Privacy Policy
- Effective Date
- 19 June 2025
- Company
- SeedlingLabs Private Limited
- CIN
- U62013KA2025PTC204372
- Website
- https://forgebench.ai
- Scope
- DPDP Act 2023 · GDPR · CCPA
- Contact
- info@seedlinglabs.com
SeedlingLabs Private Limited (“SeedlingLabs”, “we”, “us”, “our”) provides services in India and globally. We are committed to protecting the privacy of visitors to our website, prospects, customers, vendors, applicants, and other individuals who interact with us (“you”). This Privacy Policy explains what data we collect, how we use it, the choices you have, and your rights.
Regulatory scope: We primarily comply with India's DPDP Act, 2023. Where applicable (e.g., EEA/UK or California), we also honour requests consistent with GDPR/UK GDPR and CCPA/CPRA principles.
§ 1
What Data We Collect
A. Data you provide directly
- Contact & business details: name, email, phone, company name, job title, country, city.
- Service inquiries & project data: requirements, messages, documents or briefs you choose to share.
- Marketing preferences: newsletter opt-ins, event registrations, form responses.
- Support communications: emails, tickets, feedback, or call notes.
- Recruitment data: CV/resume, portfolio links, employment history, references, compensation expectations.
B. Data collected automatically
- Technical/usage data: IP address, device identifiers, browser type/version, OS, pages viewed, referring/exit pages, timestamps, session duration, clickstream.
- Cookies and similar technologies: pixels, tags, local storage (see §3).
C. Data from third parties
Lead enrichment/CRM tools (e.g., business email/firmographics), analytics providers, ad platforms, social networks (if you interact with our pages or ads), recruitment platforms (if you apply via a job board).
We do not intentionally collect sensitive personal data (health, biometrics, etc.) via our website. Please do not submit such data unless we specifically request it for a lawful purpose.
§ 2
Why We Process Your Data
| Purpose | Examples | Legal Basis |
|---|---|---|
| Provide & improve services | Respond to inquiries, scope projects, deliver services, manage accounts | Consent; contract; legitimate interests |
| Website security & operations | Debugging, fraud prevention, incident response, access logs | Legitimate interests; legal obligation |
| Analytics & product improvement | Measure site performance, content relevance, UX improvements | Consent (non-essential cookies); legitimate interests |
| Marketing & communications | Newsletters, case studies, event invites, remarketing | Consent (opt-in); legitimate interests |
| Vendor & partner management | Payments, invoicing, compliance | Contract; legal obligation |
| Recruitment | Evaluate candidates, schedule interviews, maintain talent pool | Consent; legitimate interests |
| Legal & compliance | Respond to lawful requests, enforce terms, protect rights | Legal obligation; legitimate interests |
You may withdraw consent at any time — this won't affect prior lawful processing.
§ 5
International Transfers
We are based in India. Some processors may be located outside India (e.g., EEA/UK/US/Singapore). Where required, we implement appropriate safeguards such as Standard Contractual Clauses, data transfer agreements, and risk assessments. By interacting with our site, you understand your data may be transferred internationally subject to these safeguards.
§ 6
Data Retention
We keep personal data only as long as necessary for the purposes described above or as required by law. Typical retention periods:
- Prospects & inquiries: 24–36 months from last interaction.
- Customers & contracts: Duration of engagement + up to 7–10 years for tax/accounting.
- Marketing contacts: Until you unsubscribe or after 24 months of inactivity, whichever is earlier.
- Recruitment: Up to 24 months (talent pool) unless you request earlier deletion.
- Logs & security data: 12–24 months (shorter where feasible).
We will securely delete or anonymise data when no longer needed.
§ 7
Your Rights & How to Exercise Them
Subject to applicable law, you may have the right to:
- Access your personal data and port a copy (where feasible).
- Correct inaccurate or incomplete data.
- Delete your data (“erasure”) in certain cases.
- Restrict or object to processing (including direct marketing).
- Withdraw consent at any time (for consent-based processing).
- Appeal our decision if we decline or partially comply with a request (DPDP).
Email info@seedlinglabs.com with the subject “Data Rights Request”, specifying your request, country, and a contact email. We may verify identity before acting. We will respond within timelines required by law (DPDP: typically within 30 days).
§ 8
Children's Privacy
Our services and site are not directed to children under 18. We do not knowingly collect children's personal data. If you believe a child has provided data, contact us to delete it.
§ 9
Security
We use reasonable and appropriate technical and organisational measures, including:
- Encryption in transit (HTTPS/TLS).
- Access controls, authentication, and least-privilege practices.
- Firewalls/WAF and DDoS/abuse monitoring.
- Regular updates/patching and vendor due diligence.
- Employee confidentiality obligations and limited data access.
No method is 100% secure; we cannot guarantee absolute security.
§ 10
Data Breaches
In case of a personal data breach that poses a risk of harm, we will notify affected users and/or authorities as required by applicable law (DPDP/GDPR timelines). We will also take steps to mitigate harm.
§ 11
Third-Party Links & Social Media
Our site may link to third-party sites or services (including social media). Their privacy practices are governed by their own policies; please review those when you visit them.
§ 12
Recruitment-Specific Terms
- We process your application data to assess fit, communicate with you, and maintain a limited talent pool (with your consent).
- You may ask us to delete your application data at any time, subject to legal obligations.
§ 13
Grievance Redressal
India – DPDP Compliant. If you have a concern or complaint about our data practices, please contact our Grievance Officer:
Grievance Officer — SeedlingLabs Private Limited
764/E, HSR Layout, 19th Main, 22nd Cross,
Sector 2, Bengaluru, Karnataka, India – 560102
info@seedlinglabs.com
We will acknowledge and endeavour to resolve your grievance within 30 days. If you are unsatisfied, you may escalate as permitted by the DPDP Act/Rules when notified.
§ 14
Country / Region-Specific Notices
- EEA/UK: We act as a controller for website interactions and direct customer relationships. Where we rely on legitimate interests, we balance our interests against your rights. You may lodge a complaint with your local data protection authority.
- California (CCPA/CPRA): We do not sell or share personal information as those terms are defined. You can request access/deletion and to limit use of sensitive information.
- Other jurisdictions: We will honour requests to the extent required by local law and practical feasibility.
§ 15
Changes to This Policy
We may update this Policy periodically. The “Effective date” at the top shows when it was last revised. Material changes will be posted on this page and, where required, notified to you.