Privacy Policy

Gabbarinfo Digital Solutions ("Gabbarinfo", "we", "us", or "our") respects your privacy and is committed to protecting the personal data we process.

This Privacy Policy explains how we collect, use, store, disclose, protect and otherwise process personal data when you:

• visit or use the Gabbarinfo website;
• submit an enquiry or request for our digital marketing, website, SEO, content, design, video or related services;
• communicate with us through our website, email, telephone, WhatsApp or other business communication channels;
• use Gabbarinfo AI, our AI-powered digital marketing application;
• sign in to Gabbarinfo AI using Google or Facebook/Meta;
• connect your Meta/Facebook/Instagram advertising or business assets to Gabbarinfo AI; or
• otherwise interact with services operated by Gabbarinfo Digital Solutions.

This Privacy Policy is intended to address applicable requirements of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), and, where applicable, the EU General Data Protection Regulation ("GDPR") and other applicable data-protection laws.

1. WHO WE ARE

Gabbarinfo Digital Solutions operates both:

A. Gabbarinfo (Website & Services)

Our digital marketing and technology services business, through which businesses may contact us and request services such as:

• Digital Marketing
• Performance Advertising
• Website Design and Development
• SEO and Content Writing
• Graphic Design
• Video Editing
• Marketing Strategy and related services

B. Gabbarinfo AI

Our AI-powered digital marketing web application (ai.gabbarinfo.com) through which users can independently sign in and, where authorised by them, connect their Google, Facebook/Meta and related business advertising assets.

Although both activities are operated by Gabbarinfo Digital Solutions, the personal data collected and the purposes for which it is processed are different, as explained below.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data processed by Gabbarinfo in connection with:

• the Gabbarinfo website;
• enquiries and service requests;
• communications with prospective or existing clients;
• Gabbarinfo AI;
• Google authentication used by Gabbarinfo AI;
• Facebook Login/Meta authentication used by Gabbarinfo AI;
• Meta advertising and business APIs used by Gabbarinfo AI;
• information generated through the use of Gabbarinfo AI; and
• related technical, security and administrative activities.

This Privacy Policy does not govern the privacy practices of third-party websites, platforms or services that we do not control. Those services include, where applicable, Google, Meta/Facebook/Instagram and other third-party service providers. Their own privacy policies may also apply to information they independently collect or process.

3. WHAT IS PERSONAL DATA?

For purposes of this Policy, personal data means information that relates to an identified or identifiable individual, or information otherwise treated as personal data under applicable law.

Depending on how you interact with us, we may process different categories of information. We do not collect every category listed below from every user.

4. DATA COLLECTED THROUGH THE GABBARINFO WEBSITE

When you use our website or contact us for marketing or other services, we may collect information that you voluntarily provide.

4.1 Enquiry and contact information

Our enquiry form may collect:

• Full name
• Email address
• WhatsApp/mobile number, where provided
• Project title
• Project type
• Budget range
• Project timeline
• Project brief or description
• Files uploaded through the enquiry form, such as PDF/RFP documents (retained temporarily with automated expiry cleanup)
• Voice notes or recordings voluntarily submitted through the form

The exact information collected may depend on the fields you choose to complete.

4.2 Business information

Where relevant to providing our services, we may collect:

• Company/business name
• Business contact information
• Website or social-media information
• Marketing requirements
• Advertising requirements
• Project specifications
• Other information necessary to provide the requested service

4.3 Communications

If you contact us by email, telephone, WhatsApp or another communication channel, we may process:

• your contact details;
• the content of your communication;
• attachments or documents you voluntarily send;
• information necessary to respond to or manage your enquiry.

