TarsX Privacy Policy

TarsX - Transformative Artificial Intelligence Reasoning Systems X LLP

TarsX, a global leader in AI-powered solutions for small and medium-sized businesses, is committed to protecting your privacy. Headquartered in Erode, Tamil Nadu, India, with planned expansions to New York, USA, and Dubai, UAE, TarsX safeguards your Personal Data in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), EU GDPR, California CCPA, Brazil LGPD, and UAE PDPL. This policy explains how we collect, use, and protect your data, your rights, and how to contact us.

Data Controller

TarsX - Transformative Artificial Intelligence Reasoning Systems X LLP

Erode, Tamil Nadu, India

Email: support@tarsx.ai

Phone: +91 909 261 6060

Personal Data We Collect

TarsX collects the following Personal Data, directly from you or through third-party services:

• Identifiers: Email address, first name, last name, phone number.
• Commercial Information: Payment details.
• Internet Information: Usage data, trackers (e.g., cookies), service interaction data.
• Inferred Information: Data derived for analytics or advertising.

Mandatory data is required to provide our services; optional data may be withheld without impact. For details on cookies, see our Cookie Policy. You are responsible for obtaining consent for any third-party data shared with us.

How We Process Your Data

TarsX processes Personal Data with robust security measures, including end-to-end encryption, access controls, and ISO 27001-aligned audits, in compliance with DPDP Act, GDPR, LGPD, CCPA, and UAE PDPL. Access is restricted to authorized personnel and third-party Data Processors under strict confidentiality agreements. To request a list of processors, contact support@tarsx.ai.

Legal Basis for Processing

We process Personal Data based on:

• Your explicit consent, as required by DPDP Act, GDPR, LGPD, and UAE PDPL.
• Contractual necessity or pre-contractual obligations.
• Legal obligations under Indian, U.S., Brazilian, or UAE law.
• Legitimate interests, provided your rights are not overridden.

Where We Process Data

Data is processed in Erode, India, and, upon expansion, potentially New York, USA, and Dubai, UAE, as well as through third-party platform infrastructure under TarsX’s branded domain. International transfers comply with DPDP Act, GDPR, LGPD, CCPA, and UAE PDPL using safeguards like standard contractual clauses.

Data Retention

We retain Personal Data only as necessary:

• Contract-related data: until contract fulfillment.
• Legitimate interest data: until purpose is achieved.
• Consent-based data: until consent is withdrawn.
• Legally required data: as mandated by applicable laws.

Post-retention, data is securely deleted.

Purposes of Processing

TarsX processes Personal Data to:

• Deliver and improve services (e.g., AI chatbots, social media, digital marketing).
• Comply with legal obligations.
• Respond to enforcement requests.
• Protect our rights and interests.
• Prevent fraud or malicious activity.
• Enable third-party account access, analytics, communication, payments, advertising, registration, and live chat.

Third-Party Services

TarsX uses third-party platforms to deliver core services (e.g., chatbot hosting, analytics) and additional services, all under strict compliance:

Platform Providers

We use third-party platforms under our branded domain, acting as Data Processors bound by confidentiality agreements, to ensure seamless service delivery.

Google API Services

TarsX complies with Google API Services User Data Policy. Google Sheets and Calendar support data management and scheduling, with data restricted to stated purposes.

Meta Platforms

We request Meta permissions for social media management, including basic information, contact email, Instagram management, and page management. See Meta’s Privacy Policy.

Other Services

• Advertising: Google Ad Manager, Meta Lookalike Audience (opt out: Google, Meta).
• Analytics: Google Analytics, Meta Ads Conversion Tracking.
• Payments: Razorpay (Privacy Policy).
• Hosting: Google Cloud Storage/App Engine.
• Live Chat: Meta Messenger Customer Chat.
• Registration/Authentication: Google OAuth, Meta Authentication.
• Remarketing: Meta Custom Audience, Google Ads, LinkedIn (Privacy Policy), Twitter (Privacy Policy).
• Tag Management: Google Tag Manager.

Your Rights

You have the right to:

• Withdraw consent at any time.
• Object to processing, especially direct marketing.
• Access your data and processing details.
• Rectify inaccurate data.
• Restrict processing in certain cases.
• Request deletion, subject to legal exceptions.
• Receive portable, machine-readable data, if feasible.
• Lodge complaints with a data protection authority (e.g., India, EU, Brazil, UAE).

Submit requests to support@tarsx.ai. We respond within 30 days (15 days for LGPD access), free of charge unless excessive.

Cookie Policy

TarsX uses trackers (e.g., cookies) to enhance services. Details are in our Cookie Policy.

Security Measures

TarsX employs scalable, industry-leading security, including:

• End-to-end encryption.
• Strict access controls and multi-factor authentication.
• ISO 27001-aligned audits.
• Staff training on data protection.
• Trusted third-party processors.

In case of a breach, we notify users and authorities promptly, as required by law.

Dispute Resolution and Limitation of Liability

Disputes are resolved through binding arbitration in Erode, India, under the Arbitration and Conciliation Act, 1996, or, upon expansion, in New York, USA (American Arbitration Association) or Dubai, UAE (Dubai International Arbitration Centre). Legal actions must be filed in Erode, New York, or Dubai courts, as applicable. TarsX’s liability, including for third-party platform issues, is limited to fees paid by you.

Governing Law

This policy is governed by Indian law, with U.S. or UAE law applicable upon expansion to New York or Dubai.

Severability

If any provision is invalid, the remaining provisions remain enforceable.

Additional Information

• Legal Action: Data may be used to defend against service misuse.
• System Logs: We collect logs (e.g., IP addresses) for security.
• Third-Party Tools: You control data shared with tools (e.g., AI models, APIs).
• Do Not Track: Not supported; see third-party policies.
• Updates: Posted at tarsx.ai. Last update: May 5, 2025. Consent-based changes require new consent.

Information for Californian Consumers

Categories of Personal Information

TarsX collects:

• Identifiers (email, names, phone).
• Commercial information (payment details).
• Internet information (usage data, trackers).
• Inferred information (behavioral data).

Collection Methods

Data is collected directly (e.g., forms), indirectly (e.g., browsing), or via third parties.

Use and Sharing

We disclose data for business purposes under confidentiality agreements or with consent. Some processing (e.g., advertising) is a CCPA “sale.”

Your Rights

You may:

• Know data categories, sources, purposes, recipients.
• Access sold/disclosed data lists.
• Request deletion, subject to exceptions.
• Opt out of sales at /opt-out.

Exercising Rights

Submit requests to support@tarsx.ai. We respond within 45 days (up to 90 with notice), free unless excessive. No discrimination for exercising rights.

Information for Brazilian Users

Legal Bases

TarsX processes data based on:

• Consent.
• Legal obligations.
• Contracts, research, rights, safety, interests, credit protection.

Your Rights

You may:

• Confirm processing.
• Access, rectify, anonymize, delete data.
• Know consent implications, third-party sharing.
• Request portability.
• Revoke consent, complain to ANPD, review automated decisions.

Request Process

Submit requests to support@tarsx.ai. We respond within 15 days for access, promptly for others.

International Transfers

Data may be transferred outside Brazil for legal, safety, or contract purposes, or with ANPD authorization.

© 2025 TarsX - Transformative Artificial Intelligence Reasoning Systems X LLP

Contact: support@tarsx.ai | +91 909 261 6060

All rights reserved.