Privacy Policy

Intribe is the Data Fiduciary responsible for the personal data processed through this platform. References to “Intribe” in this policy mean the operator of the intribe.ai service.

We collect only what we need to give you a verifiable digital identity:

• Email address — required to create your account and verify your identity (Tier 0).
• Phone number — required for Tier 1 identity verification.
• One-Time Passwords (OTPs) — short-lived codes generated for verification. Stored only until used or expired.
• Account metadata — your Decentralised Identifier (DID), account status, identity tier, timestamps, and data residency region.
• Aadhaar (Tier 2 — coming soon) — will be collected only with your separate, explicit consent under a future Aadhaar-specific notice.

We do not collect sensitive personal data (financial, health, biometric, caste/tribe, sexual orientation, religious belief, or political affiliation) unless explicitly required and separately consented to.

• To create and operate your Intribe account.
• To verify that you are the rightful holder of the contact details you claim.
• To strengthen your identity tier as you verify additional credentials.
• To communicate service-related notices (verification codes, security alerts, policy updates).
• To comply with applicable laws and respond to lawful requests from authorities.

We do not use your personal data for advertising, profiling, or training third-party models.

We process your personal data on the basis of your free, specific, informed, and unambiguous consent, as required under Section 6 of the DPDP Act. You may withdraw your consent at any time (see Section 8).

We share the minimum personal data necessary with the following service providers, who act as our Data Processors and are contractually bound to protect your data:

• Resend (United States) — to deliver email OTPs and account notifications.
• Twilio (United States) — to deliver SMS OTPs to your phone number.
• Vercel (United States) — to host and serve the Intribe application.
• Supabase — to store your account data in our primary database, in the Asia Pacific (Mumbai, ap-south-1) region.

We do not sell your personal data and we do not share it with advertisers or data brokers.

Your primary account data is stored in India (Mumbai region). However, email and SMS verification flows are processed by Resend and Twilio, which operate infrastructure in the United States. By using Intribe and accepting this policy, you consent to this limited, purpose-bound cross-border transfer of your email address and phone number for the sole purpose of delivering verification codes.

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or for the period required under applicable law (whichever is longer). Specifically:

• OTPs: deleted automatically on use or expiry (typically within 10 minutes).
• Email and phone number: retained while your account is active.
• Account metadata: retained while your account is active.
• After account deletion: erased within the timeframes required by applicable law, except where retention is mandated by statute (e.g., tax, anti-fraud, or law-enforcement requirements).

As a Data Principal, you have the following rights:

• Right to access — obtain a summary of personal data we process about you and the processors we share it with.
• Right to correction and updating — request correction of inaccurate or out-of-date data.
• Right to erasure — request deletion of your personal data, subject to legal retention requirements.
• Right to withdraw consent — withdraw your consent at any time. We will stop processing your data, though processing done prior to withdrawal remains lawful.
• Right to grievance redressal — raise a complaint with our Grievance Officer (Section 10).
• Right to nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email grievance@intribe.ai from the email address registered with your Intribe account.

Intribe is not intended for use by individuals under 18 years of age. We do not knowingly process personal data of minors. If you become aware that a minor has provided us personal data, please contact our Grievance Officer immediately and we will erase it.

If you are not satisfied with our response to your grievance, you may escalate the matter to the Data Protection Board of India established under Section 18 of the DPDP Act.

We take reasonable security safeguards to protect your personal data from unauthorised access, disclosure, alteration, or loss. These include encryption in transit (TLS), encryption at rest, strict access controls, and time-bound OTPs. No system is perfectly secure; in the unlikely event of a personal data breach, we will notify you and the Data Protection Board as required by law.

Intribe uses only essential cookies required to keep you signed in and to operate core features of the service. We do not use third-party analytics, advertising, or tracking cookies.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. Continued use of Intribe after such changes constitutes acceptance of the revised policy.