Summary
When you send an enquiry through this website, Bibha uses your work email, company, workflow description and, if you give it, your name to reply to you and discuss the work you describe. Only the Bibha team that responds to enquiries reads them. Our hosting and email providers handle them for us, and we share them beyond that only with professional advisers or where the law requires. If no work follows, we delete them 12 months after our last contact with you.
We do not use these details for marketing emails, and we do not sell personal information or share it for advertising.
The Bibha website uses Google Analytics and the Calendly booking calendar only if you allow them. It also receives basic technical information, such as your IP address, to run the site and keep it secure. You can change your choices at any time using Cookie settings at the bottom of every page.
This policy also explains your rights under the GDPR, the UK GDPR, Swiss law, India's Digital Personal Data Protection Act 2023 and US state privacy laws. To make a request or ask a question, email privacy@bibha.ai.
Who we are
This website is operated by Bibha AI Labs Private Limited (CIN U62099KA2024PTC193869), Villa 92, JRC Palladio, Attibele Road, Billapura, Sarjapura, Anekal, Bangalore 562125, Karnataka, India, the headquarters of the Bibha group. Bibha AI Labs Private Limited is the controller of the personal information described in this policy under the GDPR and UK GDPR, and the Data Fiduciary under India's Digital Personal Data Protection Act 2023.
Bibha AI Inc., 3790 El Camino Real, Ste 853, Palo Alto, CA 94306, United States, is our US affiliate and the contact point for residents of the United States.
In this policy, "Bibha", "we" and "us" mean Bibha AI Labs Private Limited and Bibha AI Inc. Both follow this policy whenever they handle the personal information it describes.
Our Data Protection Officer, who is also our Grievance Officer under India's data protection law, is Prashant Kumar. You can contact him at privacy@bibha.ai or dpo@bibha.ai.
You can contact our representatives in the European Union and the United Kingdom at dpo@bibha.ai about any matter covered by this policy.
What this policy covers
This policy covers the Bibha website at bibha.ai, including its enquiry form, meeting booking, analytics and cookie settings.
It does not cover the Bibha platform, the services we deliver for customers, or our products TalentFlow, ReachFar and PeachDesk. When you use those, the privacy notice for that product or the agreement between Bibha and your organisation applies.
When you follow a link to another website, including our product websites, that website's own privacy policy applies.
Our terms of use explain the rules for using this website, and our cookie policy lists the cookies and browser storage it uses.
What we collect and why
When you send an enquiry
The enquiry form asks for your work email address, your company and a description of the workflow you want AI to handle. Your name is optional.
We use these details to reply to you, understand the work you describe and arrange any conversation or demonstration that follows. We do not use them for marketing emails, and the website has no newsletter or marketing sign-up.
People at Bibha read enquiries. We do not use AI systems to process enquiry content, and we do not use it to train AI models.
Please leave confidential business information, and personal information about other people such as customers or job candidates, out of your description. If we need more detail, we can ask for it later in the right setting.
When you book a meeting
Before you pick a time, Bibha asks for your full name, work email, company website, whether you are enquiring for your business or about a partnership, and an optional phone number. These details stay in page memory while the booking window is open. Bibha does not save them in browser storage or send them to website analytics.
The booking calendar is provided by Calendly and loads only when booking is allowed in Cookie settings. When it loads, your browser connects directly to Calendly and sends technical information, such as your IP address and browser type, together with the details you entered, so the booking form is filled in for you. Accept optional cookies allows both website analytics and booking, and you can change either choice on its own in Cookie settings.
Calendly collects the booking details and the time you choose, arranges the meeting and shares the booking with Bibha so we can prepare for it and hold it. Calendly may use its own performance and marketing cookies. Bibha asks for your consent to them in Cookie settings, so Calendly's own cookie banner does not appear in the calendar. Calendly's privacy notice explains how it handles your information and its cookies.
Calendly privacy notice (external site)
When you visit the website
Each time you load a page or send a form, your browser sends our servers technical information. This includes your IP address, the date and time, the page requested, your browser and device type, and the page that referred you.
We use this information to deliver the website, keep it secure, find and fix faults, limit repeated form submissions and block automated abuse. We do not record the content of your enquiry in these logs.
Analytics, only if you allow it
If you allow analytics, we use Google Analytics 4 to understand how visitors use the website, such as which pages are visited. Google Analytics sets cookies in your browser to tell one visit from another.
