Privacy Policy

1. Who we are

This policy explains how ARC Infinity Lab Private Limited (CIN U74999MH2019PTC334455, "ARC Infinity Lab", "we", "us") handles personal data when you use our website (arcinfinitylab.com), our client and staff portal, and our Android app. We are the Data Fiduciary for this data under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

Registered address: Shop No. 1, Ramani Complex, Link Road, Sambhaji Nagar, Dahisar East, Mumbai, Maharashtra 400068.

2. What we collect

• Enquiry form: your name, email address, phone number (optional) and message.
• Client accounts: company name, billing and site addresses, GSTIN, names, phone numbers and email addresses of your contact persons (project manager, coordinators, accountant), and your portal login details.
• Testing work: request letters, sample and site details, test results, reports, quotations, invoices and payment records linked to your account.
• Staff accounts: name, contact details, role, attendance, salary and expense records needed to run our business.
• Mobile app: a push-notification token for your device, if you allow notifications, and the files you choose to upload.
• Technical data: login session cookies and basic page performance measurements (no advertising or cross-site tracking).

We do not knowingly collect data from children. Our services are meant for businesses and their authorised representatives.

3. Why we use it

• To reply to your enquiry and send quotations you ask for.
• To create and run your portal account, and keep it secure.
• To receive samples, carry out tests and issue and deliver test reports.
• To raise invoices, record payments and meet tax, accounting and accreditation (NABL / ISO/IEC 17025) record-keeping duties.
• To send service messages such as report-ready emails and app notifications.
• To let anyone holding a report check that it is genuine through its QR code.

We do not sell your personal data and we do not use it for advertising.

4. Who we share it with

We share personal data only with service providers that process it on our behalf, under our instructions:

• Supabase — database, file storage and login.
• Vercel — website hosting and page performance measurement.
• Resend — sending emails such as reports and statements.
• Anthropic — an AI service that reads documents our staff upload (bank statements, GST certificates) so the details do not have to be typed in by hand.
• Expo / Google Firebase — delivering push notifications to the mobile app.
• Google Maps — the map on our home page is loaded from Google, which may set its own cookies.

Some of these providers store or process data on servers outside India. We may also disclose data where the law requires it, for example to tax authorities, courts or our accreditation body.

5. Cookies

We use only the cookies needed to keep you signed in to the portal and to remember your display preferences. We do not use advertising, analytics-profiling or cross-site tracking cookies. If you block cookies in your browser the public pages still work, but you will not be able to sign in. The embedded Google map is governed by Google's own privacy policy.

6. How long we keep it

We keep personal data only as long as needed for the purposes above. Test reports, invoices and payment records are kept for the periods required by accreditation rules and by tax and company law, even after an account is closed. Enquiries that do not lead to business are deleted when no longer needed.

7. How we protect it

Access is limited by role: each client login can see only its own company's data, and staff see only the modules their job needs. Data is sent over encrypted connections. No system is completely secure; if a personal data breach happens we will inform affected users and the Data Protection Board of India as the law requires.

8. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and who we have shared it with;
• ask us to correct, complete or update it;
• ask us to erase it, where we are not required by law to keep it;
• withdraw consent you have given, for the future;
• nominate another person to exercise these rights if you die or become incapable;
• raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

Send your request to our Grievance Officer below. We may need to confirm your identity first.

9. Grievance Officer

Ankit Singh
Email: ankit@arcinfinitylab.com
Address: Shop No. 1, Ramani Complex, Link Road, Sambhaji Nagar, Dahisar East, Mumbai, Maharashtra 400068

We will acknowledge your request and respond within the time allowed by law.

10. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version.