5. WHY WE PROCESS WEBSITE AND ENQUIRY DATA

We may process information collected through the Gabbarinfo website for the following purposes:

• Providing requested services: To understand your requirements, respond to enquiries, prepare proposals or quotations, communicate with you regarding your project, provide requested marketing, technology or creative services, and manage an existing client relationship.
• Pre-contractual activities: Where you contact us regarding potential services, we process information necessary to respond to your request, discuss requirements and take steps at your request before entering into a contract.
• Business communications: We may use your contact information to communicate with you regarding your enquiry, requested services, project-related matters, administrative matters, and service updates.
• Marketing: Where required by applicable law, we will obtain appropriate affirmative consent before sending direct marketing communications. You may withdraw marketing consent or opt out at any time.
• Website operation and security: We process technical information to operate our website, maintain functionality, detect abuse, prevent fraud, protect our systems, investigate security incidents, and maintain service reliability.
• Legal and regulatory purposes: We process information where necessary to comply with applicable law, respond to lawful requests, establish, exercise or defend legal claims, maintain business and accounting records, and enforce our agreements.

6. GABBARINFO AI

Gabbarinfo AI is an application operated by Gabbarinfo Digital Solutions. Gabbarinfo AI allows users to independently authenticate and use AI-powered marketing functionality, including marketing strategy generation, advertising campaign planning, creative generation and authorised Meta advertising workflows.

Gabbarinfo AI does not automatically obtain access to a user's Facebook or Google information merely because the person visits the Gabbarinfo website. Access to third-party accounts occurs only when the user affirmatively chooses to authenticate or connect those services and grants the requested permissions.

7. GOOGLE SIGN-IN

Gabbarinfo AI may allow users to sign in using Google authentication. When you choose Google Sign-In, Google may provide us with information permitted by the authentication process, which may include:

• Name;
• Email address;
• Profile information made available through the authentication process;
• Authentication/account identifiers necessary to maintain your Gabbarinfo AI account.

We use this information primarily to:

• authenticate you;
• create or maintain your Gabbarinfo AI account;
• provide access to the application;
• maintain account security;
• communicate with you regarding the service.

We do not use Google account information for purposes unrelated to the operation of Gabbarinfo AI unless separately permitted or required by applicable law. Your use of Google services is also subject to Google's own terms and privacy policies.

8. FACEBOOK / META LOGIN

Gabbarinfo AI allows users to authenticate using Facebook Login and connect Meta business assets. This specifically applies to our registered Meta Applications:

When you choose to use Facebook Login or grant permissions to Gabbarinfo AI, we may receive information made available through the permissions granted by you. Depending on the permissions granted and the functionality being used, this may include:

• Email address;
• Meta/Facebook Business Manager or Business Portfolio identifiers;
• Meta Ad Account identifiers;
• Facebook Page identifiers;
• Instagram Business Account identifiers;
• Advertising account information;
• Campaign information;
• Advertising-related metadata;
• Other business information made available through the relevant Meta APIs.

We only request and process information required for the functionality you choose to use.

9. INFORMATION WE DO NOT INTENTIONALLY COLLECT THROUGH META

Gabbarinfo AI does not intentionally request or collect personal Facebook information that is unnecessary for its business advertising functionality, including:

• Personal Facebook timelines;
• Friends lists;
• Private messages;
• Personal photographs;
• Private communications;
• Unrelated personal Facebook activity.

We do not use Meta permissions to access information beyond the permissions and functionality required by Gabbarinfo AI.

10. HOW GABBARINFO AI USES META DATA

Where you grant the relevant permissions, Meta-related information may be processed to:

• connect your Meta business assets to Gabbarinfo AI;
• identify your advertising accounts;
• assist with marketing strategy generation;
• generate advertising campaign drafts;
• generate advertising copy and creatives;
• prepare campaign information;
• upload authorised advertising creatives;
• assist with advertising workflows;
• maintain authenticated sessions;
• perform actions that you explicitly request or authorise.

11. USER CONTROL OVER META ACCESS

You remain in control of the permissions granted to Gabbarinfo AI. You may revoke or modify access through the relevant Facebook/Meta account settings or other controls made available by Meta.

You may also request deletion of information held by Gabbarinfo by contacting: contactus@gabbarinfo.com.

Revoking access through Meta may prevent Gabbarinfo AI from continuing to access Meta information or perform functionality that depends on that access. Revoking access does not necessarily delete information that we are legally required or otherwise permitted to retain.