When analytics is on, Google receives the address of each page you view, without any query string or fragment, the page title, a record when an enquiry is sent (never what you typed), browser and device information, and approximate location. Like every request your browser makes, these requests also carry your IP address. Google states that, when collecting data, Google Analytics does not log or store IP addresses from users in the European Union, Switzerland or the United Kingdom. Google Analytics is provided by Google.
How Google Analytics handles data from the EU, Switzerland and the UK (external site)
Bibha website analytics is off until you allow it. Bibha does not load Google Analytics before you choose, and it stays off if you reject it. If you later withdraw your consent, analytics stops and the website removes its analytics cookies.
We have switched off Google signals, advertising features and ads personalisation. We do not send your name, email address, company or enquiry text to Google Analytics.
You can change your choice at any time using Cookie settings at the bottom of every page. Our cookie policy lists the cookies and storage the website uses.
Your cookie choices
The website stores your analytics and booking choices in your browser so it can respect them on every page. This storage is strictly necessary and does not identify you.
Information you do not have to give
You can browse this website without giving us any personal information beyond the technical information every browser sends. To reply to an enquiry, we need your work email, company and workflow description. To arrange a meeting, we need your name, work email and company website.
Our legal bases
Where the GDPR or UK GDPR applies, we need a legal basis for each use of personal information. We rely on these:
| Purpose | Information used | Legal basis |
|---|---|---|
| Reply to your enquiry and discuss working together | Enquiry details | Legitimate interests (Article 6(1)(f)): responding to the business enquiries people send us |
| Prepare for and hold a meeting you book | Booking details Calendly shares with us | Legitimate interests (Article 6(1)(f)): holding the meetings people ask for |
| Load the Calendly booking calendar | Technical information and the details you entered | Consent (Article 6(1)(a)), which you give in Cookie settings |
| Measure how the website is used | Analytics information | Consent (Article 6(1)(a)), which you give in Cookie settings |
| Deliver the website, keep it secure and prevent abuse | Technical information and server logs | Legitimate interests (Article 6(1)(f)): running a secure and reliable website |
| Remember your cookie choices | Your consent record | Legitimate interests (Article 6(1)(f)): respecting the choices you make |
| Meet legal obligations and protect our legal rights | Any of the above, where needed | Legal obligation (Article 6(1)(c)), and legitimate interests in establishing, exercising or defending legal claims (Article 6(1)(f)) |
For cookies and similar browser storage, the ePrivacy Directive and the UK Privacy and Electronic Communications Regulations require consent unless the storage is strictly necessary, subject to limited exceptions. That is why analytics and the booking calendar wait for your choice, while your cookie choice itself is stored without asking.
You can withdraw consent at any time in Cookie settings. Withdrawing does not affect processing that took place before you did. Where we rely on legitimate interests, you have the right to object, as explained under "Your rights".
Indian and US state laws use different concepts. The sections on your rights in India and in the United States explain how those laws apply.
Who receives your information
We share personal information only with the organisations that help us run the website and handle enquiries, and only for those purposes:
| Recipient | What they do | When |
|---|---|---|
| Our website hosting provider | Hosts the website, processes form submissions and keeps server and security logs | Every time you use the website |
| Google, through Google Workspace | Delivers enquiries to the Bibha mailbox, info@bibha.ai, read by the team that responds to them | When you send an enquiry |
| Google, for Google Analytics 4 | Measures how the website is used | Only if you allow analytics |
| Calendly, for meeting booking | Provides the booking calendar and arranges the meeting you book | Only if you allow booking and open the calendar |
Our hosting and email providers process information for us under contracts that require them to protect it. Google and Calendly also publish their own privacy information. A list of the service providers that process personal information for this website is available on request at privacy@bibha.ai.
Bibha AI Inc. receives personal information covered by this policy only where it needs it to respond to you, for example to handle a privacy request from a US resident.
Within Bibha, your enquiry can be seen only by the people who need it to reply and to plan any work that follows.
We may also share information with our professional advisers, such as lawyers and auditors, or where the law requires it, for example to comply with a court order.
If Bibha is involved in a merger, acquisition, reorganisation or sale of assets, personal information may be transferred to the organisation that takes over. We will tell you about any such change and the choices available to you.
We do not sell personal information or share it for advertising.
International transfers
Bibha AI Labs Private Limited is based in India, and our providers may process information in other countries, including the United States. Your information may therefore be processed outside the country where you live, including outside the European Economic Area, Switzerland and the United Kingdom.
Where data protection law treats this as a transfer, we use the safeguards it requires: standard contractual clauses approved by the European Commission; for the United Kingdom, the UK International Data Transfer Agreement or the UK Addendum to those clauses; and for Switzerland, those clauses with the adaptations Swiss law requires.
