Your data, in plain language.
Last updated · 25 September 2026
At a glance
- We collect the minimum needed to run the site, answer you and provide the products.
- Analytics and marketing cookies are off until you opt in. Reject is as easy as accept.
- We do not sell personal data and we do not use your content to train public AI models.
- You can access, correct, erase or export your data, withdraw consent and complain, at any time.
- Reach our Grievance Officer at grievance@tilarq.com. We reply within 30 days.
Who we are
For tilarq.com, sales enquiries, newsletters and your Tilarq account, Techliphant Technologies Pvt. Ltd. is the controller (GDPR) and Data Fiduciary (DPDP Act).
| Postal address | Techliphant Technologies Pvt. Ltd., Pune, Maharashtra, India |
|---|---|
| Privacy team | privacy@tilarq.com |
| Grievance Officer (DPDP) | Grievance Officer, Techliphant Technologies Pvt. Ltd., grievance@tilarq.com |
| EU representative (GDPR Art. 27) | To be appointed before EU launch |
When our business customers put personal data into Tilarq (for example contacts in Tilarq CRM or responses in Tilarq Forms), the customer is the controller / Data Fiduciary and we act as their processor / Data Processor under a Data Processing Agreement. If your data is in a customer’s workspace, please contact that organisation first; we will help them respond.
What we collect and why
Each purpose below is specific. We do not reuse data for an unrelated purpose without telling you first.
| Data | Purpose | GDPR basis | DPDP basis |
|---|---|---|---|
| IP address, browser, pages requested (server logs) | Deliver the site, prevent abuse, investigate security incidents | Legitimate interests (Art. 6(1)(f)); legal obligation | Compliance with law, incl. CERT-In Directions 2022 (s.7(d)) |
| Consent choice and a random receipt ID | Remember and prove your cookie choice | Legal obligation (Art. 7(1)) | Record of consent (s.6(10)) |
| Aggregated analytics (only if you opt in) | Understand which pages are useful | Consent (Art. 6(1)(a)) | Consent (s.6) |
| Marketing cookies (only if you opt in) | Measure our campaigns on other sites | Consent | Consent |
| Name, work email, company, team size, message | Reply to a contact, demo or sales request | Steps before a contract / legitimate interests | Voluntarily provided for this purpose (s.7(a)) |
| Email address | Newsletter and product news | Consent | Consent |
| Chat messages to Tilarq Assist | Answer your question, hand over to a person if needed | Legitimate interests / steps before a contract | Voluntarily provided (s.7(a)) |
| Account data: name, email, role, billing details | Provide, secure, bill and support your Tilarq account | Contract (Art. 6(1)(b)); legal obligation for tax records | Consent at sign-up; compliance with law |
| Rights requests and grievances | Handle and evidence your request | Legal obligation | Compliance with law |
We do not ask for special-category or sensitive data on this website. Please do not include health, financial account or government-ID details in forms or chat.
Tilarq AI and your data
Tilarq AI grounds its answers in data you are allowed to see. Customer content is used only to deliver the service to that customer. It is never used to train shared or public foundation models.
When a task is routed to a third-party model provider, we use enterprise terms that prohibit training on your data and, where offered, zero or minimal retention. Prompts, responses and tool calls are logged inside your workspace so your admins can audit them. No decision with legal or similarly significant effect on a website visitor is made by automated means alone.
International transfers
We are based in India and some providers operate in other countries. For personal data from the EEA, UK or Switzerland we rely on adequacy decisions where available and otherwise on the European Commission’s Standard Contractual Clauses (and the UK Addendum), with a transfer risk assessment and supplementary safeguards such as encryption.
Under the DPDP Act we transfer personal data outside India only to countries not restricted by the Central Government, and we honour any stricter sector rules that apply to you.
How long we keep it
| Data | Retention |
|---|---|
| Server and security logs | 180 days, or up to 1 year where the DPDP Rules require it, then deleted |
| Consent receipts | For as long as the consent is valid plus 1 year, to evidence it |
| Contact and demo requests | 24 months after our last interaction unless you become a customer |
| Assist chat transcripts | Up to 90 days, unless they become part of a sales or support record |
| Newsletter subscription | Until you unsubscribe; suppression record kept so we do not email you again |
| Account data | For the life of the account; deleted or anonymised within 90 days of closure |
| Invoices and tax records | As long as tax and company law require (up to 8 years in India) |
Security and breaches
We use encryption in transit and at rest, role-based access, least-privilege administration, logging and monitoring, and regular reviews. See the Security overview.
