Legal

Data Privacy and Protection Policy

Last updated: May 26, 2026

1. Introduction

1.1. The Esgenix web platform (“Platform”) is owned and operated by Syncinvent Labs Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at No. 1 Venus Hebron, Ground Floor, 4^th G Main Road, Kacharakani Halli, HRBR 2^nd Block, Kalyan Nagar, Bengaluru – 560 043, Karnataka, India (“Esgenix”, “we”, “us”, or “our”).

1.2. This data privacy and protection policy (“Privacy Policy”) sets out, in a clear and concise manner, how we collect, use, process, store and protect information obtained from or about you when you access or use the Platform. This Privacy Policy applies to all users and visitors of the Platform. By accessing or using the Platform through any computer, mobile phone, tablet or any other device, you acknowledge that you have read, understood and consent to the practices described in this Privacy Policy.

1.3. This Policy is a part of and should be read in conjunction with our Terms of Service. Further, any capitalised terms not expressly defined here shall have the meaning as set out in the Terms of Service.

2. Personal Data We Might Collect from You

2.1. We may collect the following personally identifiable information, including but not limited to:

2.1.1. name, including first and last name;

2.1.2. login credentials and authentication data;

2.1.3. email address and contact details;

2.1.4. address and postal code;

2.1.5. subscription and billing details (if applicable); and

2.1.6. such other information as we may request from you from time to time.

2.2. We may also collect information relating to your use of and interactions with the Platform, including but not limited to:

2.2.1. the links selected, features accessed and functionalities used on the Platform;

2.2.2. information relating to your interactions with User Content, Outputs and other features available on the Platform, including prompts submitted, feedback provided, and actions taken in relation to generated Outputs;

2.2.3. usage activity and behavioural information, including frequency of use, session duration, engagement patterns and user preferences; and

2.2.4. logs relating to your sessions, including error logs and performance metrics.

2.3. We may automatically collect certain technical, device and usage-related information when you access or use the Platform, including but not limited to browser type, device identifiers, IP address, time zone, country and other similar technical identifiers.

2.4. Cookies

2.4.1. We may use cookies to enable Platform functionality, maintain security, remember user preferences, improve performance, and analyse usage patterns. Users may manage browser settings to disable or limit certain cookies, though certain Platform functionalities may become unavailable.

2.5. In connection with the use and access of the Platform, we may also process User Content, including but not limited to prompts, communication and feedback.

For the avoidance of doubt, it is clarified that we will never collect any confidential financial details you may provide on the Platform. All payment information barring billing name, address and payment method, will be obtained and processed by our online payment gateway partner and our banking partner.

Further, we do not knowingly collect any personal data from persons below the age of 18 years. If we become aware that our database includes information of a user who is below the age of 18 years, we will promptly erase such information.

3. Purpose and Method of Processing

3.1. Your personal data is processed to enable the smooth and efficient functioning of the Platform and to provide you with a secure, customized, and reliable experience. This includes:

3.1.1. creating, managing and administering your account;

3.1.2. processing invention data through our AI models to generate draft specifications or related outputs;

3.1.3. responding to queries or requests and providing customer support and technical assistance; and

3.1.4. complying with legal and regulatory obligations.

3.2. We also use your information to communicate essential updates, confirmations, reminders, alerts and Platform-related information through email or other electronic means. Further, we may also use your information to offer you updates about products, services, events, or promotions that are similar to what you have already engaged in, unless you choose to opt out.

3.3. We do not sell or rent your personal data.

3.4. Processing may be automated or manual and is carried out through secure digital systems by authorized personnel only.

3.5. We process personal data on one or more of the following bases, where applicable:

3.5.1. performance of contractual obligations;

3.5.2. compliance with legal obligations;

3.5.3. consent obtained from you; and

3.5.4. legitimate business interests, including fraud prevention and Platform improvement.

3.6. We do not use invention data for training or improving our AI models. Esgenix stores invention data in a highly secure and encrypted format using industry-standard encryption protocols. While such invention data may be stored, it is protected through technical and organisational safeguards designed to restrict unauthorised access. Further, invention data is not used for training, improving, or fine-tuning AI models. However, we may use usage information, prompts (excluding invention data), Platform interaction patterns, and user behavioural information for improving our Platform, researching, developing future proprietary models, enhancing performance, and providing additional features or services. For this purpose, the User Content shall be anonymised, aggregated or de-identified, as required under applicable law.

3.7. When we rely on third party AI services for language or generation of drawings, we implement technical safeguards so that your User Content is not used to train, enhance or fine-tune any AI models and confidentiality is maintained.