12. AI PROCESSING

Gabbarinfo AI uses artificial-intelligence technologies to provide marketing-related functionality. Depending on the feature being used, information may be processed to:

• generate marketing strategies;
• generate advertising copy;
• generate campaign drafts;
• generate creative concepts;
• generate or process advertising creatives;
• assist with marketing recommendations;
• improve the functionality and reliability of the application.

We aim to process only information reasonably necessary for the requested functionality. Where third-party AI or cloud providers are used to provide these services, relevant information may be transmitted to those providers for processing on our behalf.

We do not use one user's private account information to provide another user's account with access to that information.

13. GENERATED IMAGES AND CREATIVE MATERIAL

Gabbarinfo AI may generate advertising-related images, text and other creative materials. Generated materials may be:

• temporarily processed;
• stored for purposes necessary to provide the requested functionality;
• uploaded to advertising accounts when you request or authorise such functionality.

We do not make one user's private generated materials available to another user. Where we state that particular generated material is temporary or deleted after a particular period, that statement applies subject to technical backups, legal obligations and other legitimate retention requirements.

14. COOKIES AND SIMILAR TECHNOLOGIES

Gabbarinfo may use cookies and similar technologies to:

• operate the website;
• maintain sessions;
• remember preferences;
• understand website usage;
• maintain security;
• measure website performance;
• improve our services;
• support analytics or advertising, where applicable.

Cookies may be:

• Essential cookies: Necessary for website functionality, security or requested services.
• Analytics cookies: Used to understand how visitors interact with the website and improve its performance.
• Advertising/marketing cookies: Where used, these may be used to measure or support advertising and marketing activities.

Where applicable law requires consent for non-essential cookies, we will request consent before placing or using those cookies. You can also control cookies through your browser settings. Disabling certain cookies may affect website functionality.

15. LOGS AND TECHNICAL INFORMATION

When you access our website or application, certain technical information may be automatically recorded. Depending on our infrastructure and security configuration, this may include:

• IP address;
• Browser and device information;
• Operating system;
• Date and time of access;
• Referring page;
• Pages or features accessed;
• Technical logs;
• Authentication/session information;
• Security and error information.

We use this information for security, troubleshooting, fraud and abuse prevention, service operation, performance monitoring, and maintaining reliable systems.

16. LEGAL BASES FOR PROCESSING — GDPR

Where the GDPR applies, we process personal data only where a lawful basis is available. Depending on the circumstances, our legal bases may include:

• Consent: Where you have provided consent for a specific purpose, such as direct marketing communications or non-essential cookies. You may withdraw consent at any time without affecting prior lawful processing.
• Contract / Pre-contractual steps: Where processing is necessary to provide a service you requested, maintain your account, or take steps at your request before entering into a contract.
• Legal obligation: Where processing is necessary to comply with applicable legal or regulatory obligations.
• Legitimate interests: Where necessary for legitimate business interests such as website and application security, fraud prevention, service administration, system maintenance, and protecting legal rights, provided that such interests are not overridden by the fundamental rights and freedoms of the individual.

17. PROCESSING UNDER THE DPDP ACT

Where the DPDP Act applies, Gabbarinfo processes digital personal data for lawful purposes and in accordance with applicable requirements concerning notice, consent where required, specified purposes, data minimisation, security safeguards, retention and erasure, user rights, and grievance redressal.

Where consent is required, we seek consent through an appropriate affirmative action rather than relying on browsewrap statements that mere use of the website constitutes consent.

In accordance with the DPDP Rules 2025, this notice is presented in a clear, standalone, and easily comprehensible manner, detailing data collected, processing purposes, means for withdrawal of consent, and mechanisms for exercising rights and grievance redressal.