Indian law allows personal data to be transferred outside India, except to countries the Government of India restricts. We follow any such restriction.
You can ask us for a copy of these safeguards at privacy@bibha.ai.
How long we keep information
| Information | How long we keep it |
|---|---|
| Enquiries | If no work follows, 12 months after our last contact with you about the enquiry. If your enquiry leads to work together, the agreement for that work sets how long related information is kept. |
| Meeting bookings | Calendly keeps booking details under its own privacy notice. The booking details Bibha receives are kept on the same terms as enquiries. |
| Server and security logs | 24 months. These logs do not contain the content of your enquiry. |
| Analytics | Google Analytics keeps user-level and event-level data for 2 months. Aggregated reports, which show totals rather than individual visits, are not affected by this setting. |
| Your cookie choices | Kept in your browser until you clear your browser storage or change your choices. We ask again only if the way the website uses cookies changes. |
When a retention period ends, we delete the information or make it anonymous. We keep information for longer only where the law requires it, or where we need it to establish, exercise or defend a legal claim.
Your rights
Depending on where you live, data protection law gives you rights over your personal information. This section explains your rights under the GDPR, the UK GDPR and Swiss law. The next two sections cover India and the United States.
Under the GDPR and UK GDPR
You have the right to:
- access the personal information we hold about you and receive a copy (Article 15)
- correct information that is wrong or incomplete (Article 16)
- have your information deleted (Article 17)
- restrict how we use it (Article 18)
- receive information you gave us in a portable format, or have it sent to another organisation, where this right applies (Article 20)
- object to our use of your information where we rely on legitimate interests (Article 21)
- not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you (Article 22); we do not make such decisions
- withdraw your consent at any time, for analytics or booking in Cookie settings (Article 7(3))
When we correct, delete or restrict information, we tell the recipients we shared it with, unless that proves impossible or would take disproportionate effort (Article 19).
In Switzerland
If you are in Switzerland, the revised Federal Act on Data Protection, in force since 1 September 2023, gives you similar rights, including the rights to access, correct and delete your information and to object to its processing. We respond to access requests within 30 days.
How to make a request
Email privacy@bibha.ai. If you are in the European Union or the United Kingdom, you can also write to our representatives at dpo@bibha.ai. We may need to confirm your identity before we act, for example by asking you to reply from the email address you used with us.
We respond within one month of receiving your request. If a request is complex, or you send several, we may extend this by up to two further months and will tell you why within the first month. In most cases, making a request is free.
If we cannot act on your request, we will explain why and tell you how to complain.
Your rights in India
The Digital Personal Data Protection Act 2023 and the Digital Personal Data Protection Rules 2025 apply to the digital personal data we process in India. Bibha AI Labs Private Limited is the Data Fiduciary. This policy, together with the information shown when we ask for your consent, is our notice to you as a Data Principal.
The personal data we collect and our purposes are set out under "What we collect and why". We rely on your consent for analytics and the booking calendar, which you can withdraw in Cookie settings as easily as you gave it. For information you choose to give us, such as an enquiry, we rely on the legitimate use in section 7(a) of the Act and use it only for the purpose you gave it. We keep logs and other records where Indian law requires it.
As a Data Principal, you have the right to:
- obtain a summary of the personal data we process about you and of our processing activities, and the identities of the other Data Fiduciaries and Data Processors we have shared it with, with a description of what we shared
- have your personal data corrected, completed, updated or erased, unless we need to keep it for the purpose you gave it or to comply with the law
- withdraw your consent at any time, without affecting processing that took place before you did
- use our grievance redressal process
- nominate another person to exercise your rights if you die or become unable to exercise them
To use any of these rights, email our Grievance Officer at privacy@bibha.ai. To help us find your information, send your request from the email address you used with us, or include that address. To nominate someone, give us their name and contact details.
We respond to grievances as soon as we can, and within 90 days of receiving them. If you are not satisfied with our response, you can complain to the Data Protection Board of India. The Act asks you to use our grievance process first.
You can ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
Your rights in the United States
This section applies to residents of California and of other US states with comprehensive consumer privacy laws, such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon, to the extent those laws apply to Bibha. Bibha AI Inc. is our contact point for US residents.
