Godwit AI Labs Talk to us

Godwit AI Labs › Privacy notice

Privacy notice

We do security and compliance work for a living, so being vague here would be a poor look. This is everything that happens to information you send us through this website. It is short because the site does very little.

Last updated: 6 September 2026

Who we are

Godwit AI Labs Pvt. Ltd., Gurugram, Haryana, India, is the data fiduciary for personal data collected through this website. Anything on this page — a question, a request, or a complaint — reaches Grievance Officer at privacy@godwit-tech.com.

What we collect

One thing: what you type into the contact form. Your work email, plus whatever else you choose to give us — name, phone, organisation, role — and your message and the enquiry category. We use it to reply, and if the conversation goes somewhere, to scope and quote the work. That is the only purpose it has.

Stored with it, because a public form is a target: the page you were on when you sent it, your browser’s user-agent string, and a one-way hash of your IP address that lets us stop a single source flooding the form. The hash cannot be turned back into an address. We also keep the exact wording you agreed to and its version, so there is a record of what you were actually told rather than what we later say you were told.

Analytics, but only if you agree. We use Google Analytics to see which pages are worth keeping. It stores an identifier in your browser and tells Google which pages you looked at and roughly where you are. None of it loads — no script, no identifier, no request to Google — unless you accept the banner. Decline and we remember that, and never ask again for a year. We run no advertising, and advertising signals are switched off in the configuration.

Change your mind

Either direction, at any time. Declining also clears anything already stored.

Who else touches it

Four companies, each doing one job, none of them using your data for anything beyond it:

  • Cloudflare hosts this site and runs the code that receives the form. Serving any website produces server logs that include IP addresses.
  • Neon is the database your enquiry is stored in.
  • Resend delivers the notification to us and the acknowledgement to you.
  • Google Fonts serves the two typefaces this site uses. Your browser fetches them from Google, which means Google sees your IP address as part of that request. A content blocker will stop it and the site falls back to system fonts.

We do not sell personal data, share it with advertisers, or use it to train anything.

How long we keep it

Enquiries are erased 24 months after they arrive. The date is set by the database when the row is written and a scheduled job does the erasing, so it does not depend on anyone remembering. If you become a client, engagement records are kept for as long as the contract and Indian tax and company law require.

Your rights

You can ask us to confirm what we hold about you, correct it, complete it, update it or erase it, and you can withdraw your consent at any time. Withdrawing is one email, and no harder than giving it was. There is no charge, and we will come back to you inside 30 days.

Ask for your data, or ask us to delete it

Enter the address you contacted us from. We will email you a confirmation link — we act only once you click it, so that nobody else can request your data or have it erased on your behalf. The link is valid for 48 hours.

We answer the same way whether or not we hold anything for an address — whether someone has contacted us is itself personal information.

If we get it wrong

Tell Grievance Officer at privacy@godwit-tech.com and we will look at it. If you are not satisfied with how we handle it, you can take it to the Data Protection Board of India.

Changes

If this notice changes in a way that affects data we already hold about you, we will tell you directly. Otherwise the date at the top moves.