1. About this policy
This policy explains how Acaiberry Technologies Pvt. Ltd. (“Acaiberry”, “we”, “us”) uses personal data when you visit https://acaiberry.io (the “Website”), contact us, apply for a job with us, or are contacted by us in a business context.
We wrote it to be read. If something is unclear, please email us at legal@acaiberry.io and we are happy to explain it for you.
What this policy does not cover
- SkinMate (skinmate.ai) has its own privacy policy.
- Omnio at an event: If you use Omnio as a participant at an event run by someone else, our Omnio Participant Privacy Notice applies. The event organiser is the main party responsible for your data there.
- Client projects: When we work for a client, the contract with that client, and any data processing terms in it, decide how we handle the data involved.
Who is responsible for your data
For the Website, enquiries, recruitment, and our own business outreach, the data controller is:
Acaiberry Technologies Pvt. Ltd.
Registered address: Chakupat, Lalitpur, Nepal
Privacy and legal contact: legal@acaiberry.io
2. The personal data we collect
The table below outlines what information we collect, in which situation, and where it originates:
| Situation | What we collect | Where it comes from |
|---|---|---|
| You visit the Website | IP address, browser and device type, pages viewed, the page that referred you, and the date and time. We also record the first and latest page you landed on in our cookies (see our Cookie Policy). | Your browser, automatically |
| You send us an enquiry | First and last name, email address, phone number, enquiry topic, and your message. The form may also record the page you came from. | You |
| You use our chat assistant | Conversation inputs during your session. We do not persistently store chat conversations. | You |
| You apply for a job | Your CV and details within it (contact details, education, work history), interview notes, and contact details of any named referees. | You, and referees you name |
| Business outreach | Your name, work email, job title, employer, and publicly accessible professional interests. | Public sources (company sites, LinkedIn, public directories) |
| You open our emails | Whether you opened or clicked an email, recorded via our CRM (HubSpot). | Your email client, automatically |
Sensitive Personal Data: We do not ask for sensitive personal data (such as health status, religion, political views, or biometric data) through the Website. Please do not provide sensitive data in contact forms, chat sessions, or CVs.
3. How we use personal data, and why
Where data protection frameworks such as the GDPR or UK GDPR apply, we require a legal basis for each processing activity:
| What we do | Data involved | Legal basis |
|---|---|---|
| Reply to enquiries, arrange calls and demos | Contact details, message | Legitimate interests (responding to requests) and pre-contractual steps |
| Run, secure, and fix the Website | Server logs, device data | Legitimate interests (keeping our services secure and reliable) |
| Measure Website usage and improve UX | Analytics cookies & usage data | Consent where mandated by law; otherwise legitimate interests |
| Attribute enquiry referral channels | Attribution cookies & form data | Consent where required; otherwise legitimate interests |
| B2B business development | Business contact information | Legitimate interests in commercial growth (you can opt out at any time) |
| Send newsletter & marketing updates | Name, email, interaction data | Consent where local law mandates; elsewhere legitimate interests (opt-out link in every email) |
| Review job applications & recruitment | CV, cover letter, interview notes | Pre-contractual steps, legitimate interests, and consent for talent pooling |
| Answer questions in chat assistant | User prompts during session | Legitimate interests (providing visitors with timely assistance) |
| Legal compliance and claims | Applicable operational records | Legal obligation and legitimate interests in dispute defense |
* We do not make automated decisions that produce legal or similarly significant effects concerning you based solely on automated processing.
4. Our AI chat assistant
We developed our interactive chat assistant in-house. It uses artificial intelligence models to formulate replies dynamically:
Outputs can occasionally be inaccurate. Always verify crucial facts with our human team before relying on them.
Do not enter sensitive, proprietary, or confidential data in the chat interface.
We do not permanently store or catalogue your personal chat conversations.
Chat outputs provide general overviews. They do not constitute professional advice nor form legally binding contracts.
7. Transfers of personal data to other countries
acAIberry is headquartered in Nepal. Our technical infrastructure and third-party cloud providers process data in several jurisdictions, which may include the European Union, the United States, and India.
Where cross-border transfers occur from regions with strict transfer mechanisms (such as the EEA or the UK) to countries without adequacy decisions, we execute lawful transfer mechanisms including the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), and participation in recognized frameworks like the EU-US Data Privacy Framework.
8. How long we keep personal data
We retain personal information only for as long as necessary to satisfy the purposes for which it was gathered:
| Data Category | Retention Period |
|---|---|
| Website server logs | 90 days |
| Analytics data | 14 months |
| Attribution cookies | Up to 180 days from visit |
| Enquiries and contact communications | 24 months after last contact (unless continuing client relationship) |
| B2B commercial contacts | Until opt-out, or 24 months after last contact |
| Marketing subscription records | Until unsubscribe (minimal suppression record maintained) |
| Job applications & candidate records | 12 months following decision (longer upon consent for talent pools) |
| Interactive chat logs | Not stored persistently |
| Statutory and compliance records | Preserved for applicable statutory duration |
9. Keeping data safe
We implement risk-appropriate technical and organizational protections, including Transport Layer Security (HTTPS encryption), role-based access management, multi-factor authentication, and strict confidentiality covenants with vendors.
In the event of a security incident compromising personal data, we will notify affected parties and regulatory supervisory authorities promptly in compliance with applicable laws.
10. Your rights
Depending on your geographical jurisdiction, you possess specific statutory rights over your personal information:
- Right to Access: Request confirmation and obtain a copy of the personal data we hold.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data where grounds permit.
- Right to Restriction: Temporarily limit processing in defined circumstances.
- Data Portability: Receive your provided data in a structured, machine-readable format.
- Right to Object: Object at any time to direct marketing or legitimate interest grounds.
- Consent Withdrawal: Withdraw previously granted consent without penalty.
- Lodge a Complaint: Lodge claims with your regional data protection authority (e.g. UK ICO).
To exercise any right, submit an email request to legal@acaiberry.io. We typically respond within one month without charge. Residents of Nepal are afforded all protections provided under the Privacy Act 2018.
11. Residents of the United States, including California
Under state frameworks such as the California Consumer Privacy Act (CCPA/CPRA), we provide notice of the categories of data collected over the preceding 12 months (identifiers, internet browsing activity, commercial info, professional or applicant data).
We do not sell personal information for financial consideration. We respect universal browser opt-out signals, including Global Privacy Control (GPC).
12. Children
Our Website is designed for enterprise clients, partners, and adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has submitted information, contact us at legal@acaiberry.io for immediate deletion.
13. Links to other sites
The Website links to external platforms, including social media networks, map providers, and affiliated initiatives (such as skinmate.ai). When navigating away from acaiberry.io, external privacy notices govern your interactions.
14. Changes to this policy
We periodically update this policy to reflect operational, legal, or regulatory developments. Any modifications will be posted here with an updated effective date. Material updates may additionally be communicated via direct notice.
15. Contact
For inquiries, exercising data subject rights, or reporting concerns, contact our legal counsel:
Appendix: Short notice for the Careers page
Candidate Privacy Notice
When you send your CV to us, Acaiberry Technologies Pvt. Ltd. processes your details to assess your application and contact you regarding career opportunities. We retain application materials for 12 months after the hiring determination, or longer if you consent to talent retention for future openings.
Your communications are processed through our enterprise mail infrastructure (Zoho). To request access or deletion of your candidate records, email legal@acaiberry.io.