If a personal data breach occurs we will notify the relevant supervisory authority within 72 hours where the GDPR requires it, and the Data Protection Board of India and affected Data Principals as the DPDP Rules require, explaining what happened, the likely impact and what you can do.
Your rights
Everyone
- Know what we hold about you and get a copy (access).
- Correct, complete or update it.
- Have it erased when it is no longer needed or you withdraw consent.
- Withdraw consent at any time, as easily as you gave it. This does not affect earlier processing.
- Unsubscribe from marketing with one click, and object to direct marketing at any time.
Under the GDPR (EEA, UK)
- Data portability, restriction of processing, and objection to processing based on legitimate interests.
- Not to be subject to decisions based solely on automated processing with legal or similar effects.
- Complain to your local supervisory authority (in the UK, the ICO).
Under the DPDP Act (India)
- A summary of the personal data we process and the processing activities, and the identities of those we shared it with.
- Grievance redressal through our Grievance Officer, and nomination of another person to exercise your rights in the event of death or incapacity.
- If you are not satisfied with our response, you may approach the Data Protection Board of India.
Elsewhere
Residents of California and other US states have similar rights to know, delete, correct and opt out. We do not sell or share personal information, and we treat Global Privacy Control as an opt-out.
How to use them
Use the data request form or email privacy@tilarq.com. We may ask you to confirm your identity. We respond within one month under the GDPR (extendable by two months for complex requests, with notice) and within 30 days for DPDP grievances, well inside the 90-day limit in the DPDP Rules. Requests are free unless manifestly unfounded or excessive.
Marketing
We send newsletters and product news only if you ask for them, and confirm your address first (double opt-in). Every email has a one-click unsubscribe link. Service emails about your account, security or billing are not marketing and continue while your account is active.
Children
Tilarq is a business product and is not directed at anyone under 18. We do not knowingly process children’s personal data, and we never track, behaviourally monitor or target advertising at children. If you believe a child has given us data, contact privacy@tilarq.com and we will delete it. If we ever offer a service to children we will first obtain verifiable consent from a parent or lawful guardian as the DPDP Rules require.
Changes to this notice
This is version 2026-09-25. If we make a material change we will update the date above, and where the change affects how we use data you gave us, we will tell you in advance and, where required, ask for fresh consent.
सारांश (हिंदी)
Techliphant Technologies Pvt. Ltd. tilarq.com और Tilarq उत्पादों के लिए डेटा फ़िड्यूशियरी है। हम केवल उतना ही व्यक्तिगत डेटा लेते हैं जितना साइट चलाने, आपके प्रश्नों का उत्तर देने और सेवा प्रदान करने के लिए आवश्यक है।
- एनालिटिक्स और मार्केटिंग कुकीज़ आपकी सहमति के बिना बंद रहती हैं। आप कभी भी सहमति वापस ले सकते हैं।
- हम आपका डेटा नहीं बेचते और आपकी सामग्री का उपयोग सार्वजनिक AI मॉडल को प्रशिक्षित करने के लिए नहीं करते।
- आप अपने डेटा का सारांश, सुधार, मिटाने, नामांकन और शिकायत निवारण का अधिकार रखते हैं।
- शिकायत अधिकारी: grievance@tilarq.com। हम 30 दिनों के भीतर उत्तर देते हैं। संतुष्ट न होने पर आप भारतीय डेटा संरक्षण बोर्ड से संपर्क कर सकते हैं।
पूरी सूचना हिंदी में चाहिए? privacy@tilarq.com पर लिखें। हम इसे हिंदी या संविधान की आठवीं अनुसूची की किसी अन्य भाषा में उपलब्ध कराएँगे।
Contact
Questions or concerns: privacy@tilarq.com. Grievances: Grievance Officer, Techliphant Technologies Pvt. Ltd., grievance@tilarq.com. Post: Techliphant Technologies Pvt. Ltd., Pune, Maharashtra, India.


