Mysore Quantum AI (“MQA”, “we”, “us”, or “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and safeguard your data when you visit our website at mysorequantumai.org or participate in our events and community activities. This policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and, where applicable, the Digital Personal Data Protection Act, 2023 (“DPDP Act”).
1. Information We Collect
We may collect the following categories of personal information:
Identity & Contact Data
Name, email address, phone number, and organisation/institution, collected when you register for events or contact us.
Usage Data
IP address, browser type, pages visited, time spent, and referring URLs — collected automatically via server logs and analytics tools (Google Tag Manager / Google Analytics).
Event Participation Data
Registration details, attendance records, and feedback submitted during or after events.
Communications
Content of emails or messages you send us, including queries, feedback, or collaboration proposals.
Payment Data
For paid events: transaction reference numbers processed through third-party payment gateways. MQA does not store card or bank details.
2. How We Use Your Information
We use your personal data for the following purposes:
- To process event registrations and send confirmations, reminders, and updates.
- To communicate with you about MQA activities, newsletters, and community opportunities.
- To improve our website, events, and services based on usage analytics.
- To process refunds and respond to queries or complaints.
- To comply with legal obligations under Indian law.
- To promote MQA activities including use of event photographs and recordings where consent has been given.
We will not use your personal information for any purpose incompatible with the above without obtaining your prior consent.
3. Legal Basis for Processing
Under the DPDP Act, 2023, we process your personal data on the following lawful bases:
- Consent: Where you have given explicit consent (e.g., newsletter subscription, event photography).
- Contract: Where processing is necessary to fulfill an event registration or service request.
- Legitimate Interest: For analytics, improving services, and community communications, balanced against your privacy rights.
- Legal Obligation: Where we are required to retain or disclose data under applicable Indian law.
4. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience. Specifically, we use:
- Google Tag Manager & Google Analytics: To collect anonymised usage statistics. Data is processed in accordance with Google's privacy policy.
- Essential cookies: Required for basic site functionality such as theme preferences.
You may disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality. We do not use cookies for advertising or profiling purposes.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:
- Service Providers: Third-party tools used to deliver our services (e.g., email platforms, payment gateways, analytics providers), who are contractually bound to protect your data.
- Event Partners: Co-organisers or sponsors of specific events, with your explicit consent and only the minimum data necessary.
- Legal Requirements: Where required by Indian law, court order, or government authority.
- Organisational Transfers: In the event of a merger, partnership, or restructuring of MQA activities, with continuity of data protection obligations.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law:
- Event registration data: up to 3 years after the event.
- Payment and transaction records: as required under applicable Indian tax and financial laws (typically 6–7 years).
- Newsletter and communication data: until you unsubscribe or request deletion.
- Analytics data: in aggregated, anonymised form indefinitely.
7. Data Security
We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures are consistent with the IT (Reasonable Security Practices) Rules, 2011 and include SSL/TLS encryption for data in transit and access controls for internal systems.
However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Your Rights
Under the Digital Personal Data Protection Act, 2023 and other applicable Indian laws, you have the following rights with respect to your personal data:
- Right to Access: Request a summary of personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data, subject to legal retention requirements.
- Right to Withdraw Consent: Withdraw previously given consent at any time, without affecting the lawfulness of prior processing.
- Right to Grievance Redressal: Lodge a complaint with our designated contact if you believe your data rights have been violated.
- Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity (as provided under the DPDP Act).
To exercise any of these rights, please contact us using the details in Section 12. We will respond to verified requests within 30 days.
9. Children's Privacy
Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information without parental consent, please contact us immediately and we will take steps to delete such information.
10. Cross-Border Data Transfers
MQA primarily operates within India. However, some third-party service providers (such as analytics or email tools) may process data outside India. Where such transfers occur, we ensure appropriate safeguards are in place consistent with applicable Indian law and the DPDP Act's provisions on cross-border data transfers.
11. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The “last updated” date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy from time to time. Continued use of our Services after changes constitutes acceptance of the revised policy.
12. Grievance Officer & Contact
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, if you have any concerns or grievances regarding this Privacy Policy or the handling of your personal data, please contact our designated point of contact:
If you are not satisfied with our response, you may also approach the Data Protection Board of India (once operational) or the relevant Consumer Disputes Redressal Commission.