18. DATA SHARING AND DISCLOSURE

We do not sell or rent your personal data. We may disclose or make personal data available where necessary for legitimate and authorised purposes, including to:

• Service providers and processors: Entities assisting us with hosting, databases, cloud infrastructure, AI processing, authentication, email delivery, communication tools, security, analytics, technical support, and application infrastructure.
• Meta: Where you use Gabbarinfo AI's Meta features, information is exchanged with Meta through official Meta APIs according to permissions authorised by you.
• Google: Where you use Google authentication or Google-related services, relevant authentication information is processed through Google's services.
• Legal authorities: Where required by applicable law, court order, governmental authority or lawful process.
• Business transactions: In connection with a merger, acquisition, restructuring, financing, sale of assets or similar transaction, subject to appropriate confidentiality safeguards.

We require service providers that process personal data on our behalf to implement appropriate technical and organisational safeguards and process information only for authorised purposes.

19. THIRD-PARTY SERVICE PROVIDERS

Depending on the particular service and technical architecture in use, Gabbarinfo may use third-party providers for the following functions:

The actual providers used may change as our infrastructure evolves. Where appropriate, we will update this Policy or provide notice when a material change affects how personal data is processed.

20. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data in countries outside India or outside the European Economic Area (EEA).

Where the GDPR applies, we ensure appropriate lawful transfer mechanisms as required by Chapter V of the GDPR, such as an adequacy decision, standard contractual clauses (SCCs), or other legally permitted safeguards.

Where the DPDP Act applies, cross-border transfers are conducted in accordance with notifications, restrictions, or frameworks prescribed by the Government of India.

21. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

• Website enquiries: Retained for the period necessary to respond to the enquiry, manage the client relationship, maintain business records, resolve disputes, and comply with legal requirements.
• Uploaded project files / voice notes: Handled with automated expiry cleanup routines (e.g. temporary staging storage deleted automatically after 7 days).
• Client/project information: Retained for the duration of the business engagement and thereafter as needed for accounting, tax, contractual, or statutory purposes.
• Gabbarinfo AI account information: Retained while your account remains active and for a reasonable period thereafter where necessary for legitimate business or compliance obligations.
• Meta-related information: Retained only while necessary to provide requested marketing workflows, maintain authorised sessions, or comply with platform policies.
• Technical and security logs: Retained for operational security, auditing, and incident prevention periods.

When personal data is no longer required, we securely delete, anonymise or dispose of it in accordance with applicable retention schedules.

22. DATA DELETION

23. WITHDRAWAL OF CONSENT

Where processing is based on consent, you may withdraw that consent at any time by:

• using application-level account settings, where available;
• revoking Meta permissions directly through your Facebook/Meta account security settings;
• revoking Google account permissions through your Google security dashboard;
• unsubscribing from marketing communications via the unsubscribe link in any promotional email;
• sending an email to contactus@gabbarinfo.com.

Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. Where another lawful basis permits continued processing (e.g. statutory record retention), we may continue processing for that specific purpose.

24. YOUR RIGHTS — GDPR

Where the GDPR applies, you may have the following statutory rights:

• Right of access (Art. 15): Obtain confirmation of processing and a copy of your personal data.
• Right to rectification (Art. 16): Correct inaccurate or incomplete information.
• Right to erasure / "Right to be forgotten" (Art. 17): Request deletion under specific statutory conditions.
• Right to restriction of processing (Art. 18): Restrict processing under certain circumstances.
• Right to object (Art. 21): Object to processing based on legitimate interests or direct marketing (you have an absolute right to object to direct marketing).
• Right to data portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without penalty.

25. YOUR RIGHTS — DPDP ACT

Where India's DPDP Act applies, Data Principals possess the following rights:

• Right to access information: Access a summary of personal data being processed and the processing activities undertaken.
• Right to correction and erasure: Request correction of inaccurate data, completion of incomplete data, updating of records, and erasure of personal data no longer necessary for the specified purpose.
• Right of grievance redressal: Access an effective grievance redressal mechanism provided by the Data Fiduciary.
• Right to nominate: Nominate another individual who shall, in the event of death or incapacity, exercise the rights of the Data Principal.

To exercise any DPDP rights, please write to contactus@gabbarinfo.com with the subject "DPDP Data Rights Request".

