This Privacy Policy explains how Azul Elefant collects, uses, and protects the information you share with us — through our website, YALI (our AI brand advisor), discovery calls, Academy enrolment, and any services we deliver. We comply with India's Digital Personal Data Protection Act 2023 (DPDP Act) and applicable data protection principles. We believe in plain language over legal jargon.
Who We Are
Data Fiduciary: Azul Elefant
Operated by: Illam Parithi
Type: Sole proprietorship
Location: Tamil Nadu, India
Website: azulelefant.tech
We are an AI-powered brand authority studio. We deliver brand strategy, AI video production, automation systems, and AE Academy (AI training for founders, students, and video creators).
Grievance contact: hello@azulelefant.com — we acknowledge within 48 hours and aim to resolve within 30 days.
What We Collect
Information you give us directly:
- Name, email address, phone number, and company name — when you fill a contact form, book a discovery call, or interact with YALI
- Message content — what you type in forms or chat widgets
- Business details — name, industry, challenges, goals — shared during a consultation or Brand Deep Dive
- Project briefs, files, and creative content you share during an engagement
- Booking reference and payment reference number (we do not store full card details)
- WhatsApp communication content when you message us via WhatsApp Business
- AE Academy student details — name, email, course enrolled, attendance, and (for minors under 18) parent or guardian name and contact
- YALI conversation content — questions, business context, and information you share in the chat
Information collected automatically when you visit our website:
- Page views, session duration, device type, approximate location — via Google Analytics (GA4)
- Ad interaction data — via Meta Pixel (anonymised)
- Heatmaps, scroll depth, and session recordings (with personal identifiers masked) — via Microsoft Clarity
- Standard server logs — IP address, browser type, referring URL, timestamp — via Vercel hosting
How We Use It
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Respond to your enquiry or booking request | Name, email, phone, message | Your request / Legitimate interest |
| Deliver agreed services (branding, production, systems, Academy) | Project brief, business details, files | Contract performance |
| Project follow-ups and status updates | Name, email, project context | Legitimate interest / Consent |
| Run YALI brand diagnosis and route enquiries | YALI conversation content, contact details | Legitimate interest (you initiate the interaction) |
| Book and manage discovery calls | Name, email, phone, booking reference | Your request / Contract |
| Process payments and issue invoices | Name, email, payment reference | Contract performance / Legal obligation |
| Improve our website and YALI's performance | Anonymised analytics, session data | Legitimate interest |
| Marketing communications (newsletter, offers, content) | Name, email | Separate explicit consent only — you can withdraw at any time |
We do not sell your personal data. We do not share your data with third parties for advertising targeting beyond what is described in Section 06.
YALI / AI Notice
Important — please read before using YALI
YALI is an AI brand advisor. It is designed to answer brand strategy questions, route enquiries, and support follow-up — not to provide legal, financial, medical, or investment advice.
Do not submit passwords, full bank account details, government-issued ID numbers, confidential trade secrets, medical records, personal health information, or any other sensitive personal data in YALI.
Conversations you have with YALI may be processed by OpenAI's infrastructure to generate responses. They may also be used to route your enquiry to our team and support follow-up via HubSpot CRM. OpenAI processes data under its own privacy policy.
Human review is required before acting on any YALI output for business-critical decisions.
Children's Data
AE Academy is open to participants aged 13 and above, including minors. We take children's privacy seriously and operate with the following safeguards:
- Parental / guardian consent required before a minor is enrolled, makes payment, receives a certificate, or joins any community or group channel.
- We collect only the information necessary to deliver the course: student name, email, course enrolled, attendance, and parent/guardian contact.
- We do not use children's data for behavioural advertising, profiling, or any purpose beyond course delivery and certification.
- We do not knowingly collect data from children under 13. If you believe a child under 13 has submitted data without parental consent, contact us immediately at hello@azulelefant.com and we will delete it promptly.
- Parents and guardians may request access to, correction of, or deletion of their child's data at any time.
Who We Share Data With
We share data only with the tools and services required to operate our business. We do not sell data. Each tool is used for a specific, limited purpose.
| Tool / Service | Purpose | Data Shared |
|---|---|---|
| HubSpot | CRM — lead tracking, client management, follow-up sequences | Name, email, phone, company, message, deal stage |
| N8N (self-hosted) | Automation workflows — routing, notifications, integrations | Contact details for routing and follow-up triggers |
| WhatsApp Business | Direct client communication and project updates | Phone number, message content |
| Google (GA4) | Website analytics — traffic, sessions, behaviour | Anonymised usage data, approximate location |
| Meta Pixel | Ad performance measurement and campaign optimisation | Anonymised interaction and event data |
| Microsoft Clarity | UX analytics — heatmaps, session recordings (PII masked) | Anonymised session and click data |
| OpenAI | Powers YALI — generates brand advice and routes enquiries | Conversation content you submit to YALI |
| Vercel | Website hosting and deployment | Server logs — IP, browser type, referrer |
| Supabase | Database — stores form submissions and structured content | Form data, YALI interaction records |
All third-party tools operate under their own privacy policies and terms. We recommend reviewing those if you want details on how each provider handles data.
