Legal
Privacy policy
A privacy-first company should have a privacy-first website. This page explains — completely — what this site does and does not do with data.
Effective date: to be set at legal review.
Who we are
NIKITRIA ("we", "us") is a stealth-stage company based in Hyderabad, India, building a local-first AI platform. For this website, NIKITRIA is the data fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the data controller under the EU General Data Protection Regulation (GDPR), to the extent those laws apply. Privacy requests can be emailed to nikitria.admin@gmail.com.
The short version
- This site sets no cookies of any kind, so there is no cookie banner.
- It runs no analytics, no tracking pixels, and no fingerprinting.
- It loads nothing from third-party CDNs — fonts, scripts, styles, and video are all served with the site itself.
- The only personal data we ever receive is what you type into a form and submit.
What we collect, and when
Browsing: nothing. Visiting this site does not create an account, set an identifier, or send data to us. Our hosting provider (a static-site CDN) may keep short-lived, aggregate server logs (such as IP address, user agent, and requested URL) to operate and secure the service; we do not use these logs to identify visitors.
Forms: if you submit the investor form or the design-partner form, we receive exactly the fields shown on the form — such as your name, work email, organization, and anything you write in the message. Submitting a form is voluntary and is the only way this site collects personal data from you.
Theme preference: if you use the light/dark toggle, your choice is stored in your browser's local storage on your device. It never leaves your device and we cannot read it remotely. It is not a cookie and is not used for tracking; you can clear it at any time via your browser settings.
Why we process form data, and on what legal basis
We use form submissions for one purpose: to respond to you — sending the investor deck, arranging a meeting, or following up about design partnership. We do not add you to marketing lists, and we do not sell or share personal data for advertising.
Under the DPDP Act, we process this data on the basis of your consent, given when you submit the form for the stated purpose. Under the GDPR, the legal bases are your consent (Art. 6(1)(a)) and our legitimate interest in responding to inbound business enquiries you initiate (Art. 6(1)(f)).
Who processes it for us
Form submissions are stored directly in NIKITRIA's own database: Google Cloud Firestore, part of the Firebase platform that also serves this site (Firebase Hosting). No third-party form-processing service receives your data — Google acts solely as our infrastructure provider and processor under its Cloud data-processing terms.
The database region is asia-south1 (Mumbai, India), so form submissions are stored in India. Google may route requests through global infrastructure with the safeguards it documents. We deliberately minimize what is ever held: only what you type into a form, plus the submission time.
How long we keep it
We keep form submissions only as long as needed for the conversation you started — and delete them when the purpose is served or when you ask, whichever comes first. Specific retention periods will be finalized at legal review.
Your rights
Under the DPDP Act you have the right to access a summary of your personal data, request correction and erasure, nominate a representative, and raise a grievance — first with us, then with the Data Protection Board of India.
Under the GDPR you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting prior processing. You may also lodge a complaint with a supervisory authority.
To exercise any of these rights, email nikitria.admin@gmail.com or use the forms on the contact page.
Children
This site is addressed to investors, organizations, and institutions, not to children, and we do not knowingly collect children's data.
Changes to this policy
If the site's data practices change — for example, if we later enable cookie-free, aggregate analytics — this policy will be updated first, with the effective date shown at the top.