Privacy Policy

This Privacy Policy explains how Mantis Predict Pvt. Ltd. ("Mantis Predict", "we", "us") collects, uses, shares, and protects information in connection with our B2B revenue strategy services, our website (mantispredict.com), and related communications.

It applies to business clients, prospects, and website visitors worldwide. By using our services or website, you acknowledge this Policy.

Mantis Predict Pvt. Ltd. is a company incorporated in India with its registered office in Maharashtra, and acts as the data controller for personal data described here.

For privacy queries, data-subject requests, or complaints, reach us through the verified official channels listed in Section 17. We respond within 30 days, or within 15 days where required under India's DPDP Act 2023.

Identity and contact data (name, business email, company, job title, phone). Technical data (IP address, browser type, device, approximate location, session identifiers). Business data (revenue figures, internal metrics, CRM exports, and other material you share during engagements). Communication data (emails, calls, meeting notes, messages). Marketing data (preferences, opt-ins).

We do not knowingly collect special-category data or data from individuals under 18.

We use your information to deliver and improve our services, schedule and prepare for discovery sessions, produce deliverables (audits, dashboards, reports, roadmaps), invoice and process payments, maintain internal records, defend legal claims, send service-related updates, operate and secure our website, and comply with applicable law.

We do not use your data for solely automated decisions that produce legal or similarly significant effects.

Under the EU/UK GDPR we rely on: performance of a contract (service delivery), consent (marketing emails and non-essential cookies), legitimate interest (security, fraud prevention, service improvement), and legal obligation (tax, accounting, regulatory).

Under India's DPDP Act 2023 we rely on consent and legitimate uses. You may withdraw consent at any time without affecting processing already carried out.

We use essential cookies (session, security, preferences) at all times. Analytics and functional cookies are opt-in via the consent banner. We do not use advertising, profiling, or cross-site tracking cookies.

We honor the Do Not Track (DNT) header and the Global Privacy Control (GPC) signal. You can manage or clear cookies through the banner or your browser settings.

We share data only with trusted sub-processors required to operate our business: cloud hosting, email delivery, calendar scheduling (Cal.com), payment processing, analytics, and secure file storage. Each is bound by contract and confidentiality.

We do not sell or rent personal data. We may disclose information if required by law, valid legal process, or to protect rights, property, or safety. A current list of sub-processors is available on request.

Some of our sub-processors operate outside India or your country of residence. For EU/UK personal data transferred outside adequate jurisdictions we rely on Standard Contractual Clauses (SCCs) together with supplementary measures where appropriate.

For transfers involving Indian data we apply the DPDP Act's cross-border provisions. We implement reasonable technical and organizational safeguards for every transfer.

Active client project data is retained for the term of the engagement plus seven years to meet Indian Companies Act and tax obligations. Prospect data is retained for up to 24 months of inactivity, then deleted. Marketing contacts are retained until you opt out. Website and security logs are kept for 12 months. Backups are cycled out within 90 days.

You may request earlier deletion subject to mandatory retention obligations.

Depending on your jurisdiction, you may have rights to: access your personal data, correct inaccurate data, request deletion (the right to be forgotten), restrict or object to processing, data portability, withdraw consent, and lodge a complaint with a supervisory authority (for example the ICO in the UK, the CNIL in France, the Data Protection Board of India, or your state Attorney General).

We do not charge for legitimate requests and may ask for identity verification before acting.

We apply industry-standard safeguards: TLS 1.2+ encryption in transit, encryption at rest for sensitive client data, role-based access controls, multi-factor authentication on internal systems, vetted storage providers, annual security reviews, and a documented incident-response procedure.

If a personal data breach occurs, we will notify the relevant supervisory authority within 72 hours where required under the GDPR, and affected individuals without undue delay where the law requires it.

Our services are strictly business-to-business consulting on revenue strategy, diagnostics, and growth. We are not a statutory auditor, chartered accountant, tax adviser, legal counsel, or regulated financial adviser.

Our deliverables are strategic recommendations and do not constitute regulated advice. Clients remain responsible for their own implementation and compliance decisions.

All engagements require a 50% advance payment before work begins. Payments are non-refundable once booked, because work begins immediately with research, planning, scheduling, and resource allocation.

Refunds are at our sole discretion and only in exceptional cases. Invoicing and taxes follow applicable Indian law, including GST where relevant.

Our services and website are directed to businesses and not to individuals under 18. We do not knowingly collect personal data from minors.

If we learn that we have inadvertently collected such data, we will delete it promptly.

We may update this Policy from time to time to reflect changes in our practices, technology, or the law. Material changes will be communicated to active clients by email and posted here. The "Last updated" date at the top of this page reflects the current version.

Continued use of our services after an update constitutes acceptance of the revised Policy.

This Policy is governed by the laws of India. Any disputes arising out of or relating to this Policy fall within the exclusive jurisdiction of the courts of Maharashtra, India.

Nothing in this Policy limits any non-waivable rights you have under your local consumer or data-protection law.

Verified official channels: LinkedIn (linkedin.com/company/mantis-predict), X (@mantispredict), and Instagram (@mantis.predict). For data-subject requests, privacy complaints, or questions about this Policy, please include the word "Privacy" in your subject line or message so we can route your request to the right team.