26. HOW TO MAKE A DATA RIGHTS REQUEST

To help us verify and process your request promptly, please include:

• Your full name;
• The email address associated with your account or enquiry;
• The specific nature of your request (access, correction, erasure, objection, etc.);
• Relevant application or account identifier, where applicable;
• Any additional information reasonably necessary to identify the relevant records.

We may request reasonable information to verify your identity before fulfilling a request to protect your data from unauthorised disclosure. We will respond within the timelines prescribed by applicable law (under GDPR, generally within one month).

27. GRIEVANCE REDRESSAL

If you have any questions, concerns, or grievances regarding our processing of your personal data, we encourage you to contact us directly so we can resolve the matter promptly:

28. GDPR SUPERVISORY AUTHORITY

If you are located in the European Economic Area (EEA) and consider that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority in your country of habitual residence, place of work, or place of the alleged infringement.

29. DATA SECURITY

We implement appropriate technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction.

These safeguards include:

• HTTPS / TLS encryption for all data in transit;
• Encryption and secure hashing for sensitive tokens and credentials;
• Strict role-based access control and principle of least privilege;
• Regular automated security reviews and system patching;
• System monitoring, logging, and error tracking;
• Regular backups and automated retention cleanup routines;
• Contractual confidentiality and data protection obligations with all processors.

While we implement robust safeguards in line with industry standards and the DPDP Rules 2025, no transmission over the Internet or digital storage method can be guaranteed 100% secure.

30. PERSONAL DATA BREACHES

In the event of a confirmed personal data breach affecting personal data processed by us, we maintain an incident response plan to investigate, contain, and mitigate the event.

• Under the DPDP Rules: We will report intimations of personal data breaches to the Data Protection Board of India and notify affected Data Principals in accordance with prescribed forms and statutory timelines.
• Under the GDPR: Where required by Article 33, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, and inform affected individuals without undue delay where there is a high risk to their rights and freedoms.

31. CHILDREN'S DATA

Our website and services are intended exclusively for businesses and adult professionals.

For the purposes of the DPDP Act, a child is defined as an individual who has not completed 18 years of age. We do not knowingly solicit, process, or collect personal data of children, nor do we engage in tracking, behavioural monitoring, or targeted advertising directed at children.

If you believe that a child has provided us with personal data, please contact us immediately at contactus@gabbarinfo.com and we will take immediate steps to delete the information.

32. DATA MINIMISATION

We practice data minimisation by collecting and retaining only personal data that is adequate, relevant, and strictly necessary for the purposes for which it is processed.

Information submitted through enquiry forms is used solely to scope and respond to the project. Permissions requested by Gabbarinfo AI through Google or Meta are limited strictly to the scopes required for the specific advertising or authentication functionality activated by the user.

33. NO SALE OF PERSONAL DATA

Gabbarinfo does not sell, rent, or trade your personal data to third parties for monetary or other commercial consideration.

34. AUTOMATED DECISION-MAKING AND PROFILING

Gabbarinfo AI utilizes artificial intelligence and automation algorithms to generate marketing recommendations, advertising copy, campaign drafts, and creative concepts. These outputs serve as assistive suggestions.

Gabbarinfo AI does not engage in automated decision-making that produces legal or similarly significant effects concerning individuals without human intervention. Users maintain full editorial oversight and must explicitly review and approve any campaign actions before publication.

35. THIRD-PARTY WEBSITES AND SERVICES

Our website or web applications may contain links to external third-party websites or services. We are not responsible for the privacy practices, content, or security of external websites. When you interact with third parties such as Meta, Google, or other platforms, their respective terms and privacy policies govern.

36. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our services, technological infrastructure, legal developments, or regulatory requirements.

When updates are published, the revised version will appear on this page with an updated "Last Updated" date. Where required by applicable law, we will provide additional notice or seek consent for material changes affecting your rights.

37. CONTACT US

38. EFFECTIVE DATE

This Privacy Policy is effective from: 4 September 2026
Last Updated: 4 September 2026