Privacy Policy

Last updated: January 2026

1. Introduction

IntegrityX ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services for financial fraud prevention, discovery, and recovery.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

  • Name and contact information (email address, phone number)
  • Company name and job title
  • Account credentials
  • Payment and billing information
  • Communications and correspondence with us

2.2 Business Data

When you use our fraud detection services, we may process:

  • Financial transaction data
  • Vendor and supplier information
  • Invoice and payment records
  • Employee-related data as necessary for fraud detection

2.3 Automatically Collected Information

We automatically collect certain information when you visit our website, including IP address, browser type, device information, and usage data through cookies and similar technologies.

3. How We Use Your Information

We use the collected information for the following purposes:

  • Providing and maintaining our fraud detection and prevention services
  • Processing transactions and sending related information
  • Responding to your inquiries and providing customer support
  • Sending promotional communications (with your consent)
  • Improving our services and developing new features
  • Complying with legal obligations
  • Protecting against fraudulent or illegal activity

Business Data is treated differently

The uses above describe account and website information. Business Data you upload for analysis (section 2.2) is subject to strict purpose limitation: it is processed only to deliver the leakage detection service you have instructed. It is never used for product research, benchmarking, marketing, model improvement or any other secondary purpose. No client data is used to train, fine-tune or benchmark any model — ours, a shared model, or any provider's. This is enforced contractually with every AI sub-processor and is not capable of exception. See our Responsible AI Policy.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and employee training.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Client uploads are purged 30 days after processing. Personal data is masked by default within the platform; unmasking requires an authorised role and a recorded reason, and is logged. The tamper-evident audit trail is retained separately for up to seven years and is not user-deletable. A data deletion certificate is issued on request and on offboarding.

6. Information Sharing

We may share your information with:

  • AI sub-processors that deliver inference on our instruction — Google (Gemini via Vertex AI), Anthropic (Claude) and OpenAI (GPT). Each is engaged under a data processing agreement with no-training terms and zero or limited retention. We name them rather than leaving them to a general clause; see Responsible AI Policy §6
  • Other service providers who assist in our operations
  • Professional advisors (lawyers, accountants, auditors)
  • Law enforcement or regulatory bodies when required by law
  • Business partners with your consent

We do not sell your personal information to third parties.

7. Your Rights

Subject to applicable law, you have the right to:

  • Access your personal information
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to or restrict certain processing activities
  • Data portability
  • Withdraw consent where processing is based on consent

8. International Data Transfers

Platform storage, compute and backups remain in India (Google Cloud, asia-south1). AI inference is a disclosed exception: reasoning and extraction calls to Anthropic Claude and OpenAI GPT are processed in the United States, while Google Gemini calls are processed in India. We state this here rather than concealing it within a general sub-processor clause. Each transfer is covered by a data processing agreement with no-training and zero or limited-retention terms, and by the transfer mechanism appropriate to your jurisdiction. Full detail, including processing location per provider, is set out in our Responsible AI Policy.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

IntegrityX

Email: hello@integrityx.ai

Phone: +91 98101 65055

Address: Mumbai, Delhi, India