Privacy Policy

Last updated: July 14, 2026

1. Introduction

Richstream Sky Labs Private Limited ("Richstream", "the Company", "we", "us", or "our") is a company incorporated under the Companies Act, 2013, bearing CIN U62013MP2023PTC068104, with its registered office at Office 308, 2nd Floor, R Worksquare, Plot No. 21, Board Office Square, Zone 2, Maharana Pratap Nagar, Bhopal, Madhya Pradesh 462011, India. We are committed to protecting the privacy and personal data of every individual who interacts with us.

This Privacy Policy explains what personal data we collect through this website, how and why we use it, the parties with whom we share it, how long we keep it, and the rights available to you. It is published in accordance with the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the rules made thereunder, and the Information Technology Act, 2000 together with its applicable rules, each as amended from time to time.

By accessing or using this website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use this website or submit any personal data to us.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through this website and through your direct communications with us. It does not apply to the individual products and platforms offered by Richstream (including Get Your Lawyers, Vidilekh, API-as-a-Service, and Signeazy), each of which may be governed by its own separate privacy notice and terms of use.

This Privacy Policy also does not apply to any third-party website, application, or service that may be linked from this website. We encourage you to review the privacy policies of those third parties before providing them with your personal data.

3. Definitions

In this Privacy Policy, the following terms carry the meaning given to them under the DPDP Act:

"Data Principal" means the individual to whom the personal data relates; where that individual is a child, it includes the parents or lawful guardian, and where that individual is a person with a disability, it includes their lawful guardian.
"Data Fiduciary" means the person who, alone or together with others, determines the purpose and means of processing personal data. For the purposes of this website, Richstream is the Data Fiduciary.
"Data Processor" means any person who processes personal data on behalf of a Data Fiduciary.
"Personal Data" means any data about an individual who is identifiable by or in relation to such data.
"Processing" means a wholly or partly automated operation or set of operations performed on personal data, including collection, recording, organisation, storage, use, sharing, disclosure, or erasure.
"Data Protection Board" means the Data Protection Board of India established under the DPDP Act.

4. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity and contact data that you provide directly, such as your name, company or organisation name, job title, email address, and telephone number.
Communication content, such as the message, enquiry, or job application details you submit through our contact, careers, or newsletter forms, including any documents (for example, a résumé) that you choose to upload.
Technical and usage data collected automatically, such as your IP address, browser and device type, operating system, referring website, pages viewed, and the date and time of your visit.
Cookie and consent data, such as your cookie preferences and records of the consent you have provided.

We do not intentionally collect sensitive personal data through this website. Please do not submit any information you consider sensitive (such as financial, health, or biometric information) through our public forms.

5. How We Collect Your Personal Data

Directly from you, when you complete a form, send us an email, apply for a role, subscribe to updates, or otherwise communicate with us.
Automatically, through cookies and similar technologies when you browse this website (see the section on Cookies and Similar Technologies below).
From third parties and service providers, such as analytics, hosting, and marketing platforms that help us operate this website and understand how it is used.

6. Purposes for Which We Process Personal Data

We process your personal data only for lawful and specified purposes, including to:

respond to and manage the enquiries, requests, and job applications you submit to us;
operate, maintain, secure, and improve this website and our services;
send you communications and updates that you have opted into, such as newsletters, from which you may unsubscribe at any time;
carry out analytics to understand and enhance the performance and usability of this website;
detect, prevent, and respond to fraud, security incidents, and misuse of this website; and
comply with applicable laws and regulations and respond to lawful requests from public authorities.

7. Legal Basis for Processing (Consent and Legitimate Uses)

Under the DPDP Act, we process your personal data on the basis of your consent or for certain legitimate uses permitted by law.

Consent: Where we rely on consent, we request it through a clear affirmative action and process your personal data only for the purpose for which consent has been given. Your consent will be free, specific, informed, unconditional, and unambiguous, and you may withdraw it at any time.

Legitimate uses: In certain circumstances the DPDP Act permits processing without separate consent — for example, where you have voluntarily provided your personal data for a specified purpose and have not indicated that you object to its use for that purpose, or where processing is necessary to comply with a legal obligation, to respond to a medical emergency, or to address a threat to safety.

8. Consent and Your Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time by contacting us at hello@richstreamskylabs.com or our Grievance Officer at grievance@richstreamskylabs.com. Withdrawing your consent is as easy as giving it.

The withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal. Following a withdrawal, we, and our Data Processors where applicable, will cease processing your personal data for the relevant purpose within a reasonable time, unless retention or continued processing is required or permitted under applicable law.

