PRIVACY POLICY

This Privacy Policy governs the manner in which Deepdive Forensic Labs collects, uses, maintains, and discloses information collected from users (each, a 'User') of deepdiveforensics.ai ('Site'). Please read this policy carefully before submitting any information to us.

1. Introduction

Deepdive Forensic Labs is committed to protecting your privacy and providing a secure and trustworthy experience when you engage with our website or forensic services. We are India's first deepfake detection forensics lab, providing court-admissible forensic analysis of video, audio, and image media.

This policy applies to all information collected through deepdiveforensics.ai, including our contact forms, service enquiry submissions, and any media files submitted to us for forensic analysis.

2. Personal Identification Information

Deepdive Forensic Labs may collect personal identification information from Users in various ways, including when Users visit our Site, fill out a contact or enquiry form, request a forensic analysis, subscribe to communications, or engage with other activities and resources we make available on our Site.

Users may be asked for, as appropriate:

• Full name and job title
• Organisation name
• Email address
• Phone number
• Mailing or registered address
• Case or investigation details relevant to a forensic engagement

Users may visit our Site anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us. Users can always refuse to supply personal identification information, though it may prevent them from engaging certain Site-related activities or services.

3. Non-Personal Identification Information

Deepdive Forensic Labs may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer or device, and technical information about the User's means of connection to our Site, such as the operating system and internet service providers utilised.

This information is used solely for the purpose of improving our website's performance, security, and user experience. It is not linked to any personal identification information.

4. Forensic Case Data — Special Handling

Media files, URLs, case documents, and related materials submitted to Deepdive Forensic Labs for forensic analysis are subject to the following specific conditions:

• All submitted files are handled under strict chain-of-custody protocols. The original submitted file is never modified.
• Submitted files and case materials are used solely for the purpose of conducting the forensic analysis you have engaged us for.
• We do not share submitted case materials with any third party except where required by law or explicitly authorised by you.
• Submitted files are retained for the period specified in your engagement agreement, or for a default retention period of 24 months from the date of report delivery, after which they are securely deleted.
• Where submitted materials contain sensitive personal data of third parties, we process that data solely as necessary for the forensic analysis and do not use it for any other purpose.
• All case data is stored on servers located within India or in jurisdictions that provide equivalent data protection standards.

5. Payment Information

Deep Dive Forensic Labs may collect payment information when Users make a purchase or commission a forensic engagement through our Site. This information is used solely for the purpose of processing payments and is securely handled by our payment processing partners. We do not store full payment card details on our servers.

6. How We Use Collected Information

Deepdive Forensic Labs may collect and use Users' personal information for the following purposes:

To respond to enquiries and deliver services

Information submitted through our contact or enquiry forms is used to respond to your query, assess your case, and deliver the forensic services you have requested. We do not share this information with outside parties except to the extent necessary to provide the service.

To process transactions

We may use the information Users provide when commissioning a forensic engagement only to provide service to that engagement. We do not share this information with outside parties except to the extent necessary to provide the service.

To send service-related communications

The email address provided for an engagement or enquiry may be used to send information and updates pertaining to your case, including report delivery notifications, follow-up communications, and responses to your inquiries, questions, and other requests. We do not send unsolicited marketing communications without your explicit consent.

To improve our Site and services

Anonymised and aggregated usage data collected through our Site may be used to understand how visitors use deepdiveforensics.ai and to improve its performance, content, and usability.

To comply with legal obligations

We may use or disclose your information where required to comply with a valid court order, regulatory direction, or other legal obligation under applicable Indian law.

7. How We Protect Your Information

Deepdive Forensic Labs adopts appropriate data collection, storage, and processing practices and security measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal information and data stored on our Site. Our security measures include:

• Encryption of data in transit using TLS 1.2 or higher for all data submitted through our website and client portal.
• Access controls limiting access to personal data and case materials to authorised personnel only.
• Chain-of-custody protocols for all forensic case materials, with hash verification at intake.
• Regular security assessments of our systems and infrastructure.
• Staff confidentiality obligations and data handling training.

In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will notify the relevant authority as required under the Digital Personal Data Protection Act, 2023 and will inform you directly where required by law.

8. Sharing Your Personal Information

Deepdive Forensic Labs does not sell, trade, or rent Users' personal identification information to others. We may share information in the following limited circumstances:

• Service providers: We engage a limited number of third-party service providers to operate our website and internal systems. These providers are contractually bound to process your data only as directed by us.
• Legal requirements: We may disclose your data where required by a valid court order, subpoena, or regulatory direction under Indian law. We will notify you of such a disclosure where we are legally permitted to do so.
• Professional advisors: We may share limited information with our legal counsel or auditors where necessary for the conduct of our business, subject to confidentiality obligations.
• Aggregated data: We may share generic aggregated demographic information not linked to any personal identification information with trusted business partners for analytical purposes.

9. Cookies

Our Site may use 'cookies' to enhance User experience. Users' web browsers place cookies on their hard drive for record-keeping purposes and sometimes to track information about them. We use the following categories of cookies:

• Strictly necessary cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: Used to collect anonymous data about how visitors use our Site. You may opt out of analytics cookies.
• Preference cookies: Used to remember your settings and preferences across visits.

Users may choose to set their web browser to refuse cookies or to alert them when cookies are being sent. If they do so, note that some parts of the Site may not function properly. On your first visit to deepdiveforensics.ai, you will be presented with a cookie consent notice.

10. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Our default retention periods are as follows:

11. Your Rights

Under the Digital Personal Data Protection Act, 2023 and applicable Indian law, you have the following rights in relation to your personal data:

• Right of access: You may request confirmation of whether we hold personal data about you and a copy of that data.
• Right to correction: You may request correction of inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to withdraw consent: Where we rely on your consent to process your data, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to grievance redressal: You may lodge a complaint with our Grievance Officer (see Section 13) or with the Data Protection Board of India.

To exercise any of these rights, please contact us at info@deepdiveforensics.ai. We will respond to your request within 30 days. We may require you to verify your identity before processing a request.

12. International Data Transfers

We process and store data primarily within India. Where we use third-party service providers that process data outside India, we ensure that appropriate safeguards are in place in accordance with the requirements of the Digital Personal Data Protection Act, 2023.

We do not transfer forensic case materials outside India without your explicit written consent, except where required by a valid legal order.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, Deepdive Forensic Labs has appointed a Grievance Officer to address complaints and concerns relating to the processing of personal data.

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once the Board is constituted under the DPDPA.

14. Children's Data

Our services are directed at organisations and adult professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@deepdiveforensics.ai and we will take steps to delete it promptly.

15. Third-Party Links

Our Site may contain links to third-party websites. This Privacy Policy applies only to deepdiveforensics.ai. Deepdive Forensic Labs is not responsible for the privacy practices of third-party websites and recommends that Users review their privacy policies before providing any personal data.

16. Changes to This Privacy Policy

Deepdive Forensic Labs has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the top of this page and, where appropriate, notify Users by email or by a prominent notice on our website.

We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

17. Contact Us

If you have any questions about this Privacy Policy, the practices of this Site, or your dealings with Deepdive Forensic Labs, please contact us: