Privacy Policy

This Privacy Policy explains how Algoanalytica ("we") handles personal data across our website, the Brahmastra platform (including Brahmastra AI), the Brahmastra Survey app, and our services. It is written to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (as their provisions come into force), the Information Technology Act, 2000 and the rules under it, and the instructions of the Election Commission of India where they apply.

• Data Fiduciary — for website visitors, people who contact us, Brahmastra account users, and surveyors we engage. We decide why and how that data is processed, and this Policy applies in full.
• Data Processor — for data our clients (candidates, parties, campaigns) give us or ask us to collect: their voter-contact lists, survey responses, influencer records and similar. We process it only on the client's instructions. The client is the Data Fiduciary and is responsible for giving notice and obtaining consent; questions about it should go to that client, and we will help them answer.

Website visitors and enquiries — what you choose to send us through the contact form or email (name, email, phone if given, seat or region, message), and standard server logs (IP address, browser, pages, time) kept for security.

Brahmastra account users — name, email, phone, role, the states, seats and parts you are granted, sign-in records, and activity needed to run and secure the platform.

Surveyors using the Survey app — name, phone, device identifiers, and, only while on an active survey assignment: live location, the pin location of each submission, geo-fence entry and exit, timestamps and interview duration, and the photos or audio captured.

Survey respondents (usually processed for a client) — answers to the questions asked; the location of the interview; and a name, phone number or photo only if the respondent agrees.

Public election data — electoral rolls, Form 20 results, and panchayat and municipal results published by the Election Commission of India, Chief Electoral Officers and State Election Commissions under law. We use these only for electoral and governance analysis for our clients.

• To answer your enquiry and provide proposals — on the basis of your consent when you contact us.
• To provide and secure Brahmastra accounts and enforce seat-scoped access — consent and the contract with your organisation.
• To verify that surveys are genuine — that each interview happened at the stated place and time, inside the assigned area — consent of the surveyor, given when joining an assignment.
• To meet legal obligations — tax, accounting, responding to lawful requests, and supporting clients' election-expenditure records.
• To keep our systems safe — detecting misuse, fraud and security incidents.

We do not use personal data to target or appeal to voters on the ground of religion, race, caste, community or language, and we do not use it to discourage anyone from voting.

Where we rely on consent, we ask for it with a clear notice of what we collect and why, in English or Hindi. You can withdraw consent at any time by writing to us; withdrawal does not affect processing done before it. Some data may still be kept where the law requires. Surveyors can stop location recording by ending or leaving an assignment.

We never sell personal data. We share it only with:

• the client whose engagement the data belongs to, and only the people that client has granted access to;
• service providers that run our infrastructure — cloud hosting and database, maps, email delivery (such as Brevo, which sends contact-form messages and replies), messaging (such as the WhatsApp Business API and telecom operators) — under contracts that bind them to protect it;
• authorities, where required by law or by a lawful order, including the Election Commission of India and courts.

Our website's maps load tiles from OpenStreetMap, which receives your IP address when the map is shown.

Data is stored with reputable cloud providers. Where it is processed outside India, we do so only to countries not restricted by the Central Government under section 16 of the Digital Personal Data Protection Act, 2023, and with safeguards equivalent to this Policy.

• Enquiries — up to 2 years after our last contact, unless they become a client engagement.
• Client campaign data — for the engagement, then returned or deleted within 30 days of the client's request, or as the work order says.
• Survey location trails and media — for the engagement and its quality review, then deleted or anonymised, unless the client needs them as evidence for a dispute.
• Account, invoice and tax records — as long as Indian tax and company law require.
• Security logs — for at least one year, as security and incident-response rules require.

We take reasonable security safeguards: encryption in transit, encryption at rest with our cloud providers, access limited by role and by seat, separate credentials for every user, monitoring for misuse, and confidentiality duties for our staff and processors.

If a personal-data breach happens, we will inform the Data Protection Board of India and affected Data Principals as the Digital Personal Data Protection Rules, 2025 require, and report cyber incidents to CERT-In within the time its directions set. Where we are a processor, we tell the client without delay so they can meet their duties.

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you and how it is processed;
• ask us to correct, complete, update or erase it;
• withdraw consent you have given;
• nominate someone to exercise these rights if you die or become incapable;
• have your grievance addressed by us, and then, if unresolved, complain to the Data Protection Board of India.

Write to our Grievance Officer to use these rights. We may need to verify your identity first. If the data belongs to a client's campaign, we will pass your request to that client and help them respond.

Our Services are for adults. We do not knowingly collect personal data of anyone under 18, and our surveys interview only adults. If you believe we hold a child's data, contact us and we will delete it.

Our website does not use advertising or tracking cookies. The Brahmastra platform uses essential cookies only, to keep you signed in and secure.

Grievance Officer, Algoanalytica — admin@algoanalytica.com · New Delhi, India. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.

We may update this Policy; the date at the top shows when it last changed. Material changes will be notified to account users.