TarsX

TARSX PRIVACY POLICY


Document: TarsX Privacy Policy v2 Status: Ready to deploy to tarsx.ai/privacypolicy Effective

Date: [Date of deployment] Last Updated: Thursday, May 21, 2026

TarsX - Transformative Artificial Intelligence Reasoning Systems X LLP (“TarsX,” “we,” “our,”

“us”) is committed to protecting your privacy. Headquartered in Erode, Tamil Nadu, India,

TarsX safeguards your Personal Data in compliance with India’s Digital Personal Data

Protection Act, 2023 (DPDP Act), the EU General Data Protection Regulation (GDPR), the

California Consumer Privacy Act (CCPA), Brazil’s Lei Geral de Proteção de Dados (LGPD), and

the UAE Personal Data Protection Law (PDPL). This Privacy Policy explains how we collect, use,

and protect your data, your rights, and how to contact us.


DATA CONTROLLER

TarsX - Transformative Artificial Intelligence Reasoning Systems X LLP

Registered Office: Erode, Tamil Nadu, India

Email: support@tarsx.ai

Phone: +91 909 261 6060


PERSONAL DATA WE COLLECT

TarsX collects the following Personal Data, directly from you or through services you engage

with:

• Identifiers: Email address, first name, last name, phone number

• Commercial Information: Payment details and business information

• Internet Information: Usage data, cookies, service interaction data

• Inferred Information: Data derived for analytics or service improvement

Mandatory data is required to provide our services; optional data may be withheld without

affecting core service delivery. You are responsible for obtaining appropriate consent for any

third-party data shared with us.


HOW WE PROCESS YOUR DATA

TarsX processes Personal Data with robust security measures, including encryption in transit

and at rest, access controls, and regular security reviews, in compliance with DPDP Act, GDPR,

CCPA, LGPD, and UAE PDPL. Access to Personal Data is restricted to authorized personnel and

to service providers operating under appropriate data protection agreements.


LEGAL BASIS FOR PROCESSING

We process Personal Data based on:

• Your explicit consent, as required by DPDP Act, GDPR, LGPD, and UAE PDPL

• Contractual necessity or pre-contractual obligations

• Legal obligations under Indian, US, EU, Brazilian, or UAE law

• Legitimate interests, provided your rights are not overridden


TECHNOLOGY AND SERVICE PROVIDERS

TarsX uses leading AI providers including Anthropic, OpenAI, xAI, and others to deliver AI

capabilities as part of our services. Our services are delivered through TarsX’s proprietary

technology infrastructure, supplemented by select third-party service providers operating

under appropriate data protection agreements. All providers are bound by confidentiality and

security obligations consistent with applicable data protection laws.

Users may contact support@tarsx.ai for additional information about our technology providers

and data handling practices.


WHERE WE PROCESS DATA

Data is processed primarily in India and through cloud infrastructure that may be located in

multiple jurisdictions. International transfers comply with applicable data protection

requirements including DPDP Act, GDPR, LGPD, CCPA, and UAE PDPL using safeguards such as

standard contractual clauses.


DATA RETENTION

We retain Personal Data only as necessary:

• Contract-related data: until contract fulfillment plus required legal retention periods

• Legitimate interest data: until the purpose is achieved

• Consent-based data: until consent is withdrawn

• Legally required data: as mandated by applicable laws

Post-retention, data is securely deleted in accordance with our data deletion procedures.


PURPOSES OF PROCESSING

TarsX processes Personal Data to:

• Deliver and improve our AI-powered business operations services

• Comply with legal and regulatory obligations

• Respond to enforcement requests and protect our legal rights

• Prevent fraud, security incidents, or malicious activity

• Enable communication, payments, and service delivery

• Conduct analytics to improve service quality


ADDITIONAL THIRD-PARTY SERVICES

TarsX may use additional third-party services for specific functions including but not limited

to:

• Cloud hosting and infrastructure

• Communication services (email, messaging)

• Analytics and service improvement

• Payment processing

• Authentication and security

These services operate under their own privacy policies and are selected for their commitment

to data protection standards.


YOUR RIGHTS

You have the right to:

• Withdraw consent at any time

• Object to processing, including direct marketing

• Access your data and processing details

• Rectify inaccurate data

• Restrict processing in certain cases

• Request deletion, subject to legal exceptions

• Receive portable, machine-readable data, where feasible

• Lodge complaints with a data protection authority

Submit requests to support@tarsx.ai. We respond within 30 days (15 days for LGPD access

requests), free of charge unless excessive.


COOKIES

TarsX uses cookies and similar technologies to enhance service delivery and analyze usage. You

can control cookie preferences through your browser settings.


SECURITY MEASURES

TarsX employs industry-standard security measures including:

• Encryption in transit and at rest

• Strict access controls and authentication

• Regular security reviews

• Staff training on data protection

• Vendor risk management

In the event of a data breach, we notify affected users and relevant authorities promptly, as

required by applicable law and within seventy-two (72) hours where applicable.


DISPUTE RESOLUTION

Disputes arising under this Privacy Policy or relating to our services shall be resolved through

arbitration administered by the Singapore International Arbitration Centre (SIAC) under the

SIAC Rules. The seat of arbitration shall be Singapore, with proceedings conducted in English.


GOVERNING LAW

This Privacy Policy is governed by the laws of the Republic of Singapore, without regard to

conflict of laws provisions, except where mandatory provisions of Indian law, or the law of the

jurisdiction where you are located, apply.


CALIFORNIA CONSUMER PRIVACY RIGHTS

California residents have additional rights under the CCPA:

• Right to know what Personal Information is collected, used, sold, or shared

• Right to delete Personal Information collected from you

• Right to opt-out of the sale or sharing of Personal Information

• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact support@tarsx.ai. We respond within 45 days (extendable to

90 days with notice).


BRAZILIAN USERS (LGPD)

Brazilian users have rights under the LGPD including confirmation of processing, access,

rectification, anonymization, deletion, portability, consent revocation, complaints to ANPD, and

review of automated decisions. Submit requests to support@tarsx.ai.


UAE USERS (PDPL)

UAE users have rights under the PDPL including access, rectification, deletion, restriction of

processing, data portability, and complaints to the UAE Data Office. Submit requests to

support@tarsx.ai.


POLICY UPDATES

We may update this Privacy Policy from time to time. Material changes will be communicated

through our website or by email. Continued use of our services after updates indicates

acceptance of the revised policy. For clients with active Master Services Agreements, the

Privacy Policy in effect at the date of the Master Services Agreement governs the engagement

unless the client consents to updates.


CONTACT

For any questions or to exercise your rights:

Email: support@tarsx.aiPhone: +91 909 261 6060

Website: tarsx.ai

© 2026 TarsX - Transformative Artificial Intelligence Reasoning Systems X LLP. All rights

reserved.

TarsX

Social Media

Privacy Policy

Terms of Conditions

All rights reserved.