Human Reasoning Labs
Book a Call
Legal

Privacy Policy

How Human Reasoning Labs collects, uses, shares and protects personal data, in line with India's Digital Personal Data Protection Act 2023.

Effective date: October 7, 2026Human Reasoning Labs Private Limited

This Privacy Policy describes how Human Reasoning Labs Private Limited (“we”, “us” or “our”) collects, uses, shares and protects personal data when you visit this website, humanreasoninglabs.com, when you contact us, and when you buy our services or products. It is intended to comply with the Digital Personal Data Protection (DPDP) Act 2023 and other applicable Indian data protection rules.

Our software products have their own privacy policies for the data that is processed inside the product. For KaryaFlow, see the KaryaFlow Privacy Policy.

1. Information we collect

a. Information you give us

When you email us, book a call or ask for a proposal, we collect the details you provide. These are usually your name, email address, phone number, company, role and the content of your message.

b. Client and billing information

For clients and subscribers we keep the business name, billing address, GSTIN, contact persons, invoices, payment status and payment reference IDs.

c. Payment information

Third-party payment gateway partners and banks process online payments. They tell us the amount, the payment status, the payment reference and the payment method. We do not receive or store full card numbers, card verification codes, net banking passwords or UPI PINs.

d. Website technical data

Our hosting provider records standard server logs when you load a page. These include your IP address, browser type, the pages requested and the date and time. We use them to operate and secure the website. Some images and media on this website load from third-party content delivery networks, which receive your IP address as part of the request.

e. Project data

A client can share business data with us for an engagement. We process that data on the client's instructions and under the written agreement for the engagement.

2. Cookies and analytics

On the effective date of this policy, this website does not use analytics, advertising or tracking cookies. If we add such tools, we will update this policy first.

Services that you open from this website, such as the meeting scheduler, are operated by other companies. They can set their own cookies under their own privacy policies.

3. How we use your information

  • To reply to enquiries and to schedule calls.
  • To prepare proposals, deliver our services and provide our products.
  • To issue invoices, confirm payments, handle refunds and meet tax obligations.
  • To operate and secure this website.
  • To comply with applicable legal obligations.

We do not use personal data for advertising. We do not make automated decisions that have a legal or similarly significant effect on a person.

4. Data sharing and disclosure

We share personal data only in these cases:

  • Service providers: companies that host this website, store its content, schedule meetings, deliver email and provide cloud infrastructure. At present these include Vercel (hosting), Sanity (content) and Cal.com (scheduling). They process data only as needed to provide their service.
  • Payment gateways, banks and advisors: we share the minimum billing, payment and contact information that is needed to process a transaction, confirm a payment, issue an invoice, handle a refund or a dispute, and complete tax and audit work.
  • Legal requirements: we disclose data when a law, a court order or a government authority requires it.

We do not sell personal data to third parties.

5. Storage, security and transfers outside India

  • Encryption in transit: this website and our payment flows use HTTPS/TLS.
  • Limited access: only the people who need personal data to do their work can access it.
  • Transfers outside India: some of our service providers store or process data on servers outside India. In accordance with Section 16 of the DPDP Act 2023, we transfer personal data only to countries that the Central Government has not restricted by notification.
  • Breach notification: if a personal data breach occurs, we will notify the Data Protection Board of India and the affected persons in accordance with the DPDP Act 2023 and its rules.

We take reasonable technical and organizational measures to protect personal data. No system is completely free of risk.

6. How long we keep data

  • Enquiries: for as long as we need them to reply to you and to continue our business relationship.
  • Client and billing records: for the period that Indian tax and company law requires.
  • Project data: for the period in the written agreement for the engagement. At the end of the engagement we return or delete it on the client's request.

7. Your rights

Under the DPDP Act 2023 you have these rights over your personal data:

  • Right to access: you can ask whether we hold your personal data and get a summary of it.
  • Right to correction: you can ask us to correct inaccurate or incomplete personal data.
  • Right to erasure: you can ask us to delete personal data that is no longer needed for its purpose, unless a law requires us to keep it.
  • Right to withdraw consent: where we process data on the basis of your consent, you can withdraw it at any time.
  • Right to nominate: you can nominate another person to exercise your rights if you die or lose capacity.
  • Right to grievance redressal: you can raise a grievance about how we process your personal data and get a timely response.

To use any of these rights, email tulsi.prasad@humanreasoninglabs.com.

8. Children's privacy

This website and our services are for businesses. We do not knowingly collect personal data from persons under the age of 18. If you believe that we hold a minor's data, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy when our practices, our services or the law change. We will post the revised version on this page and change the effective date at the top.

10. Contact us and Grievance Officer

Human Reasoning Labs Private Limited is the data fiduciary under the DPDP Act 2023. For a question, a request or a grievance about your personal data, contact our Grievance Officer:

Name
Tulsi Prasad
Company
Human Reasoning Labs Private Limited
CIN
U63990OD2026PTC052715
Location
Bhubaneswar, Odisha, India
Response time
Within 30 days of receipt.

If our response does not resolve your grievance, you can make a complaint to the Data Protection Board of India established under the DPDP Act 2023.