9. Cookies and Similar Technologies

We use cookies and similar browser-storage technologies to remember your preferences (including your cookie-consent choice), keep the website secure, and understand how the website is used.

You can manage or disable cookies through the cookie banner on this website and through your browser settings. Disabling certain cookies may affect the functionality and performance of the website.

10. How We Share and Disclose Personal Data

We do not sell or rent your personal data. We may share it only in the following limited circumstances:

Service providers (Data Processors): with third parties that process personal data on our behalf under contract, such as HubSpot for form submissions and customer communication, and our hosting, analytics, and communication providers. These providers may use your personal data only to perform services for us and are bound by appropriate confidentiality and security obligations.
Legal and regulatory disclosures: where required to comply with applicable law, a court order, or a lawful request by a government or regulatory authority, or to establish, exercise, or defend legal claims.
Business transfers: in connection with a merger, acquisition, restructuring, financing, or sale of assets, in which case personal data may be transferred to the successor entity subject to this Privacy Policy.
With your consent: with any other party where you have provided your consent for us to do so.

11. Cross-Border Transfer of Personal Data

We are based in India and primarily store and process personal data within India. Some of our service providers may process personal data outside India. Where we transfer personal data outside India, we do so in accordance with the DPDP Act and will not transfer personal data to any country or territory that the Central Government of India has restricted for such transfers.

12. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

When your personal data is no longer required for the specified purpose and its retention is no longer necessary for a legal purpose, we will erase it or anonymise it, unless retention is otherwise required or permitted under applicable law.

13. Data Security

We implement reasonable technical and organisational security safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse. These measures include access controls, encryption in transit where appropriate, and contractual safeguards with our service providers.

In the event of a personal data breach, we will take steps to mitigate it and will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines required under the DPDP Act. No method of transmission over the internet or method of electronic storage is completely secure, and while we strive to protect your personal data, we cannot guarantee its absolute security.

14. Your Rights as a Data Principal

Subject to the DPDP Act, you have the following rights in relation to your personal data:

Right to access information: to obtain a summary of the personal data we process about you and the processing activities undertaken, along with the identities of any Data Processors or other Data Fiduciaries with whom it has been shared.
Right to correction and erasure: to request the correction of inaccurate or misleading data, the completion of incomplete data, the updating of data, and the erasure of personal data that is no longer necessary for the purpose for which it was collected, unless retention is required under applicable law.
Right to grievance redressal: to a readily available means of registering a grievance with us in respect of any act or omission regarding the processing of your personal data or the exercise of your rights.
Right to nominate: to nominate another individual who may, in the event of your death or incapacity, exercise your rights under the DPDP Act on your behalf.

To exercise any of these rights, please contact us using the details set out in the 'Grievance Redressal' and 'Contact Us' sections below. We may need to verify your identity before acting on your request.

15. Grievance Redressal and Our Grievance Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our processing of your personal data, or if you wish to exercise any of your rights, you may contact our Grievance Officer:

Grievance Officer, Richstream Sky Labs Private Limited

Email: grievance@richstreamskylabs.com

Address: Office 308, 2nd Floor, R Worksquare, Plot No. 21, Board Office Square, Zone 2, Maharana Pratap Nagar, Bhopal, Madhya Pradesh 462011, India

We will acknowledge and respond to your grievance within the timelines prescribed under applicable law. If you are not satisfied with our response, you have the right to register a complaint with the Data Protection Board of India.

16. Children and Persons with a Disability

This website is intended for a general business audience and is not directed at children. Where we become aware that a Data Principal is a child (an individual below the age of 18 years), we will process their personal data only after obtaining verifiable consent from a parent or lawful guardian, in the manner required under the DPDP Act.

We do not undertake any tracking, behavioural monitoring, or targeted advertising directed at children. In the case of a person with a disability who has a lawful guardian, we will obtain the consent of that guardian. If you believe we have collected personal data from a child without appropriate consent, please contact our Grievance Officer so that we can take appropriate action.

17. Third-Party Websites and Services

This website may contain links to third-party websites, platforms, or services that are not operated or controlled by us. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing them with your personal data.

18. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be indicated by a revised 'Last updated' date and will be effective as soon as it is published on this page. Where the changes are significant, we will take reasonable steps to provide a more prominent notice.

19. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Richstream Sky Labs Private Limited

Email: hello@richstreamskylabs.com

Grievance Officer: grievance@richstreamskylabs.com