Privacy Policy

1. Who we are

RigelLabz ("RigelLabz," "we," "us," or "our") is a technology studio that builds and operates business software products, including Wipsly. This Policy explains how we collect, use, share, and protect personal data when you visit our websites, use our products, or interact with us. Insert registered legal entity name, address, and CIN once incorporated.

Where a specific product (such as Wipsly) has its own privacy policy, that policy governs use of that product, and this Policy governs RigelLabz's corporate websites and any data processing not covered elsewhere.

2. Data we collect

We collect information in the following ways:

• Information you provide directly — for example, your name and email address when you contact us, sign up for a product, or subscribe to updates.
• Information collected automatically — such as IP address, browser type, device information, and pages visited, collected via cookies and similar technologies for analytics and security purposes.
• Information from our products — where a RigelLabz product (such as Wipsly) processes data on behalf of a business client, that data is handled under the terms of that product's own privacy policy and any applicable data processing agreement, and RigelLabz acts as a data processor on the client's behalf for that data.

3. How we use your data

We use personal data to:

• Provide, operate, and maintain our websites and products
• Respond to inquiries and provide customer support
• Send product updates, security notices, and — where you've consented — marketing communications
• Monitor and improve the security, performance, and reliability of our services
• Comply with legal obligations

4. Legal basis and regional compliance

We are committed to processing personal data in accordance with applicable data protection law, including:

• India — the Digital Personal Data Protection Act, 2023 (DPDP Act) and its associated Rules. Where we act as a Data Fiduciary, we process personal data based on consent or other permitted grounds under the DPDP Act, and we maintain a grievance redressal mechanism as required. Insert Grievance Officer name, designation, and contact details before launch — required under DPDP Rules.
• European Economic Area / UK — the General Data Protection Regulation (GDPR), where applicable to users in these regions. We process personal data on the basis of consent, contractual necessity, or legitimate interest, as relevant.
• Other regional data protection laws applicable to users in jurisdictions we serve.

5. Data sharing

We do not sell personal data. We may share data with:

• Service providers who help us operate our business (e.g., cloud hosting, email delivery, analytics), under contractual confidentiality and data protection obligations
• Legal and regulatory authorities, where required by law
• Successors, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections

6. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and are detailed in individual product policies where applicable.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to legal retention requirements
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@rigellabz.com.

8. Security

We implement reasonable technical and organizational measures — including encryption in transit, access controls, and regular security review — designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No system is completely secure, and we encourage users to also take steps to protect their own information.

9. Cookies

We use cookies and similar technologies to operate our websites, remember preferences, and understand usage patterns. You can control cookie preferences through your browser settings.

10. International data transfers

As a company serving clients across regions, personal data may be transferred to and processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect data transferred internationally.

11. Children's privacy

Our websites and products are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Policy from time to time. Material changes will be notified via our website or, where appropriate, by email. Continued use of our websites or products after changes take effect constitutes acceptance of the updated Policy.

13. Contact us

For any privacy-related questions or requests, contact us at privacy@rigellabz.com. Insert registered business address once incorporated.