Privacy Policy

CopperPin, a unit of RxOnWeb decides why and how personal data collected on this website is processed. For any question about this policy or your data, contact privacy@copperpin.io. That mailbox is monitored by the people able to answer questions about how we process personal data.

The pages of copperpin.io, the contact form, the Batch 7 registration form, the privacy request form, job applications sent to us by email, and general correspondence.

The Map My Business tool at copperpin.io/map (and its /analysis and /r pages) is operated as a separate service with its own privacy notice, shown within that tool. This policy does not describe that service.

Personal data we handle for clients during an engagement is governed by the written agreement with that client.

Contact form: your full name, work email, company, role or title, company size, country and industry; what you want to deploy; whether you have tried this before and any detail you add; and, optionally, how you heard about us.

Batch 7 registration form: your full name, work email, phone number (optional), company, role or title, company size and industry; what you want to improve, your 90-day goal, implementation timeline and target business metric; whether you have explored this before and, optionally, what you have tried.

Privacy request form: your name, email address, optional company, the type of request and any details you give.

Job applications: whatever you choose to send in your application email, typically your name, email address, CV/résumé and covering note.

With each form submission we also record the date and time, which form you used and the version of the notice shown to you. We do not store your IP address with form submissions. Our servers use it briefly, in memory, to limit repeated submissions.

Free-text fields may contain whatever you type. Please leave out confidential or sensitive personal information that we don't need.

• Analytics: we use Vercel Web Analytics and Vercel Speed Insights to see aggregate page views and page performance (page URL, referrer, country/region, browser, operating system and device type). They do not use cookies, and Vercel states the data points are not tied to an individual or IP address.
• Server logs: our hosting provider processes standard request information, such as IP address, browser and requested URL, to deliver and secure the site.
• Cookies and browser storage: this site doesn't place cookies or store anything else in your browser, so there is nothing to accept or decline. We use no advertising or tracking technologies.

• To read and respond to your inquiry or registration, decide whether and how we can help, and follow up about it.
• To handle privacy requests and grievances and keep a record of how we did so.
• To assess job applications and contact candidates.
• To run, secure and improve the website, including preventing spam and abuse.
• To meet legal obligations and establish or defend legal claims.

We use the data you give us only for the purpose you gave it for. We don't add inquiry or registration contacts to marketing lists or newsletters, we don't sell or rent personal data, and we don't use it for advertising or profiling. We don't send form submissions to AI services, and we don't use them to train AI models.

When you submit a form or email us, you provide your details voluntarily so we can act on that specific request. We process them for that purpose and not otherwise. If you tell us you no longer want us to, we stop.

We share personal data only with these service providers, which process it on our behalf:

• Vercel — website hosting, server logs and the analytics described above.
• Supabase — the database that stores form submissions and privacy requests.
• Google (Google Workspace) — our email, including job applications, privacy requests and other correspondence sent to our @copperpin.io addresses.

We may also disclose personal data where the law requires it, for example to a court or a government authority with legal power to ask for it.

Our service providers operate global infrastructure, so your personal data may be stored or processed in data centres outside India. Where Indian law restricts transfers to particular countries, we will comply with those restrictions.

We keep inquiry and registration data for 24 months after our last contact with you, and privacy request records for 24 months after the request is closed. Job applications are kept for 12 months. Full details, including backups and legal holds, are in our Data Retention Policy.

The site is served only over HTTPS. Form data is stored in a database that is not publicly accessible and is reached only from our server using credentials kept out of the browser. Viewing submissions requires an administrator login. More detail is on our Security page. No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.

You can ask us to:

• give you a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
• correct, complete or update inaccurate or incomplete data;
• erase your data, unless we must keep it to comply with the law;
• stop processing that is based on your consent (withdrawing consent does not affect processing already done, and is different from erasure);
• nominate another person to exercise these rights for you if you die or become unable to act;
• look into a grievance about how we have handled your data.

Use the privacy request form or email privacy@copperpin.io. To protect your data, we reply to the email address you gave and act once we are satisfied the request comes from you, usually by confirming you control the email address on our records. We ask for more only if we genuinely need it. We respond to requests and grievances within 30 days.

If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India once it accepts complaints under the Digital Personal Data Protection Act, 2023. The law expects you to use our grievance process first.

copperpin.io and our services are meant for businesses and people acting for them. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you think a child has sent us personal data, contact privacy@copperpin.io and we will delete it.

We will update this page when our practices change and show the date of the change at the top. If a change significantly affects how we use data you have already given us, we will tell you directly where we can.

Privacy questions, requests and grievances: privacy@copperpin.io, or use the privacy request form.