Privacy Policy

01Who we are

This website, drema.in, is operated by Drema AI Technologies Pvt. Ltd. ("Drema AI", "we", "us"), a software development company with its office at A-126, A Block Rd, A Block, Sector 63, Noida, Uttar Pradesh 201309, India.

For the personal data described in this policy we decide why and how it is processed. Under India's Digital Personal Data Protection Act, 2023 that makes us the Data Fiduciary; under the EU and UK General Data Protection Regulation, the controller.

This policy covers this website, our forms and free tools, our advertisements that lead to this website, and messages you send us by email, phone or WhatsApp. It does not cover software we build for clients, which is governed by our agreements with them.

02Personal data we collect

We collect only what we need to reply to you and to run and improve this website.

• Details you give us in formsName, email address, phone or WhatsApp number, company name, website, country, industry, project timeline and whatever you write about your project. This applies to the contact, callback, consultation-booking, exit-offer and free-tool forms.
• Messages and callsThe content of emails, WhatsApp messages and calls with us, and the contact details you use.
• Booking detailsWhen you schedule a call, the name, email and time slot you enter in the scheduling tool.
• Usage data collected automaticallyPages viewed, links and buttons clicked, time on page, the page that referred you, approximate location derived from your IP address, device type, browser and screen size, and a visitor identifier stored in your browser.
• Advertising dataIf you arrive from one of our advertisements, the click identifier and campaign details passed in the link, and whether you later submitted a form.

We do not ask for and do not want sensitive information such as government identity numbers, financial account details, health information or passwords through this website. Please do not include it in forms or messages.

03How we use it

• To respond to youAnswering enquiries, preparing the estimate, blueprint or other document you asked for, scheduling and holding calls, and sending follow-up messages about your request.
• To provide servicesPreparing proposals and contracts and delivering work if you become a client.
• To measure and improve the websiteUnderstanding which pages and forms are used, finding errors and making the site easier to use.
• To advertiseMeasuring whether our advertisements lead to enquiries and showing our advertisements to people who have visited this website.
• To keep the website secureDetecting abuse, spam submissions and security incidents.
• To meet legal obligationsKeeping records required by tax, company and other laws, and responding to lawful requests from authorities.

We do not sell personal data. We do not use it to make decisions about you by automated means alone.

04Legal basis

In India, we process the details you submit on the basis of your consent, given when you fill in a form or message us for a stated purpose, and for the legitimate uses the Digital Personal Data Protection Act permits, such as complying with the law.

For visitors in the European Economic Area and the United Kingdom, we rely on your consent (for non-essential cookies, advertising and marketing messages), on taking steps at your request before entering into a contract (for enquiries and proposals), on our legitimate interests in running, securing and improving the website, and on legal obligations where they apply.

You may withdraw consent at any time by writing to us at the address below. Withdrawal does not affect processing that took place before it.

05Cookies, analytics and advertising

This website uses cookies, browser storage and similar technologies. Some are necessary for the site to work, for example remembering that you have dismissed a pop-up. Others are used for analytics and advertising.

• AnalyticsWe use an analytics service that records visits and on-page interactions against a visitor identifier stored in your browser, so that we can understand how the site is used and match an enquiry to the visit that produced it.
• Google Ads and Google AnalyticsWhen we run campaigns with Google, Google's tags may set cookies and collect identifiers to measure conversions and to show our advertisements to past visitors on Google Search, YouTube and partner sites.
• Meta (Facebook and Instagram)When we run campaigns with Meta, the Meta Pixel or Conversions API may collect identifiers and events, such as a page view or a form submission, to measure results and show our advertisements to past visitors.
• LinkedIn and other platformsIf we advertise on other platforms, their tags may be used in the same way, for measurement and for reaching past visitors.

These platforms act as independent controllers of the data their tags collect and handle it under their own privacy policies. We do not upload customer lists to advertising platforms without consent.

You can control this. You can block or delete cookies in your browser settings; turn off ad personalisation in your Google account at adssettings.google.com and in your Meta account under Ad Preferences; use industry opt-out pages such as youronlinechoices.eu and optout.aboutads.info; and enable your browser's Global Privacy Control or Do Not Track signal. Blocking cookies does not stop you using this website.

06Who we share it with

We share personal data only with service providers that help us run the website and reply to you, and only as far as they need it:

• Hosting and infrastructureThe provider that hosts this website and delivers its pages.
• Form storageThe database service where form submissions are stored.
• SchedulingThe calendar tool used to book calls.
• Analytics and advertisingThe analytics provider and the advertising platforms described above.
• CommunicationEmail, telephone and WhatsApp services we use to reply to you.
• Professional advisers and authoritiesOur accountants, auditors and lawyers where necessary, and public authorities where the law requires it.

These providers are bound by contract or by their own terms to protect the data and to use it only for the service they provide. If our business is merged or sold, enquiry and client records may transfer to the successor, which will remain bound by this policy.

07Transfers outside your country

Some of our service providers store or process data on servers outside India, including in the United States and the European Union. If you are outside India, your data is transferred to India, where we are based.

Where the law requires safeguards for such transfers, we rely on the mechanisms it recognises, including standard contractual clauses for data from the European Economic Area and the United Kingdom. We will follow any restrictions the Government of India notifies on transfers to particular countries.

08How long we keep it

• Enquiries and free-tool requestsUp to 24 months after our last contact with you, unless you become a client or ask us to delete them sooner.
• Client recordsFor the duration of the engagement and afterwards for as long as tax, company and contract law require, generally eight years.
• Analytics and advertising dataUsually no longer than 26 months, in line with the settings of each platform.
• Security logsAt least one year, as Indian law requires.

When a period ends we delete the data or anonymise it so that it no longer identifies you.

09Your rights

Depending on where you live, you have some or all of the following rights:

• AccessTo ask what personal data we hold about you, how we use it and whom we have shared it with.
• CorrectionTo have inaccurate or incomplete data corrected or updated.
• ErasureTo have your data deleted when it is no longer needed or you withdraw consent, unless the law requires us to keep it.
• Withdrawal of consentTo withdraw consent you have given, including for marketing messages and advertising.
• Objection and restrictionFor visitors in the EEA and UK, to object to processing based on legitimate interests, including direct marketing, and to ask us to restrict processing.
• PortabilityFor visitors in the EEA and UK, to receive the data you gave us in a commonly used format.
• NominationUnder Indian law, to nominate another person to exercise your rights in the event of your death or incapacity.
• ComplaintTo complain to us, and if you are not satisfied, to the Data Protection Board of India or to the data protection authority where you live.

To exercise any of these, write to m@drema.in from the email address or phone number you used with us, so that we can confirm it is you. We respond within 30 days.

10Children

This website is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18, and we do not direct advertising at children. If you believe a child has sent us personal data, tell us and we will delete it.

11Security

We use encryption in transit, access controls and reputable service providers to protect personal data. Form submissions are stored in a database that cannot be read through the public website. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you and the relevant authority as the law requires.

12Messages from us

If you submit a form, we reply by email, phone or WhatsApp about that request. We may send occasional follow-ups related to it. You can ask us to stop at any time by replying to the message or writing to the address below, and we will.

13Links to other websites

This website links to other sites, including official sources cited in our articles and our social media pages. We are not responsible for their content or privacy practices; please read their policies.

14Changes to this policy

We may update this policy when our practices or the law change. The effective date at the top shows the latest version. If a change materially affects how we use data you have already given us, we will tell you where we reasonably can.