This Privacy Policy explains how Hibilter IT Systems Pvt. Ltd. (“Hibilter”, “we”, “us”) collects, uses and protects personal data when you visit www.hibilter.com and its sub-sites (including hibilter.com/humael), request a demo, apply for a job or otherwise contact us. It is published in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and rules made under it. Where the EU or UK General Data Protection Regulation (“GDPR”) applies to you, the GDPR-specific points in this policy also apply.
This policy covers our website and business contacts. Personal data that our customers process inside our products (Humael, Yantreal and Vajra) is governed by the agreement and data processing terms we sign with that customer, under which the customer decides how that data is used.
1. Who is responsible for your data
Hibilter is the data fiduciary (under the DPDP Act) and data controller (under the GDPR) for the personal data described in this policy.
Hibilter IT Systems Pvt. Ltd.
Registered office: 5th Floor, Wing-A, Statesman House, Barakhamba Road, Connaught Place, New Delhi 110001, India
Email: contact@hibilter.com
2. What we collect
Information you give us
- Demo and contact requests: your name, work email, company, the product you’re interested in, your deployment preference and the message you write.
- Job applications: your name, contact details, CV and anything else you choose to send to us by email.
- Correspondence: the content of emails and other messages you send us.
- “Ask Humael” chat: the messages you type into the chat assistant on our website, along with the conversation so far. Please don’t enter personal or confidential information in the chat.
Information collected automatically
- Server and security logs: our hosting and content delivery provider records technical data such as your IP address, browser type, the pages requested and the time of each request, to deliver the site and protect it from abuse.
- Theme preference: the site stores your light or dark theme choice in your browser’s local storage. This stays on your device and is not sent to us.
- Web fonts: the site loads fonts from Google Fonts, so your browser sends your IP address to Google when a page loads.
We use Cloudflare Web Analytics to understand how the site is used, such as page views, referring sites, and browser, device and country. It does not use cookies or local storage, does not track you across websites and does not build a profile of you. We do not use advertising cookies.
We do not ask for sensitive personal data such as financial information, health information or biometric data through this website. Please do not send it to us.
3. How we use it, and on what basis
- Responding to demo and contact requests and arranging and following up on demos, based on your consent when you submit the form.
- Assessing job applications, based on your consent when you apply.
- Answering your questions in the chat assistant, based on your consent when you choose to send a message.
- Running and securing the website, including preventing spam and abuse. This is a legitimate use under the DPDP Act and a legitimate interest under the GDPR.
- Meeting legal obligations, such as responding to lawful requests from authorities.
We do not sell your personal data. We do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Who we share it with
We share personal data only with service providers who help us run the website and our business, under contracts that limit how they may use it:
- Website hosting, CDN and email: Hostinger.
- Form delivery: FormSubmit (formsubmit.co), which forwards contact-form submissions to our inbox.
- AI model provider for the chat assistant: Anthropic (Claude API), which processes chat messages to generate replies.
- Fonts: Google Fonts.
- Website analytics: Cloudflare (Cloudflare Web Analytics).
We may also disclose personal data when the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.
5. International transfers
Some of our service providers store or process data outside India, including in the United States and the European Union. We transfer data only to countries the Government of India has not restricted under the DPDP Act. For personal data subject to the GDPR, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
6. How long we keep it
- Demo and contact requests: up to 24 months after our last interaction, unless we enter into a business relationship.
- Job applications: up to 12 months after the role is filled, unless you ask us to delete your application sooner or agree to let us keep it longer.
- Chat messages: we do not store chat messages on our servers. Each message is sent to our AI model provider to generate a reply, and the provider may keep it for a limited period under its own terms
- Server logs: according to our hosting provider’s retention settings, typically no more than 90 days.
We may keep data longer where the law requires it or to establish, exercise or defend legal claims.
7. How we protect it
We use reasonable security practices and procedures proportionate to the data we hold, including encryption in transit (HTTPS), access controls and restricted access for staff. No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.
8. Your rights
Under the DPDP Act you have the right to:
- get a summary of the personal data we process about you and how we process it;
- have inaccurate or incomplete data corrected, completed or updated;
- have your data erased when it is no longer needed for the purpose you gave it for;
- withdraw your consent at any time, as easily as you gave it. This does not affect processing already carried out;
- nominate someone to exercise these rights for you if you die or become incapacitated; and
- have your grievances addressed (see section 9).
If the GDPR applies to you, you also have the right to object to processing, to restrict processing, to data portability and to complain to your local data protection authority.
To exercise any of these rights, email contact@hibilter.com. We may need to verify your identity before we act on your request, and we will respond within the time the law requires.
9. Grievance Officer
In accordance with the Information Technology Act, 2000 and the DPDP Act, the contact details of our Grievance Officer are:
Grievance Officer
Hibilter IT Systems Pvt. Ltd.
5th Floor, Wing-A, Statesman House, Barakhamba Road, Connaught Place, New Delhi 110001, India
Email: contact@hibilter.com
We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
10. Children
This website is intended for businesses and professionals and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.
11. Links to other sites
Our website links to third-party sites such as LinkedIn. Their own privacy policies govern how they handle your data.
12. Changes to this policy
We may update this policy from time to time. The effective date at the top of this page shows when it last changed. If we make material changes, we will highlight them on this page.
13. Contact us
Questions about this policy? Email contact@hibilter.com or write to us at the address in section 1.