grievance redressal
Send privacy requests, questions, and grievances to the Grievance Officer, GenesisCipher Labs Private Limited, at hello@genesiscipherlabs.io. If you are not satisfied with our response, you may complain to the Data Protection Board of India, or — if you are in the EEA or the UK — to your local data protection supervisory authority.