Privacy Policy

Rightium ("Rightium", "we", "us") is an intellectual property research firm with its office at C.B.I Main Road, Ganganagar, Bengaluru, Karnataka 560032, India. We are the data fiduciary for personal data collected through www.rightium.org (the "Site").

This policy explains what we collect when you visit the Site, send us an enquiry, or contact us by phone, WhatsApp or email, and what we do with it. Personal data we process while performing a signed engagement is additionally governed by the confidentiality and data-processing terms of that engagement.

Information you give us directly:

• Contact details — your name, work email address, phone or WhatsApp number and company.
• Enquiry details — the service you are interested in, your deadline, and the message or brief you send.
• Anything you choose to share when you call, WhatsApp or email us, including attachments.

Information collected automatically:

• Technical data such as IP address, browser type, device type, referring page and the pages you view, recorded in server and security logs.
• Signals used by our bot-protection provider (Cloudflare Turnstile) to distinguish people from automated traffic.
• Usage analytics — pages visited, links and buttons clicked, the campaign that brought you here (UTM tags), approximate location derived from your IP address, and device and browser type — collected with Google Analytics and, when configured, PostHog to understand how the Site is used. We do not send enquiry text or contact details as Google Analytics event parameters.

We do not use advertising trackers, we do not sell or share data with advertisers, we do not build marketing profiles, and we do not knowingly collect sensitive personal data such as financial, health or biometric information through the Site. Please do not send us such data unless an engagement specifically requires it.

• To respond to your enquiry, scope the work you have asked about and send you a quote.
• To perform and administer an engagement you have commissioned, including invoicing.
• To keep the Site secure, prevent spam and abuse, and diagnose technical problems.
• To comply with legal, accounting and regulatory obligations.

We process personal data on the basis of your consent, which you give by submitting an enquiry or contacting us, and for the legitimate uses permitted under the Digital Personal Data Protection Act, 2023 — such as responding to a request you have made or complying with law. We do not sell your personal data, and we do not use it for purposes unrelated to the reason you gave it to us.

If you use the AI assistant, your messages and recent conversation are sent to Groq to generate an answer using public website content. Chat history is held in your current browser page’s memory and is cleared when you reload or start a new chat. Please do not share confidential invention details or personal information in the assistant. Use the contact form to arrange a conversation with the team instead.

AI answers can contain mistakes and should be checked against the linked website pages. For information about Groq’s handling of submitted messages, see Groq’s privacy policy at https://groq.com/privacy-policy/.

Invention disclosures, claim sets, product details and other technical material you send in a brief are treated as confidential from the moment we receive them — whether or not an engagement follows. Access is limited to the analysts scoping or working on your matter. We are happy to sign a non-disclosure agreement before you share anything sensitive; ask at contact@rightium.in.

We share personal data only with service providers who help us run the Site and our business, under contracts that require them to protect it and use it only on our instructions:

• Website hosting and content delivery (Vercel).
• Database hosting (Neon).
• File storage and bot protection (Cloudflare).
• Email delivery (Resend).
• Product analytics (PostHog, when configured) and website analytics (Google Analytics).
• Professional advisers such as accountants and lawyers, where necessary.

We may also disclose information where required by law, court order or a government authority, or to protect our rights, property or safety. Some of these providers process data outside India; where they do, we rely on transfers permitted under Indian law and on the provider's contractual safeguards.

The Site does not set advertising or cross-site tracking cookies. It uses:

• Strictly necessary cookies set by our bot-protection provider (Cloudflare Turnstile) to protect the contact form against automated abuse.
• First-party analytics cookies set by Google Analytics and, when configured, PostHog cookies and local storage. These help count visits and understand which pages are useful. Google signals and advertising personalization are disabled in our Google tag configuration.

We honour your browser's "Do Not Track" setting: when it is switched on, analytics are not collected. You can also block or delete cookies in your browser settings; the Site will keep working.

Enquiries that do not lead to an engagement are kept for up to 24 months so that we can follow up on the conversation, then deleted. Records relating to an engagement are kept for as long as the engagement requires and afterwards for the period required by tax, accounting and other applicable laws. Security logs are kept for a short period, typically no longer than 90 days.

We use reasonable security practices consistent with the Information Technology Act, 2000 and the rules made under it — including encryption in transit, access controls limited to staff who need the data, and vetted service providers. No method of transmission or storage is completely secure, but if a personal data breach occurs we will notify affected individuals and the Data Protection Board of India as the law requires.

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how we have used it.
• Ask us to correct, complete or update inaccurate personal data.
• Ask us to erase personal data we no longer need to keep.
• Withdraw consent at any time — this does not affect processing already carried out.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Raise a grievance with us, and if it is not resolved, complain to the Data Protection Board of India.

To exercise any of these rights, email contact@rightium.in with the subject line "Privacy request". We may need to verify your identity before acting, and we aim to respond within 30 days.

The Site and our services are intended for businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

We may update this policy from time to time. The "last updated" date at the top of this page shows when it last changed. Material changes will be highlighted on the Site.

Questions, requests and complaints about this policy or about how we handle your personal data can be sent to our Grievance Officer:

• Email: contact@rightium.in
• Phone: +91 9606068707 (Mon – Sat, 10:00 – 19:00 IST)
• Post: Grievance Officer, Rightium, C.B.I Main Road, Ganganagar, Bengaluru, Karnataka 560032, India

We will acknowledge a grievance within 48 hours and aim to resolve it within 30 days.