Information we collect
Through this website, we collect these categories of personal information, as the California Consumer Privacy Act defines them:
| Category | What we collect | Sources |
|---|---|---|
| Identifiers | Name, email address, IP address, phone number if you give it when booking, and, if you allow analytics, the identifiers in analytics cookies | You, your browser and Calendly |
| Personal information described in California Civil Code section 1798.80(e) | Name, phone number and employer | You and Calendly |
| Professional or employment-related information | Your company, company website, the workflow you describe and whether you are enquiring for your business or about a partnership | You and Calendly |
| Internet or other electronic network activity information | Pages requested, browser and device type, the referring page and, if you allow analytics, the pages you view | Your browser |
| Geolocation data | Approximate location derived from your IP address. We do not collect precise geolocation | Your browser |
We use this information for the purposes described under "What we collect and why": replying to enquiries, arranging meetings, running and securing the website and, with your consent, measuring how it is used. We disclose it for these business purposes to the service providers listed under "Who receives your information".
We do not sell personal information or share it for cross-context behavioural advertising, and we have not done so in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not disclose personal information to third parties for their own direct marketing purposes.
We do not collect sensitive personal information through this website, and we do not use personal information to infer characteristics about you.
This website does not respond to Do Not Track signals or to opt-out preference signals such as Global Privacy Control. Because we do not sell or share personal information, there is nothing for those signals to opt you out of, and analytics stays off unless you allow it in Cookie settings.
Your rights under US state laws
Depending on your state, you have the right to:
- know the categories and specific pieces of personal information we have collected about you, where it came from, why we collected it and who we disclosed it to
- delete personal information we collected from you, subject to legal exceptions
- correct inaccurate personal information
- receive your personal information in a portable format, where your state's law provides for it
- not be discriminated or retaliated against for exercising your rights
How to make a request in the United States
Email privacy@bibha.ai, or write to Bibha AI Inc., 3790 El Camino Real, Ste 853, Palo Alto, CA 94306, United States. We will confirm that we received your request within 10 business days and respond within 45 calendar days. If we need more time, we may extend this by up to 45 further days and will tell you why within the first 45 days.
To protect you, we verify your identity before acting on a request, usually by matching the details you give us with the information we hold and confirming that you control the email address you used with us.
You can use an authorised agent. We may ask the agent for your signed permission, and ask you to verify your identity or confirm that permission directly with us, unless the agent holds a power of attorney.
Where your state's law gives you a right to appeal, you can appeal our decision on a request by replying to it. We will respond within the period your state's law sets. If you disagree with the outcome, you can contact your state attorney general.
Complaints
If you are unhappy with how we have handled your information, please contact us first at privacy@bibha.ai so we can try to put it right. If you are in the United Kingdom, we will acknowledge your data protection complaint within 30 days and tell you the outcome.
You also have the right to complain to a data protection authority. In the European Union and the European Economic Area, this is the supervisory authority in the country where you live or work, or where you believe the problem happened. In the United Kingdom, it is the Information Commissioner's Office. In Switzerland, it is the Federal Data Protection and Information Commissioner. In India, it is the Data Protection Board of India, once you have used our grievance process. In California, it is the California Privacy Protection Agency, and in other US states, the state attorney general.
Find your national data protection authority in the EU and EEA (external site)
Make a complaint to the Information Commissioner's Office (external site)
File a complaint with the California Privacy Protection Agency (external site)
How we protect information
The website is served only over an encrypted connection (HTTPS), and it tells browsers to use HTTPS on every future visit. Its security headers limit which scripts can run and stop other websites from embedding its pages.
Our own servers check every form submission. They accept submissions only from this website, use signed form tokens, limit how often forms can be sent and reject automated submissions, without third-party bot-detection services.
Access to enquiries is limited to the people at Bibha who need them. No website or email system can be guaranteed completely secure, so please do not send sensitive information through the form.
Our Trust Center lists ISO 27001, SOC 2 and SOC 1 as compliant. Our security page describes our controls, and our Trust Center provides the current public status. Request the relevant assurance documents to confirm their scope and dates.
If a personal data breach affects your information, we will notify the relevant authority and tell you when the law requires it, within the time limits it sets.
Children
This website is for business visitors. It is not directed at anyone under 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a child has sent us personal information, please contact privacy@bibha.ai.
Changes to this policy
We will update this policy when our practices or the law change, and show the date of the latest version at the top of this page. We will ask for your consent before any change that requires it.
Contact
For any privacy question or request, email privacy@bibha.ai. You can also contact our Data Protection Officer at dpo@bibha.ai.
Write to Bibha AI Labs Private Limited, Villa 92, JRC Palladio, Attibele Road, Billapura, Sarjapura, Anekal, Bangalore 562125, Karnataka, India.
If you live in the United States, you can also write to Bibha AI Inc., 3790 El Camino Real, Ste 853, Palo Alto, CA 94306, United States.