4. Processing of Personal Data of Persons with Disabilities

4.1. Where consent is required on behalf of a person with disability who is unable to provide legally valid consent, the Platform may obtain verifiable consent from a lawful guardian. In such cases, the guardian must demonstrate legal authority, which may include verification through:

4.1.1. appointment orders issued by a court of law,

4.1.2. orders of a designated authority, or

4.1.3. details verified through a local level committee or other lawful mechanism prescribed under applicable laws.

4.2. Persons with disabilities may withdraw consent at any time. Upon withdrawal, access to Platform features may be limited or disabled in accordance with operational and legal requirements.

5. Storage, Security and Retention

5.1. User Content and Outputs are encrypted during transmission and storage using industry‑standard encryption protocols (for example, AES-256, TLS 1.3).

5.2. We implement reasonable security practices and procedures, including:

5.2.1. encryption of data in transit and at rest;

5.2.2. multi-layered firewalls and intrusion detection systems;

5.2.3. role-based access control (RBAC) and authentication mechanisms; and

5.2.4. regular vulnerability assessments and security audits.

5.3. Data is retained only for as long as required for operational, legal, and regulatory purposes. When data is no longer required, it is securely erased, unless you have given consent for storage.

5.4. You may download your work as an encrypted.esg file, which can only be accessed by you.

5.5. In particular:

5.5.1. Invention data is not retained or reused by the underlying models beyond the processing session, save for minimal logs necessary for security and troubleshooting; and

5.5.2. account‑level data (for example, contact details, billing information) is retained while your account remains active and thereafter only as required by applicable law.

5.6. In the event your account remains inactive for a period as set out under applicable law, Esgenix may provide you 48 hours’ prior notice before the expiry of such period. If you do not log in, contact us for fulfilment of a specified purpose, or exercise any of your rights in relation to the processing of such personal data within the notice period, we shall erase your data, subject to legal retention requirements.

5.7. To promote transparency, Esgenix may periodically publish security standards, controls, and technical operating procedures adopted for the storage, processing, protection, and handling of personal data, including through a dedicated link accessible on the Platform.

6. Your Rights

6.1. You may request access to your personal data, ask for corrections to inaccurate information, or request erasure of data that is no longer required for lawful purposes.

6.2. Where processing is based on your consent, you may withdraw such consent at any time without affecting prior lawful processing. However, certain features on the Platform may not be enabled without specific information or consent.

6.3. You may, in accordance with applicable law and our terms, nominate one individual to exercise your rights on your behalf. Such nomination shall be made at the time of creation of your account on the Platform and shall be subject to the procedures and particulars required by us for validating such nomination.

6.4. Subject to applicable legal retention obligations, you may request deletion of your account and associated personal data by submitting a request to Esgenix through your account settings or by contacting us at the details of the Grievance Officer specified under this Privacy Policy.

6.5. Rights for Users Located in the European Economic Area and United Kingdom

If you are a resident in the European Union, European Economic Area or the United Kingdom, your rights under the Privacy Policy are as set out below:

Right to Be Informed: You have a right to be informed about the manner in which any of your personal data is collected or used which we have endeavoured to do by way of this Privacy Policy.
Right of Access: You have a right to access the personal data you have provided by requesting us to provide you with the same.
Right to Rectification: You have a right to request us to amend or update your personal data if it is inaccurate or incomplete.
Right to Erasure: You have a right to request us to delete your personal data.
Right to Restrict: You have a right to request us to temporarily or permanently stop processing all or some of your personal data.
Right to Object: You have a right, at any time, to object to our processing of your personal data under certain circumstances. You have an absolute right to object to us processing your personal data for the purposes of direct marketing.
Right to Data Portability: You have a right to request us to provide you with a copy of your personal data in electronic format and you can transmit that personal data for using another third-party’s product/service.
Right Not to Be Subject to Automated Decision-Making: You have a right to not be subject to a decision based solely on automated decision making, including profiling.

6.6. Rights for Users Residing in the United States

If you are a resident in the United States of America, your rights under the Privacy Policy are as set out below:

The Right to Know

You have the right to confirm whether we are processing personal information about you, and under California law only, to obtain certain details about the personal information we have collected about you, including:

The categories of personal information we have collected;
The categories of sources of the personal information;
The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
The categories of personal information shared for targeted or cross-contextual advertising purposes (if any), and the categories of recipients to whom the personal information was disclosed; and
The categories of personal information we have sold and the categories of third parties to whom the information was sold.

The Right to Access & Portability

You have the right to access the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity.

The Right to Correction

You have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.

The Right of Control over Sensitive Information

You have the right to exercise control over our collection and processing of certain sensitive information.

