Effective Date: October 08, 2025

Last Updated: October 08, 2025

At AI-Assist Cart Tech, a Bengaluru-based team of tech enthusiasts developing AI tools for shopping, we prioritize your privacy and aim to handle personal data with care and transparency. This Privacy Policy details how we collect, process, use, store, and protect information when you interact with buy.gen.in (our “Site”). As a simple affiliate platform redirecting to Amazon India, we keep data practices minimal and compliant with Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDPA).

We act as a “Data Fiduciary” under the DPDPA, meaning we’re responsible for determining the purposes and means of processing your digital personal data. By using the Site, you consent to these practices. If you disagree, please refrain from using it. For any concerns, contact us at hello@aiassistcart.tech.

This policy aligns with the Draft Digital Personal Data Protection Rules, 2025, emphasizing consent, data minimization, and user rights. We do not sell products or process payments—those occur on Amazon.in under their policies.

1. Scope and Applicability

This Policy applies to all visitors to buy.gen.in, regardless of location. It covers digital personal data (any data about an identifiable individual in digital form) processed in India. If you’re outside India, additional laws like GDPR may apply supplementarily, but DPDPA takes precedence for our operations.

2. Information We Collect

We collect only what’s necessary to operate the Site effectively, adhering to DPDPA’s data minimization principle. Categories include:

• Personal Data: Voluntarily provided via contact forms, such as name, email, and message content. No registration is required.
• Usage and Device Data: Automatically gathered, including IP address, browser type, operating system, referral sources, pages viewed, timestamps, and interaction metrics (e.g., clicks on affiliate links).
• Cookies and Tracking Technologies: See Section 6 for details.
• Affiliate Referral Data: Anonymized info on clicks to Amazon links, used for commission tracking. No financial or transaction details are collected here—those stay with Amazon.

We do not collect sensitive personal data (e.g., health, financial, or biometric info) or data from children under 18 without verifiable parental consent, as per DPDPA.

3. Consent and Lawful Basis for Processing

Under DPDPA, we process data based on your consent or legitimate uses:

• Consent: Obtained explicitly for non-essential processing (e.g., analytics cookies via banner). You can withdraw consent anytime via hello@buy.gen.in.
• Legitimate Uses: For Site functionality, affiliate tracking, and legal compliance (e.g., responding to inquiries).
• Deemed Consent: In cases like voluntary sharing of contact info.

We’ll notify you if purposes change, seeking fresh consent where required.

4. How We Use Your Information

Data is processed for specific, limited purposes:

• Operating and improving the Site (e.g., analyzing usage to refine our AI deal algorithm).
• Responding to your communications.
• Tracking affiliate referrals to sustain operations.
• Ensuring security and preventing fraud.
• Complying with laws, including DPDPA audits.

We retain data only as long as needed (e.g., contact data for 1 year post-inquiry; usage logs for 6 months) or as required by law, then securely delete it.

5. Sharing and Disclosure of Information

We share data sparingly, always with safeguards:

• Service Providers: With trusted vendors (e.g., Google for analytics, hosting providers) bound by contracts ensuring DPDPA compliance.
• Affiliate Partners: Anonymized referral data with Amazon Associates; they process independently.
• Legal Obligations: To authorities if required (e.g., under court order) or to protect rights.
• Business Transfers: In mergers/acquisitions, with notice and equivalent protections.
• Data Breaches: In case of a personal data breach, we’ll notify the Data Protection Board of India (DPBI) and affected individuals promptly, as mandated by DPDPA, including details of the breach and mitigation steps.

No data is sold to third parties. Cross-border transfers (e.g., to U.S.-based tools like Google) occur only to approved countries or with adequacy safeguards per upcoming DPDPA rules.

6. Data Security Measures

We implement reasonable technical and organizational measures to protect data, including:

• Encryption for data in transit (HTTPS).
• Access controls and regular audits.
• Secure servers in compliant data centers.

Despite these, no system is infallible. Report suspected breaches to us immediately. We follow DPDPA’s security standards to prevent unauthorized access.

7. Cookies and Tracking Technologies

Cookies help enhance functionality. Below is a detailed table:

We use a cookie consent banner for non-essential cookies. Manage preferences via your browser or our banner.

8. Your Rights as a Data Principal

Under DPDPA and other laws, you have rights over your data:

• Access: Request details of your data and processing.
• Correction/Updation: Fix inaccuracies.
• Erasure: Delete data when no longer needed (right to be forgotten).
• Nomination: Designate a nominee for data handling.
• Grievance Redressal: Complain via hello@buy.gen.in; escalate to DPBI if unresolved.
• Withdrawal of Consent: Stop processing for consented purposes.
• Portability: Receive data in a structured format (where applicable).

To exercise rights, email us with verification (e.g., email used). We’ll respond within 30 days, free of charge unless excessive.

For children: We require parental consent for under-18s; contact us to manage.

9. International Data Transfers

Data is primarily processed in India. Transfers abroad (e.g., to analytics providers) comply with DPDPA’s restrictions, using government-approved mechanisms or contractual clauses ensuring equivalent protection.

10. Third-Party Links

Links to Amazon.in or others are not under our control. Review their policies (e.g., Amazon Privacy Notice).

11. Changes to This Policy

We’ll update for legal changes (e.g., final DPDPA Rules) or practices, posting here with the new date. Significant changes may include email notices. Continued use implies acceptance.

12. Grievance Officer and Contact

For queries, rights exercises, or complaints: Grievance Officer, AI-Assist Cart Tech Co-Working Space,
Near KKR Enclave, Reddy Building,
L B Shastri Nagar Rd, Annasandra Palya,
HAL, Islampur, Vimanapura Post,
Bengaluru, Karnataka – 560017
India. Email: hello@buy.gen.in (Response within 15 days per DPDPA) Phone: +91-9379624000

We’re committed to resolving issues promptly.

Thank you for trusting us. This Policy ensures ethical, compliant data handling as we build useful AI tools.