Privacy Policy.

• Identity: name, email, profile picture (via Google sign-in).
• Assessment: answers you submit, self-declared background and goals.
• Usage: pages visited, features used, device/browser metadata.
• Contact: messages sent through the contact form or via email.

We process personal data solely for the purposes below, on the basis of your consent under the DPDP Act or, where applicable, legitimate use as defined therein:

• Deliver and improve the Platform, including generating your Forte² Score and AI-authored reports.
• Respond to contact messages and support requests.
• Send transactional emails (e.g., waitlist and contact confirmations).
• Comply with legal obligations under Indian law.

We do not sell personal data. We share personal data only with:

• Google — authentication.
• Emergent / LLM providers — to generate AI reports. Only structured, minimum-necessary data is transmitted.
• Resend — to deliver transactional email to [email protected].
• Government authorities — where required by valid legal process under Indian law.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, and thereafter for periods mandated by applicable Indian law. Assessment reports are retained for the lifetime of your account or until you request deletion.

• Right to Access the personal data we hold about you.
• Right to Correction of inaccurate or outdated data.
• Right to Erasure of your personal data.
• Right to Grievance Redressal.
• Right to Nominate another person to exercise these rights.
• Right to Withdraw Consent at any time.

To exercise any of these, email [email protected] with the subject "DPDP Request". We will respond within 30 days.

The Platform is not directed at children under 13. For users under 18, we require verifiable parental or guardian consent as prescribed under the DPDP Act. We do not run targeted advertising or behavioural tracking on data known to belong to a child.

We implement reasonable security practices including HTTPS/TLS in transit, encrypted storage, role-based access controls, secure cookies (httpOnly, secure, SameSite=None) and audit logging, in line with SPDI Rules, 2011 and the DPDP Act.

Some sub-processors (e.g., Anthropic, Resend) may process data outside India. Such transfers occur only to jurisdictions not restricted by the Government of India and under appropriate contractual safeguards. We do not accept or process cross-border payments at this time.

We use strictly necessary cookies (session_token) for authentication. We do not use third-party advertising cookies. You can block cookies via your browser, but the Platform may not function.

Data Protection Officer / Grievance Officer:
Gritly Analytics Private Limited
Chennai, Tamil Nadu, India
Email: [email protected] (subject: "DPDP Request" or "Grievance")

We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app banner at least 7 days before taking effect.