Last updated: October 16, 2026
This Privacy Policy explains how Cyberdune Technologies Pvt. Ltd. ("Cyberdunes", "we", "us" or "our"), based in Mumbai, India, handles personal data connected with the website at www.cyberdunes.com, the enquiries you send us, and the Masterclass programs and workshops we deliver. We are the Data Fiduciary for this personal data under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
This policy does not cover personal data that our clients process using Apex®, the AI-native digital experience platform (DXP). That data is covered by the agreement with each client.
What We Collect
Information You Send Us by Email
The forms on the website do not send your details to our servers. When you complete a form, it opens your email app with a pre-filled message. We receive the information only if you choose to send that email. The forms collect:
- Contact enquiry: your name, email address, phone number (optional), company (optional), what you are looking for, your timeline and your message.
- Apex® demo request: your name, work email address, company, and optionally your website, team size, the features you are interested in, your preferred time and any notes.
- Support request: your name, email address, topic, priority and your message.
- Masterclass session sign-up: your name, email address, mobile number, city and the program you are interested in.
If you email or call us directly, we receive whatever you choose to share, such as your name, contact details, your message and any attachments.
Training Participants and Clients
When you or your organization book a program, we receive the details we need to deliver it, issue invoices and issue certificates. This may include participants' names and contact details, the organization's name, billing details and GST Identification Number (GSTIN). Public sessions booked through our registration partner are also subject to that partner's privacy policy.
Technical Information
Like any website, our servers and our hosting provider process standard technical information when you visit, such as your IP address, browser type, the pages you request, the date and time, and the referring page. This is used to deliver the website and keep it secure.
The website's fonts are hosted on our own servers, so loading a page does not connect your browser to Google Fonts or any other font service.
Cookies and Browser Storage
Our Cookie Policy explains this in more detail.
The website does not use analytics, advertising or tracking cookies, and it does not use advertising networks or tracking pixels. It uses browser storage on your own device for two features:
- Recent searches: the site search remembers your last five searches in your browser's local storage so you can repeat them.
- Masterclass sign-up: the sign-up form briefly stores your name, chosen program, city and the drafted email in your browser's session storage, so the next page can open the draft in your email app. Session storage is cleared when you close the tab.
This information stays in your browser and is not sent to us. You can clear it at any time through your browser settings.
Why We Use Your Information
We use personal data only for the purposes it was shared for, which are to:
- reply to your enquiry and provide the information you asked for;
- arrange and deliver a demo of Apex®;
- respond to support requests;
- tell you about upcoming sessions of the program you signed up for;
- deliver programs and issue invoices and certificates of completion;
- meet our legal, tax and accounting obligations; and
- keep the website and our systems secure.
We process your personal data on the basis of your consent, given when you choose to send it to us for a stated purpose, or for other legitimate uses permitted by the DPDP Act, such as meeting a legal obligation. We do not sell your personal data.
Who We Share It With
- Service providers who help us run our business, such as our email and website hosting providers. They process data on our behalf and only as we instruct.
- Ritors Product Nexus, which co-issues certificates of completion, receives the participant details needed to issue a certificate.
- Authorities, when we are required to share information by law, by a court order or by a government agency acting under law.
Transfers Outside India
Some of our service providers may store or process data on servers outside India. We transfer personal data outside India only as permitted under the DPDP Act, including any restrictions the Central Government notifies.
How Long We Keep It
We keep personal data only for as long as it is needed for the purpose it was shared for. We erase it when you withdraw your consent or when that purpose is no longer being served, unless the law requires us to keep it longer. For example, invoices and related records are kept for the periods required under tax and accounting laws.
How We Protect It
The website is served only over TLS encryption (AES-256), so information passing between your browser and the website is encrypted. We take reasonable security safeguards to protect personal data from breaches, and we limit access to the people who need it. No method of transmission or storage is completely secure. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as the DPDP Act requires.
Your Rights Under the DPDP Act
You have the right to:
- Access a summary of the personal data we hold about you and how we process it, and the identities of those we have shared it with;
- Correct, complete or update your personal data;
- Erase your personal data, unless we must keep it to meet a legal obligation;
- Withdraw your consent at any time, as easily as you gave it. Withdrawal does not affect processing that took place before it;
- Grievance redressal, by raising a complaint with us about how we handle your personal data; and
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
To use any of these rights, email privacy@cyberdunes.com. We may need to confirm your identity before acting on a request. We will respond within the time required under the DPDP Act and its rules. If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.
If you are located outside India, you may also have rights under your local law. Contact us at privacy@cyberdunes.com and we will respond as that law requires.
Children
Under the DPDP Act, a child is anyone under 18. The website and our programs are not directed at children, and we do not knowingly collect personal data from children without verifiable consent from a parent or lawful guardian. If you believe a child has sent us personal data without that consent, please email privacy@cyberdunes.com and we will delete it.
Grievance Officer and Privacy Contact
For any question, request or grievance about your personal data, contact our Grievance Officer:
- Email: privacy@cyberdunes.com
- Cyberdune Technologies Pvt. Ltd., Mumbai, Maharashtra, India
- Phone: +91 79777 69368
Changes to This Policy
We may update this Privacy Policy, for example if we add new website features or services. The "Last updated" date at the top shows when it last changed. If a change significantly affects how we use personal data you have already given us, we will ask for your consent where the law requires it.