How we handle your data.

01What we collect.

We collect only the personal data you voluntarily provide when you contact us through our inquiry form or write to any of our published email addresses. That data may include the following.

• Your name and your organisation or institutional affiliation
• Your work email address and, if you choose to provide it, your phone number
• The category that describes you and your role, as selected on our demo form
• The subject matter and content of your message or notes
• If you hold a Loom console account, your login email and authentication records

Like any website, our hosting infrastructure records standard server logs, including IP address, browser type, and pages requested, which are used only for security and operations. We do not use cookies, web analytics, tracking pixels, or advertising trackers. We do not collect sensitive personal data.

02Purpose of collection and use.

We use the personal data you submit solely for the following purposes.

• Responding to your inquiry, whether about dataset licensing, research partnerships, institutional collaboration, or press and media matters
• Assessing whether a potential business or research relationship is appropriate
• Maintaining a record of correspondence for our internal reference

We do not use your data for marketing, profiling, automated decision-making, or any purpose beyond responding to your communication.

03Legal basis for collection.

We process your personal data only because you have chosen to share it with us, by submitting our inquiry form or writing to us directly. By voluntarily contacting us, you consent to your personal data being used in the manner described in this policy.

You may withdraw this consent at any time by writing to us at the address set out at the end of this policy. On receiving a withdrawal request, we will delete your personal data promptly and without condition. We will only retain data beyond that point if required to do so by a lawful order of a competent authority or by applicable law.

04Data sharing and disclosure.

We do not sell, rent, or share your personal data with any third party for commercial purposes.

We use a small number of service providers to operate the website, and they process data on our behalf under their own security commitments. Form submissions and Loom console authentication are stored with Supabase, our database and authentication provider. The website itself is served by our hosting provider, which processes standard server logs. These providers act as data processors for us and do not use your data for their own purposes.

Your data may be accessed internally by authorised members of the Anthrobase team strictly on a need-to-know basis for the purpose of responding to your inquiry. It will not be circulated beyond what is necessary for that purpose.

We will disclose your personal data to external parties only in the following limited circumstances.

• Where required by a lawful order of a competent authority, including a court, tribunal, or government body
• Where disclosure is necessary to comply with applicable law

In all other circumstances, your data stays within Anthrobase and the named service providers above.

05Data retention.

We retain your personal data only for as long as is necessary to respond to your inquiry and assess whether an ongoing relationship is appropriate.

Where your inquiry does not lead to an active engagement, we delete your personal data within 30 days of the conclusion of our correspondence with you. We maintain an internal tracking system to honour this commitment systematically.

Where your inquiry leads to an active partnership, licensing arrangement, or ongoing engagement, retention will be governed by the terms of the relevant agreement entered into between you and Anthrobase.

We will delete your data immediately upon receiving a withdrawal request, subject only to any obligation arising from a lawful order of a competent authority or applicable law.

06Your rights.

You should have meaningful control over the personal data you share with us. If you have contacted us through the website or by email, you may at any time exercise the following rights.

• Ask what data we hold about you. We will tell you promptly and accurately.
• Ask us to correct it. If any data we hold is inaccurate or incomplete, we will correct it without delay.
• Ask us to delete it. We will delete your data immediately, as described above.
• Withdraw your consent. You may ask us to stop using your data at any time. We will honour that promptly.

To exercise any of these rights, write to us at the address set out below. We will acknowledge your request within 72 hours and act on it without undue delay.

07Security.

We take the security of your personal data seriously. Access to personal data submitted through the website is restricted to authorised members of the Anthrobase team on a strict need-to-know basis.

We adopt reasonable technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or loss. Inquiry and demo-request data is stored in access-controlled infrastructure, including our Supabase database, with row-level security that prevents public reads, alongside secured email. It is not stored on publicly accessible systems.

We will notify you promptly if we become aware of any breach or unauthorised access involving your personal data.

No method of electronic transmission or storage is entirely secure. To the fullest extent permitted by applicable law, Anthrobase shall not be liable for any loss, damage, or harm arising from unauthorised access to or disclosure of your personal data where such access or disclosure results from circumstances beyond our reasonable control, including breaches of third-party infrastructure, telecommunications failures, or malicious acts of third parties.

08Changes to this policy.

We handle personal data in line with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules notified in November 2025, as their provisions come into force. We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this section.

We encourage you to review this policy periodically. Continued use of the website following any update constitutes your acceptance of the revised policy.

09Contact and data queries.

If you have questions about this Privacy Policy, wish to exercise any of the rights described above, or have concerns about how we have handled your personal data, contact us directly.

Designated contact for data queries.

• Name — Gagandeep, Legal Consultant, Anthrobase
• Email — contact@anthrobase.ai
• Address — C-11, Green Park Ext Rd, Block C, Green Park Extension, New Delhi 110016

We will acknowledge your query within 72 hours and endeavour to resolve it within 30 days.