Effective Date: February 25, 2026
Registered Address: NAC Market, Sector 9, Panchkula, Haryana, India
Compliance: General Data Protection Regulation (GDPR) & Information Technology Act, 2000 (India)
Contact: sales@laceai.in
Contents
- 1 1. Overview
- 2 2. Data We Collect
- 3 3. How We Use Your Data
- 4 4. WhatsApp & Messaging Data
- 5 5. AI & Machine Learning Services
- 6 6. Analytics & Cookies
- 7 7. Data Sharing & Disclosure
- 8 8. Data Retention
- 9 9. Your Rights
- 10 10. Children’s Privacy
- 11 11. Data Security
- 12 12. International Data Transfers
- 13 13. Changes to This Policy
- 14 14. Grievance Officer
- 15 15. Contact Us
1. Overview
LACE AI (“we”, “our”, or “us”) operates the website laceai.in and provides AI-powered business solutions including marketing automation, video generation, WhatsApp assistants, lead management, and social media automation services.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us through any communication channel. This policy is compliant with the General Data Protection Regulation (GDPR), the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act (DPDPA), 2023 of India.
By accessing or using our services, you consent to the practices described in this policy. If you do not agree, please discontinue use of our website and services.
2. Data We Collect
We collect the following categories of personal information in the course of providing our services:
| Category | Data Points | Purpose |
| Contact Information | Full name, email address, phone number | Communication, service delivery, support |
| Messaging Data | WhatsApp messages, conversation logs, media shared | AI chat services, personalization, campaigns |
| Usage Data | IP address, browser type, pages visited, time on site | Analytics, UX improvement, monitoring |
| Device Information | Device type, OS, screen resolution | Compatibility and optimized experience |
We do not collect sensitive personal data such as financial information, biometric data, or government identification numbers through our website unless explicitly required and separately consented to.
3. How We Use Your Data
Your personal data is processed for the following purposes:
- Service Delivery: To provide, operate, and maintain our AI-powered solutions including marketing automation, WhatsApp assistants, content generation, and campaign management.
- Communication: To respond to your inquiries, send service updates, and deliver relevant information about our offerings.
- Improvement & Analytics: To analyze usage patterns, diagnose technical issues, and enhance the performance and quality of our services.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
- Marketing (with consent): To send promotional communications where you have opted in. You may withdraw consent at any time.
We process your data based on one or more of the following legal bases under GDPR: your consent, contractual necessity, legitimate interest, or legal obligation.
4. WhatsApp & Messaging Data
As part of our AI-powered business solutions, we operate WhatsApp-based services through the WhatsApp Business API. When you interact with our WhatsApp services:
- Message Content: Messages you send and receive are processed to deliver AI-powered responses, automated campaigns, and personalized communication.
- Phone Number: Your WhatsApp phone number is collected to identify and communicate with you.
- Media & Attachments: Images, documents, or other media shared through WhatsApp may be processed to fulfill service requests.
- Conversation Logs: Interaction history may be stored to improve response quality and maintain service continuity.
WhatsApp messaging data is handled in accordance with Meta’s Platform Terms and WhatsApp Business Policy. We do not sell or share your WhatsApp data with unrelated third parties for their independent marketing purposes.
You may opt out of WhatsApp communications at any time by replying “STOP” to any message or contacting us at it@laceai.in.
5. AI & Machine Learning Services
Our services utilize third-party AI and machine learning platforms to deliver intelligent automation and content generation. These include:
- OpenAI (GPT models): Used for natural language processing, content generation, and conversational AI capabilities.
- Google Gemini: Used for advanced AI processing, content creation, and multi-modal capabilities.
When your data is processed through these AI services, the following safeguards apply:
- Data Minimization: Only the minimum data necessary is shared with AI providers to fulfill the specific service request.
- No Training on Your Data: We use API-based access to these services, meaning your data is processed transiently and is not used to train or improve third-party AI models.
- Contractual Protections: Our agreements with AI service providers include data processing terms that require them to maintain appropriate security and confidentiality standards.
6. Analytics & Cookies
We use Google Analytics to understand how visitors interact with our website. Google Analytics collects data such as pages visited, session duration, referral sources, geographic location (at a city level), and device/browser information through cookies and similar tracking technologies.
Cookies are small text files stored on your device when you visit our website. We use the following types:
| Type | Purpose | Duration |
| Essential | Required for basic site functionality | Session |
| Analytics | Track site usage via Google Analytics | Up to 2 years |
| Preferences | Remember your settings and choices | Up to 1 year |
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. For Google Analytics specifically, you may opt out using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
7. Data Sharing & Disclosure
We do not sell your personal data. We may share your information only in the following limited circumstances:
- Service Providers: Trusted third-party vendors who assist us in operating our services (e.g., cloud hosting, AI processing, analytics) under strict data processing agreements.
- Legal Requirements: When disclosure is required by law, regulation, legal process, or governmental request.
- Business Transfers: In connection with any merger, acquisition, or sale of assets, where your data may be transferred to the acquiring entity.
- With Your Consent: In any other circumstance, we will obtain your explicit consent before sharing personal data.
All third parties with whom we share data are contractually required to protect your information and use it solely for the purposes for which it was shared.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations.
- Contact Information: Retained for the duration of our business relationship, plus up to 3 years after last interaction for follow-up and legal compliance.
- WhatsApp Conversation Logs: Retained for up to 12 months for service quality and continuity, unless longer retention is required by law.
- Analytics Data: Aggregated analytics data may be retained indefinitely as it does not identify individuals. Google Analytics data is retained for up to 26 months.
When data is no longer required, it is securely deleted or anonymized using industry-standard methods.
9. Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of any inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
- Right to Restrict Processing: Request limitation of how we process your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
- Right to Nominate (DPDPA 2023): Nominate someone to exercise your rights on your behalf.
To exercise any of these rights, please contact us at it@laceai.in. We will respond to your request within 30 days in accordance with applicable law.
Opt-Out of Communications: You can unsubscribe from marketing emails by clicking the “Unsubscribe” link in any email, or opt out of WhatsApp messages by replying “STOP”. Essential service-related communications may still be sent as necessary.
10. Children’s Privacy
Our services are not directed to individuals under the age of 18 years. We do not knowingly collect personal data from children. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately at it@laceai.in.
If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete such information from our systems within a reasonable timeframe.
In accordance with the DPDPA 2023, we will obtain verifiable consent from a parent or legal guardian before processing any personal data of a child, should such a situation arise.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls, regular security assessments, and secure data storage practices.
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard safeguards.
12. International Data Transfers
Your data may be transferred to and processed in countries outside of India, including countries where our third-party AI service providers (such as OpenAI and Google) operate their servers. When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for GDPR compliance and other contractual protections.
13. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by posting the revised policy on this page with an updated “Effective Date” and, where appropriate, notify you via email or through our services.
We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.
14. Grievance Officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are provided below:
Grievance Officer: LACE AI
Address: NAC Market, Sector 9, Panchkula, Haryana, India
Email: sales@laceai.in
The Grievance Officer shall address any discrepancies or grievances related to the processing of information within one month from the date of receipt of the grievance.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
LACE AI
NAC Market, Sector 9, Panchkula, Haryana, India
Website: www.laceai.in
Email: sales@laceai.in