PRIVACY POLICY
Last Updated: 13 May 2026
Argenbright Innovation Lab India Private Limited ("Abrightlab", "we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you visit abrightlab.com (the "Website"), use our services, apply for a job with us, or otherwise interact with us.
If you do not agree with this Privacy Policy, please do not use the Website or our services.
1. Who We Are
The data controller responsible for your personal data is:
-
Argenbright Innovation Lab India Private Limited (operating as "Abrightlab")
-
Registered office: 2nd Floor, The Gateway By UKn, Nallurahalli Main Rd, Brookefield, Bengaluru, Karnataka, India 560066
-
US affiliate: Argenbright Innovation Labs, LLC – 950 East Paces Ferry Rd NE, Suite 2000, Atlanta, GA 30326, USA
2. Information We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
2.1 Contact Information
Full name, email address, phone number, city, state/region, postal code, and any information you include when you contact us.
2.2 Account Information
If you register for an account, we collect your name, email, phone number, and an account password.
2.3 Business Data
Information about employees, owners, directors, officers, or contractors of third-party organizations with whom we conduct business.
2.4 Job Applicant Information
If you apply for a position with us, we collect your CV/resume, education history, employment history, references, background-check information (where lawful), and other data relevant to assessing your application.
2.5 Transaction and Payment Information
Payments are processed by third-party payment processors. We do not store full payment card numbers on our systems. We may retain limited transaction metadata (e.g., last four digits, transaction ID, billing address).
2.6 Marketing and Communications Data
Your preferences in receiving marketing from us, your communication preferences, and a record of your interactions with our marketing content.
2.7 Usage and Device Data
IP address, browser type and version, time zone setting, device identifiers, operating system, referring URLs, pages visited, and the dates/times of your visits.
2.8 Images, Video, Audio, and Biometric Data
Where you participate in events, recorded meetings, or facility access systems, we may collect photographs, video, audio recordings, and (where lawful and with appropriate notice) biometric identifiers.
3. Sources of Information
We collect personal data from the following sources:
-
Directly from you (forms, account registration, applications, correspondence)
-
Automatically when you use the Website (cookies, log files, analytics)
-
From third parties such as recruitment agencies, background-check providers, referrers, and business partners
-
From publicly available sources (e.g., professional networking sites, public registries)
4. How We Use Your Information
We use personal data for the following purposes:
-
To provide, operate, and maintain the Website and our services
-
To create and manage user accounts
-
To process transactions and deliver products or services you have requested
-
To evaluate job applications and conduct recruitment
-
To send service communications, updates, and security alerts
-
To send marketing communications, where permitted by law and subject to your preferences
-
To improve and develop the Website, our services, and our marketing
-
To detect, prevent, and respond to fraud, abuse, and security incidents
-
To comply with legal obligations and enforce our Terms of Service
5. Legal Bases for Processing (EEA / UK)
If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR/UK GDPR:
-
Contract: to provide services you have requested and to take steps prior to entering into a contract.
-
Legitimate interests: to run and improve our business, secure our systems, and market to existing customers — balanced against your rights and interests.
-
Consent: for marketing to new prospects, non-essential cookies, and other processing that requires consent. You can withdraw consent at any time.
-
Legal obligation: to comply with tax, accounting, employment, and other legal requirements.
6. How We Share Your Information
We may share personal data with the following categories of recipients:
-
Affiliates: other entities within the Argenbright group of companies, including Argenbright Innovation Labs, LLC (USA).
-
Service providers and processors: hosting providers, IT and security vendors, payment processors, analytics providers, recruitment platforms, and communications providers — each bound by appropriate confidentiality and data-protection obligations.
-
Professional advisors: lawyers, accountants, auditors, and insurers.
-
Authorities: regulators, law enforcement, and other public authorities where required by law or to protect our rights.
-
Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction.
We do not sell your personal data, and we do not share it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).
7. Cookies and Tracking Technologies
We use cookies, log files, web beacons, pixels, and similar technologies to operate the Website, remember your preferences, analyze usage, and (where permitted) deliver marketing.
Categories of cookies we use:
-
Strictly necessary: required for the Website to function (e.g., session, security).
-
Analytics: help us understand how visitors use the Website (e.g., Google Analytics).
-
Functional: remember your preferences and choices.
-
Marketing: used with your consent to measure and deliver advertising.
You can control non-essential cookies through our cookie banner or your browser settings. Disabling cookies may affect Website functionality.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Indicative retention periods:
-
Account data: for the life of your account, plus 180 days after account closure
-
Transaction records: as required by applicable tax and accounting laws (typically 7 years)
-
Job applicant data: up to 2 years after the conclusion of the recruitment process, unless you ask us to keep your details on file longer or you join us
-
Marketing data: until you opt out or after 24 months of inactivity
-
Website logs and analytics: typically 13 months
When personal data is no longer required, we delete or anonymize it.
9. Data Security
We implement administrative, technical, and physical safeguards designed to protect personal data, including access controls, encryption in transit, secure software development practices, and regular review of our security posture. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security.
If you discover or suspect a security issue, please contact our Data Protection Officer immediately using the details in Section 14.
10. International Data Transfers
We operate internationally and your personal data may be transferred to, stored in, or processed in countries other than the one in which you reside, including India and the United States, where data-protection laws may differ from those in your country.
Where we transfer personal data out of the EEA, UK, or other jurisdictions that restrict cross-border transfers, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms. You may request a copy of the safeguards in place by contacting our Data Protection Officer.
11. Your Privacy Rights
Subject to applicable law, you may have the following rights in relation to your personal data:
-
Right of access – to obtain a copy of the personal data we hold about you
-
Right to rectification – to correct inaccurate or incomplete data
-
Right to erasure ("right to be forgotten") – in certain circumstances
-
Right to restrict processing – in certain circumstances
-
Right to data portability – to receive your data in a structured, machine-readable format
-
Right to object – including to processing based on legitimate interests and to direct marketing
-
Right to withdraw consent – where processing is based on consent
-
Right not to be subject to a decision based solely on automated processing that produces legal effects
-
Right to nominate – under India's DPDP Act, to nominate another individual to exercise your rights in the event of your death or incapacity
To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond within the timeframes required by applicable law.
12. California Privacy Rights
California residents have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know, the right to delete, the right to correct, and the right to limit the use of sensitive personal information.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA. You may exercise your California rights by contacting our Data Protection Officer.
13. Children's Privacy
The Website and our services are not directed to children under the age of 16 (or such other age as required by applicable law). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete that information.
14. Data Protection Officer (DPO) / Contact Us
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy, the processing of your personal data, or your privacy rights, please contact our Data Protection Officer:
Data Protection Officer: Vineeth Vijayan
Company: Argenbright Innovation Lab India Private Limited
Email: privacy@abrightlab.com
Postal address: 2nd Floor, The Gateway By UKn, Nallurahalli Main Rd, Brookefield, Bengaluru, Karnataka, India 560066
The DPO is responsible for overseeing data privacy and protection matters, handling privacy-related requests, and ensuring compliance with applicable data-protection laws and regulations.
15. Complaints and Supervisory Authorities
If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the data-protection authority in your country of residence. For users in India, this is the Data Protection Board of India. For users in the EEA or UK, it is your national supervisory authority (e.g., the UK ICO).
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will alert you to material changes by updating the "Last Updated" date at the top of this Policy and, where appropriate, by additional notice (e.g., email or a banner on the Website). Your continued use of the Website after the updated Policy takes effect constitutes your acceptance of the changes.
© 2026 Argenbright Innovations Lab, an Argenbright Holdings Company
