Privacy Policy

This Privacy Policy explains how Rocket Media Technologies Private Limited ("Company", "we", "us"), operating as AI Wonderland, collects, uses, stores, and protects personal data when you interact with our website at aiwonderland.co and our Services.

We are committed to protecting your privacy in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable international data protection regulations.

1. Data Controller

Rocket Media Technologies Private Limited
Registered Office: New Delhi, India
Email: connect@aiwonderland.co

2. What Data We Collect

We collect different categories of data depending on how you interact with us:

2.1 Website Visitors (All Users)

• Browser type, device information, and operating system.
• IP address and approximate geographic location.
• Pages visited, time spent, and referral source.
• Cookie data (see our Cookie Policy).

2.2 Enterprise Clients

• Contact information: name, email, phone number, job title, company name.
• Business information shared during assessments, workshops, and consulting engagements.
• Communication records: emails, meeting notes, project documentation.
• Payment information: billing details, transaction records.

2.3 Job Candidates

• Personal information: name, email address, phone number.
• Professional information: resume/CV, work experience, education, skills.
• Interview notes and assessment results.
• Screening responses and availability information.
• Video or audio introductions (when submitted as part of the application).

2.4 Expert Network Members

• Personal information: name, email, phone number.
• Professional profile: skills, experience, portfolio, domain expertise.
• Show and Tell video submissions and project walkthroughs.
• Availability and engagement preferences.
• Payment information: bank details for engagement compensation.
• Performance records from completed engagements.

3. How We Use Your Data

We process personal data only for specific, legitimate purposes:

• Service delivery: To provide consulting, recruitment, workshop, and automation services you have requested.
• Communication: To respond to inquiries, send engagement updates, and share relevant information about our services.
• Talent matching: To match candidates with job opportunities and experts with project engagements.
• Payment processing: To process payments for our services and compensate experts for completed work.
• Website improvement: To analyze usage patterns and improve website functionality and user experience.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

4. Consent and Legal Basis

Under the DPDP Act, 2023, we process your personal data based on:

• Consent: For collecting and processing data you voluntarily provide through forms, applications, and direct communication.
• Contractual necessity: For processing data required to fulfill our service commitments to clients, candidates, and experts.
• Legitimate interest: For website analytics and improving our services, where such processing does not override your fundamental rights.
• Legal obligation: For complying with Indian tax, employment, and data protection laws.

5. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

• Candidates: Candidate profiles are shared with hiring companies only after obtaining explicit, per-company consent from the candidate.
• Experts: Expert profiles are shared with enterprise clients only after obtaining explicit consent from the expert for each specific engagement opportunity.
• Service providers: We use third-party processors for hosting, email delivery, analytics, and payment processing. These providers are contractually bound to protect your data.
• Legal requirements: We may disclose data when required by law, regulation, or court order.

6. Data Retention

• Website analytics data: Retained for 26 months, then automatically deleted.
• Client engagement data: Retained for the duration of the engagement plus 5 years for legal and tax compliance.
• Candidate data: Candidate profiles, resumes, and assessment data are retained indefinitely to facilitate long-term career matching and future opportunities within our network, unless a candidate explicitly requests deletion.
• Expert network data: Retained for the duration of network membership plus 12 months. Payment records are retained for 7 years as required by Indian tax law.
• Contact form submissions: Retained for 24 months from the date of submission.

7. Your Rights

Under the DPDP Act, 2023, you have the right to:

• Access: Request a summary of the personal data we hold about you and how it is being processed.
• Correction: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Grievance redressal: File a complaint if you believe your data rights have been violated.
• Nominate: Nominate another individual to exercise your data rights in the event of your death or incapacity.

To exercise any of these rights, contact us at connect@aiwonderland.co. We will respond within 30 days of receiving your request.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission (TLS/SSL).
• Access controls and authentication for all internal systems.
• Regular security reviews of our infrastructure and processes.
• Confidentiality agreements with all employees and contractors who access personal data.

9. AI Processing Disclosure

We use AI tools in certain aspects of our operations:

• Candidate screening: AI may assist in initial resume analysis and skill matching. All AI-assisted decisions are subject to human review before any action is taken.
• Expert matching: AI may assist in matching expert profiles to project requirements. Final matching decisions are made by our team.
• Communication: AI tools may assist in drafting and summarizing communications. All client-facing communications are reviewed by humans.

We do not use your personal data to train any AI models.

10. Cross-Border Data Transfers

Your data is primarily stored and processed in India. If we transfer data outside India (for example, when using cloud service providers with servers in other jurisdictions), we ensure that adequate safeguards are in place as required by the DPDP Act, 2023.

If you are accessing our services from outside India, please note that your data will be transferred to and processed in India.

11. International Users

If you are located in the European Union, we process your data in compliance with the General Data Protection Regulation (GDPR) to the extent applicable. If you are located in the United States, we comply with applicable state data protection laws including the California Consumer Privacy Act (CCPA) where applicable.

12. Children's Data

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For material changes affecting how we process your data, we will make reasonable efforts to notify you via email or prominent notice on the Website.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the Grievance Officer for data protection matters is:

Rocket Media Technologies Private Limited
New Delhi, India
Email: connect@aiwonderland.co
Response time: Within 30 days of receipt of complaint.

15. Contact

For any questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: connect@aiwonderland.co