Legal · Data Protection
Privacy Policy
Last updated: May 2026
This policy explains what personal data Baxtage collects when you visit our website or contact us, how we use it, and the rights you hold over it under Indian law.
01Introduction
This Privacy Policy applies to Baxtage Labs ("Baxtage", "we", "us" or "our"), an AI-native software studio based in Mumbai, India and currently in registration as a private limited company. It governs the website at thebaxtage.com and any related pages, forms and communications (together, the "Site").
We act as the Data Fiduciary for the personal data we collect through the Site. By using the Site you agree to the practices described here. If you do not agree, please discontinue use of the Site.
02Information we collect
We aim to collect only what we need. Depending on how you interact with us, this may include:
- Contact & enquiry data — your name, email address, company and the contents of any message you send us through a contact form or by email.
- Communications — records of correspondence and any project or proposal details you choose to share.
- Usage & analytics data — pages viewed, referring links, approximate region, device and browser type, and similar diagnostic information, collected in aggregate to understand how the Site is used.
- Cookies & similar technologies — small files and identifiers used to keep the Site working and to measure traffic (see Cookies, below).
We do not intentionally collect sensitive personal data, and we ask that you not send it to us through the Site.
03How we use your information
We process personal data to:
- respond to enquiries and provide the information or services you request;
- operate, maintain, secure and improve the Site;
- communicate about engagements, proposals and project work;
- understand usage trends through aggregated analytics; and
- comply with legal, accounting and regulatory obligations.
We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects about you.
04Legal basis & your rights
We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act). We rely on your consent, given when you submit a form or contact us, and on the legitimate uses permitted under the Act, including responding to a request you have voluntarily made and meeting our legal obligations.
As a Data Principal, you have the right to:
- access a summary of the personal data we process about you;
- request correction, completion or updating of inaccurate data;
- request erasure of data we no longer need to retain;
- withdraw consent at any time, as easily as it was given;
- nominate another person to exercise your rights in the event of death or incapacity; and
- seek grievance redressal and escalate to the Data Protection Board of India if your concern is not resolved.
05Cookies
The Site uses a minimal set of cookies and similar technologies that are necessary for it to function and to help us understand aggregate usage. Most browsers let you refuse or delete cookies through their settings; doing so may affect parts of the Site. Where required, we will ask for your consent before setting non-essential cookies.
06Third-party services
We use a small number of trusted providers to operate the Site. These may include:
- Google Fonts — to render typography; your browser may request font files from Google's servers;
- Website hosting and content delivery — to serve the Site reliably;
- Analytics — to measure aggregate traffic; and
- Email providers — to receive and respond to your messages.
These providers process data on our behalf under their own terms and privacy notices. We share only what is necessary for them to perform their service.
07Data retention & security
We keep personal data only for as long as needed for the purposes set out above or as required by law, after which it is deleted or anonymised. We apply reasonable technical and organisational safeguards — including access controls and encryption in transit — to protect personal data against unauthorised access, loss or disclosure. No method of transmission over the internet is, however, completely secure.
08Children
The Site is intended for a business audience and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us data, please contact us so we can delete it.
09International transfers
Some of our service providers may process or store data outside India. Where this happens, we take steps to ensure that transfers comply with the DPDP Act and that your data continues to be handled with appropriate protection.
10Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The "Last updated" date above shows when it was last revised. Material changes will be highlighted on this page.
11Contact
For any privacy question, request or grievance, contact our team at aditya@thebaxtage.com.
Baxtage Labs · Mumbai, India · thebaxtage.com