Privacy Policy
This policy explains what personal data Underwriter AI ("we", "us", "our") collects through this website and in the course of running product pilots, how we use it, and the rights you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where relevant, the EU GDPR.
1. Who we are
Underwriter AI is a live credit-analyst co-pilot for leveraged-finance diligence, built by a team in the GIFT IFIH Young Builders' Program. For any privacy question, contact [email protected].
2. What this policy covers
This policy covers two distinct contexts:
- This website (uwriter.io) — a marketing and information site.
- Product pilots — when a client desk runs Underwriter AI on real or recorded diligence calls under a separate pilot or services agreement.
3. Data we collect through the website
The website is intentionally minimal. We do not run advertising trackers, and we do not sell personal data. We may collect:
- Information you send us — if you email an address listed on the site (for example to discuss a pilot), we receive your name, email address and the contents of your message.
- Standard server logs — our hosting provider may record technical data such as IP address, browser type and pages requested, for security and reliability. These are not used to build a marketing profile of you.
The site uses only strictly necessary storage. It does not set advertising or cross-site tracking cookies.
4. Data handled during product pilots
During a pilot, the product processes call audio, transcripts and deal documents that the client provides. This may include personal data of call participants and confidential business information.
- The client (the lending desk) is the data fiduciary / controller for that data; we act as a processor on their instructions under the pilot agreement.
- Model inference runs on AWS Bedrock, where inputs are not retained and not used to train models. A region-pinned deployment mode is available.
- The scope, retention, deletion and security terms for pilot data are set in the pilot / data-processing agreement, not by this website policy.
5. Why we use your data (purpose & legal basis)
- To respond to your enquiries and arrange pilots — on the basis of your consent and our legitimate interest in answering you.
- To operate, secure and improve the website — on the basis of our legitimate interest.
- To meet legal and regulatory obligations where they apply.
6. Sharing
We share personal data only with service providers who help us operate (for example, hosting and email providers), and where required by law. We do not sell or rent personal data to third parties.
7. International transfers
Our infrastructure providers may process data outside your country. Where that happens we rely on appropriate safeguards, and for pilot data we can operate a region-pinned mode to keep processing within a chosen region.
8. Retention
We keep enquiry emails for as long as needed to deal with your request and a reasonable period thereafter. Pilot data is retained only as agreed in the relevant pilot agreement.
9. Your rights
Subject to applicable law, you may request access to, correction of, or erasure of your personal data, withdraw consent, or raise a grievance. To exercise any right, email [email protected]. For pilot data, please also contact the client desk that acts as the data fiduciary.
10. Security
We take reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure; we continue to strengthen our controls as the product matures.
11. Children
The website and product are intended for business users and are not directed at children.
12. Contact
Questions, requests or grievances: [email protected].