Data Retention
We keep your data only for as long as necessary for the purpose it was collected.
| Data Type | Retention Period |
|---|---|
| Leads and enquiry contacts (CRM) | 24 months from last interaction |
| Discovery call records and notes | 24 months from call date |
| Project files, briefs, and deliverables | Duration of engagement + 1 year |
| Invoices and payment records | As required by applicable tax law (typically 7 years) |
| YALI conversation logs | 12–24 months, subject to OpenAI's own retention terms |
| Academy student records | Course duration + reasonable admin period (up to 2 years) |
| Website analytics (GA4) | 14 months (Google's default retention setting) |
| Microsoft Clarity session data | Per Clarity's default retention policy |
| Server logs (Vercel) | Standard hosting log retention (typically 30–90 days) |
You may request early deletion of your data at any time. See Section 08 for how to exercise this right.
Your Rights
Under India's DPDP Act and applicable data protection principles, you have the following rights as a Data Principal:
- Access — request a summary of the personal data we hold about you
- Correct — request correction of inaccurate or incomplete data
- Delete — request erasure of your personal data (subject to legal retention obligations)
- Withdraw consent for marketing — unsubscribe from emails or marketing communications at any time using the link in any email or by contacting us
- Opt out of WhatsApp — reply STOP to any WhatsApp message from us and we will remove you from automated messaging
- Lodge a grievance — if you believe your data rights have not been respected, contact our Grievance Officer (Section 12)
To exercise any of these rights, email hello@azulelefant.com with the subject line “Data Rights Request”. We will respond within 7 business days and aim to resolve within 30 days.
Cookies
azulelefant.tech uses cookies and similar tracking technologies. A cookie consent banner is shown on your first visit. You may change your preferences at any time through your browser settings.
| Category | Tools Used | Purpose |
|---|---|---|
| Strictly Necessary | Session cookies, security tokens | Required for the website to function — cannot be disabled |
| Analytics | Google Analytics (GA4), Microsoft Clarity | Understand how visitors use the site so we can improve it |
| Marketing | Meta Pixel | Measure ad campaign performance and understand audience behaviour |
To manage cookies: open your browser settings and navigate to the cookies or privacy section. You can block or delete cookies at any time. Disabling analytics or marketing cookies will not affect your ability to browse or use the site.
Note: third-party tools (Google, Meta, Microsoft) may set their own cookies independently. Refer to their privacy policies for details.
Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or loss:
- Website: Hosted on Vercel with HTTPS encryption and standard security configurations
- CRM: HubSpot with role-based access controls and two-factor authentication
- Automation: Self-hosted N8N on a secured VPS with access restricted to authorised team members
- Database: Supabase with row-level security and encrypted connections
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
In the event of a data breach: we will assess impact, contain the incident, notify affected individuals as required, and report to the relevant authority as required under applicable law.
If you have concerns about data security, contact hello@azulelefant.com.
Changes to This Policy
We may update this policy as our services, tools, or applicable law changes. When we do, we will update the “Last updated” date shown at the top of this page. For significant changes, we may notify active contacts by email.
Continued use of our website or services after a change is published constitutes acceptance of the updated policy. If you do not agree to the updated policy, please discontinue use and contact us to close your account or delete your data.
Grievance & Contact
Under the DPDP Act, you have the right to lodge a grievance with us as the Data Fiduciary. We take all grievances seriously and respond promptly.
Grievance Officer: Illam Parithi
Organisation: Azul Elefant
Email: hello@azulelefant.com
Address: Tamil Nadu, India
- Acknowledgement within 48 hours of receiving your grievance
- Resolution target: 30 days from date of receipt
If you are not satisfied with our response, you may escalate to the Data Protection Board of India once the Board is established under the DPDP Act 2023.
International Users
Azul Elefant is based in India. If you access our website or services from outside India, please be aware that your personal data may be:
- Processed and stored in India, where our team and primary systems are located
- Processed by global service providers (such as Google, Meta, Microsoft, OpenAI, HubSpot, and Vercel), who may store data in multiple countries
EU and UK users: Your standard data protection rights apply — including the right to access, deletion, portability, and objection. We honour these rights regardless of your location. Contact us at hello@azulelefant.com to exercise any right.
By using azulelefant.tech, international users consent to their data being processed as described in this policy, including transfer to and processing in India and by our global service providers.
Last updated: May 2026 · DPDP-compliant · Version 2.0
View Terms & Conditions →