Privacy Policy

Effective: July 21, 2026

1. Who is responsible

INBURG INDIA PRIVATE LIMITED operates DonDelay. For account data, waitlist data, and website data, we are the data controller (GDPR) / data fiduciary (India DPDP Act 2023). For prospect conversation data that agencies connect via a supported outreach tool (HeyReach, Aimfox, SmartLead, Instantly, or Lemlist) or scheduling tool (Calendly or Cal.com), the agency and its client are the controllers and we act as a processor on their documented instructions.

2. What we collect

  • Account data — name, work email, hashed password, role, organisation name.
  • Waitlist data — email address and signup source, used to notify you about availability.
  • Conversation data (as processor) — LinkedIn and email conversation content, participant names/profile data, and campaign metadata retrieved from the outreach-tool workspaces (HeyReach, Aimfox, SmartLead, Instantly, or Lemlist) our customers connect. On request, a conversation's text is sent to our AI processor (Anthropic) to classify intent and generate an on-demand reply draft — never used to train models.
  • Scheduling data (as processor) — meeting-type and availability information, and booking records (attendee name/email, meeting time), retrieved from the scheduling workspaces (Calendly or Cal.com) our customers connect.
  • Device & technical data — push-notification tokens, IP addresses, and server logs needed to run and secure the Service.
  • Billing data — subscription plan, billing status, and payment/customer identifiers from our payment processor (Razorpay). We never receive or store full card numbers — card details are handled by the processor.

3. What we do NOT do

We do not sell personal data. We do not run advertising trackers on dondelay.app. We do not use your or your clients’ conversation data to train AI models or for any purpose other than providing the Service.

4. Legal bases & purposes

We process account and billing data to perform our contract with you; waitlist emails on your consent (withdrawable any time via the unsubscribe link or by emailing us); technical logs on our legitimate interest in securing the Service; and conversation data as processor under our customers’ instructions.

5. Where data lives & who touches it

Data is hosted on DigitalOcean infrastructure (Bangalore region) behind Cloudflare. Push notifications are delivered via Expo, Google (FCM), and Apple (APNs) — notification contents transit those services. Outreach-tool and scheduling API keys/OAuth tokens (HeyReach, Aimfox, SmartLead, Instantly, Lemlist, Calendly, Cal.com) are stored encrypted at rest; conversation text sent for on-demand AI draft generation transits Anthropic's API and is not retained by them for training; all traffic is encrypted in transit (TLS). We share data only with these processors, and where required by law.

6. International transfers

Our processors may process data outside your country (including the US and India). Where GDPR applies, transfers rely on adequacy decisions or standard contractual clauses maintained by those processors.

7. Retention

Account data is kept for the life of the account and deleted within 30 days of account deletion. Waitlist emails are deleted after launch communications conclude or on unsubscribe. Conversation data is retained while the connected workspace remains active and deleted within 30 days of disconnection or customer instruction. Backups age out on a rolling basis within a further 35 days.

8. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, India DPDP), you may request access, correction, deletion, portability, restriction, or object to processing, and you may withdraw consent at any time. Prospects whose conversations are processed on behalf of an agency should direct requests to that agency (the controller); we support our customers in fulfilling them. To exercise rights with us, email [email protected]. You may also lodge a complaint with your supervisory authority.

9. Grievance & Data Protection Officer

Grievance Officer / data-protection contact (India DPDP & GDPR queries): Ranvijay Singh — Founder, INBURG INDIA PRIVATE LIMITED, [email protected]. We acknowledge requests within 48 business hours and resolve within statutory timelines.

10. Cookies & changes

dondelay.app sets no advertising cookies. The app portal stores a session token in your browser’s local storage strictly to keep you signed in. We will post updates to this policy here and notify material changes by email. Effective: July 21, 2026.