The Right to Request Deletion

You have the right to request the deletion or erasure of personal information we have collected from you, subject to certain exceptions.

The Right to Opt Out of Data Sales

You have the right to direct us not to sell personal information we have collected about you to third parties.

The Right to Opt Out of Sharing for Targeted Advertising

You have the right to direct us not to use or share personal information for targeted advertising or cross-context behavioural advertising purposes.

The Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising these rights.

However, please note that if exercising these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our services or engage with you in the same manner.

7. Third Party Integrations and Data Sharing

7.1. We may disclose, share, transfer, or otherwise make available personal data and User Content only in the circumstances described in this Privacy Policy and in accordance with applicable law.

7.2. Vendors and Service Providers

7.2.1. We may share personal data with trusted third-party vendors, service providers, contractors and sub-processors that support the operation, maintenance and functionality of the Platform and assist us in providing services.

7.2.2. Such third parties may include providers of:

7.2.2.1. cloud hosting and infrastructure services;

7.2.2.2. patent searches and valuation services;

7.2.2.3. safety, monitoring and security services;

7.2.2.4. analytics and performance monitoring tools;

7.2.2.5. payment processing services; and

7.2.2.6. other service providers necessary for operation of the Platform.

7.3. Legal and regulatory disclosures

7.3.1. We may disclose personal data or information relating to your use of the Platform to governmental authorities, regulatory bodies, law enforcement agencies or other third parties to:

7.3.1.1. comply with applicable law, legal process, court orders or regulatory obligations;

7.3.1.2. protect or enforce our legal rights, property or interests;

7.3.1.3. investigate, prevent or address suspected violations of our Terms of Service, applicable policies or law;

7.3.1.4. detect, prevent or mitigate fraud, cybersecurity incidents or other illegal activities; or

7.3.1.5. establish, exercise or defend legal claims or protect against liability.

7.4. Organisation Accounts and Administrators

7.4.1. Where you access or use the Platform through an organisation, enterprise or business account, designated administrators of such account may have access to and control over certain account information, User Content, Outputs and activity associated with your use of the Platform.

7.5. A list of material third-party service providers and sub processors engaged by Esgenix may be maintained and updated from time to time and made available upon request or through the Platform.

7.6. Esgenix shall take all reasonable steps to ensure that all such third parties maintain adequate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or misuse.

7.7. Esgenix does not permit service providers or organization users to use Platform‑derived personal data for any promotional purposes, and any misuse or unauthorized access may result in suspension, termination, or legal action, in addition to statutory consequences.

7.8. Where data may be processed or stored using secure cloud infrastructure located outside India, such transfers will comply with applicable law. We ensure that equivalent levels of data protection and confidentiality are maintained.

7.9. All vendors or service providers handling data on our behalf are bound by confidentiality obligations and data protection clauses consistent with applicable law.

8. Data Sharing with Organisation Admins and Authorized Users

8.1. Where the Platform is accessed under an organisation’s account, you must ensure that the Outputs and related data are visible and can be accessed only by designated administrators and authorised users within that organisation.

9. Grievance Handling/Breach Notification

9.1. If you become aware of or reasonably suspect any unauthorised use of your account, compromise of login credentials, security breach or misuse of the Platform through your account, you shall promptly notify Esgenix and, in any event, within 24 (twenty-four) hours of becoming aware of such event.

9.2. If a data breach affecting your personal data occurs, we will notify you promptly with relevant details and recommended steps, within 24 hours of becoming aware of such event. We will update you from time to time on the remedial actions taken until such breach has been resolved. We will also notify the competent authority and take corrective action to mitigate the impact and prevent recurrence.

9.3. For concerns, complaints, or requests regarding your personal data, you may contact our Grievance Officer at the details provided below. All complaints will be acknowledged and addressed within legally prescribed timelines. You may also contact the Grievance Officer for any questions or clarifications regarding the collection, use, storage, or processing of your personal data.

Grievance Officer: Mr. C R Jacob

Email: info@esgenix.com

Address: Syncinvent Labs Private Limited, No. 1 Venus Hebron, Ground Floor, 4^th G Main Road, Kacharakani Halli, HRBR 2^nd Block, Kalyan Nagar, Bengaluru – 560 043, Karnataka, India

10. Updates to the Privacy Policy

10.1. We may amend or update this Privacy Policy at any time. Any revisions shall be duly informed as and when they occur.

10.2. Your continued use of the Platform after a revised Privacy Policy has been posted will constitute your acknowledgement and acceptance of the updated terms.

11. Governing Law

11.1. This Privacy Policy is governed by Indian law. Any disputes arising from or connected to this Privacy Policy shall be adjudicated by a court having competent jurisdiction in India.