Privacy Policy

Last updated: March 2026

1. Introduction

Elwise ("we," "our," or "us") operates the website https://elwise.in and provides Google Business Profile management services. This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you visit our website or use our services, in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDPA").

2. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent: When you voluntarily submit your information through our contact form or engage our services, you consent to the processing of your data for the purposes described in this policy.
  • Legitimate use: Under Section 7(a) of the DPDPA, we may process personal data that you have voluntarily provided for a specified purpose (e.g., responding to your inquiry).
  • Legal obligation: We may process data to comply with applicable laws, court orders, or regulatory requirements.

3. Information We Collect

3.1 Information You Provide

When you contact us, request a quote, or engage our services, we may collect:

  • Full name and job title
  • Email address and phone number
  • Business name, address, and website
  • Google Business Profile details shared during onboarding
  • Any other information you voluntarily provide in correspondence

3.2 Information Collected Automatically

As of March 2026, this website does not use cookies, analytics tools, or tracking technologies. We do not automatically collect any personal data when you browse our website. If this changes in the future, this policy will be updated accordingly and, where required, your consent will be obtained before any tracking is enabled.

4. How We Use Your Information

We use the personal data we collect for the following purposes:

  • Respond to your inquiries and provide customer support
  • Deliver and improve our Google Business Profile management services
  • Send service-related communications and updates
  • Comply with legal obligations and protect our rights

We will not use your personal data for any purpose beyond what is described here without obtaining your prior consent.

5. How We Use Artificial Intelligence

Elwise uses artificial intelligence (AI) as part of our service delivery. We believe in transparency about how AI is used in our operations:

5.1 What AI Is Used For

  • Review response drafting: AI generates draft responses to Google reviews on behalf of our clients. All AI-generated drafts are reviewed and approved by a human before being published.
  • Content creation: AI assists in drafting Google Business posts, business descriptions, and other profile content. All content is reviewed and edited by our team before publication.
  • Performance analysis: AI helps analyse Google Business Profile performance data to generate insights and recommendations in client reports.

5.2 Human Oversight

AI does not make autonomous decisions about client accounts. All AI-generated content and recommendations are reviewed, edited, and approved by our team before any action is taken on a client's Google Business Profile. AI is used as an assistive tool, not a decision-maker.

5.3 AI and Your Personal Data

Personal data collected through our website contact form (name, email, phone, business name) is not used to train AI models. AI processing of client data occurs only within the scope of delivering our contracted services and is subject to the data protection measures described in this policy.

6. Information Sharing and Third-Party Processors

We do not sell, rent, or trade your personal information. We may share your information with the following categories of recipients:

  • Formspree, Inc. (United States) — Our website contact form submissions are processed by Formspree, a third-party form processing service. When you submit the contact form, your name, email address, phone number, business name, and message are transmitted to and temporarily stored on Formspree's servers in the United States. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.
  • Google LLC — As necessary to manage your Google Business Profile on your behalf, under the terms of our service agreement and Google's third-party policies.
  • Hosting and infrastructure providers — Our website may be hosted on third-party platforms that process data as part of serving web pages to you.
  • Legal authorities — When required by law, court order, or governmental regulation in India.

Under Section 8 of the DPDPA, Elwise remains responsible for the protection of your personal data even when processed by third-party service providers.

7. Cross-Border Data Transfer

When you submit information through our contact form, your data is transmitted to Formspree's servers located in the United States. Under the DPDPA, cross-border transfer of personal data is permitted except to countries specifically restricted by the Central Government of India. As of March 2026, the United States is not on any restricted list. We ensure that any cross-border transfer of your data is carried out in accordance with applicable Indian law and that adequate safeguards are in place to protect your personal data.

8. Cookies and Tracking Technologies

Current status: As of March 2026, this website does not use any cookies, analytics tools, or tracking technologies. No data is collected automatically when you browse our site.

If we introduce cookies or analytics in the future, we will update this section and, where required under the DPDPA, obtain your explicit consent before any non-essential cookies are placed. Essential cookies (strictly necessary for the website to function) do not require consent, but we will clearly disclose their use.

9. Data Security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with the SPDI Rules and Section 8 of the DPDPA. These measures include encryption of data in transit (HTTPS), secure access controls, and regular review of our security practices. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: Retained for up to 12 months from the date of submission, or until your inquiry is resolved, whichever is later.
  • Client service data: Retained for the duration of the service engagement plus 3 years for legal and accounting purposes.
  • Legal obligations: Where a longer retention period is required by law, we will retain data for the minimum period required.

When your personal data is no longer needed, we will securely delete or anonymise it. You may request early deletion at any time (see Section 11).

11. Your Rights

Under the DPDPA and applicable Indian law, you have the following rights as a Data Principal:

  • Right to access: Obtain a summary of your personal data held by us and the processing activities performed on it.
  • Right to correction: Request correction of inaccurate or incomplete personal data.
  • Right to erasure: Request deletion of your personal data when it is no longer necessary for the purpose for which it was collected.
  • Right to withdraw consent: Withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Right to grievance redressal: File a complaint with us or with the Data Protection Board of India (see Section 12).
  • Right to nominate: Nominate another person to exercise your rights in the event of your death or incapacity, as provided under the DPDPA.

To exercise any of these rights, please contact our Grievance Officer (see Section 12). We will respond to your request within 30 days.

12. Grievance Officer and Complaints

In accordance with the Information Technology Act, 2000 and the DPDPA, we have appointed a Grievance Officer to address your concerns about data processing:

Grievance Officer

Elwise

Email: contactus@elwise.in

Complaint process:

  • We will acknowledge your complaint within 48 hours of receipt.
  • We will investigate and resolve your complaint within 30 days.
  • If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India as established under the DPDPA.

13. International Visitors

This website is operated from India and is primarily intended for users in India. If you are accessing this website from outside India, please be aware that your data will be transferred to and processed in India. If you are located in the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR), including the rights to data portability and to lodge a complaint with your local supervisory authority. Please contact us at contactus@elwise.in for any international privacy inquiries.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated "Last updated" date. Where changes are material, we will make reasonable efforts to notify you (e.g., via a notice on our website). We encourage you to review this policy periodically.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: