This Privacy Policy explains how Built, Not Born™ handles personal data under India-facing privacy and information technology principles, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, where applicable. It is written in plain language so you can understand what we collect, why we collect it, how to withdraw consent, and how to contact us.
We collect only what we need to deliver the product, keep it secure, process payments, maintain access, improve the experience, and meet legal obligations. We do not sell your personal data. We do not share your personal data with data brokers.
For this website and product, Built, Not Born™ / Rishikar Krishna acts as the data fiduciary or controller for the personal data we decide to collect and use. Our data, privacy, consumer, and grievance contact is:
Built, Not Born™ Support
Email: support@builtnotborn.in
Website: builtnotborn.in
Google sign-in provides the account identity and authentication data needed to create and secure your Built, Not Born account. We do not receive your Google password.
Depending on how you use the product, we may collect:
The product is not designed to collect medical records, therapy notes, mental-health diagnoses, biometric data, sexual orientation, passwords, payment instrument details, government IDs, employer trade secrets, client confidential information, or legally privileged material. Do not submit those details in diagnostic free-text fields, testimonials, reflections, or support messages.
If you voluntarily include sensitive personal data or confidential third-party information in a free-text field, you confirm that you have the right to submit it. We may process it only to provide the product, protect safety/security, respond to your request, comply with law, or delete/moderate it.
Do not include employer secrets, client-confidential information or sensitive personal information. This warning applies to every diagnostic, reflection, Before the Room, After the Room, testimonial, and support free-text field.
We use personal data for specific, lawful, and product-related purposes:
Where consent is the basis for processing, consent should be free, specific, informed, unambiguous, and given through clear affirmative action. You may withdraw consent by using account controls where available or by emailing support@builtnotborn.in.
Withdrawal does not affect processing already completed before withdrawal. If you withdraw consent needed to provide a feature, we may be unable to provide that feature, preserve your saved result, send requested emails, or maintain account access. We may continue processing without consent where law permits or requires it, such as for payment records, fraud prevention, security logs, legal claims, tax compliance, or lawful requests.
We use session cookies and local storage to keep the product functional and maintain sign-in state. We also use analytics and measurement tools such as Google Analytics, Google Ads tags, and Microsoft Clarity to understand aggregate usage, page performance, campaign performance, and conversion paths.
Analytics and advertising measurement tools may set cookies or similar identifiers. We use them to improve Built, Not Born™, debug friction, understand campaigns, and measure paid traffic. We do not sell your personal data to advertisers or data brokers. If we add consent controls, your choices will govern non-essential cookies where required by law.
Our product-event contract records completed funnel actions, an anonymous product identifier, diagnostic attempt identifier, experiment and offer version, broad customer-access state, and limited technical context. It does not send diagnostic answer text, the workplace moment you describe, optional Before the Room or After the Room notes, email address, customer name, employer name, chapter body, or payment credentials in product-event payloads. After sign-in, an event may be linked to your account identifier so access state and duplicate completion events can be verified.
Artificial-intelligence infrastructure may assist the wording of a diagnostic result explanation. The approved diagnostic scoring, customer expression, and chapter mapping are determined by product logic rather than by the AI provider. The workplace moment entered in the diagnostic may be sent to the AI service to produce that explanation. Do not include confidential or sensitive information.
We share data only with service providers and processors needed to operate the product:
Processors are expected to process data only for instructed purposes, subject to their own security, privacy, and compliance obligations. We do not rent or sell personal data.
Some service providers may process or store data outside India. Where personal data is transferred or accessed internationally, we use service providers that support reasonable data protection and contractual safeguards, and we will follow applicable Indian law, including any transfer restrictions notified by the Government of India.
We use reasonable technical and organizational measures to protect personal data, including authentication controls, access limits, provider security features, HTTPS, database controls, logging, and operational review. No online system is perfectly secure. You are responsible for keeping your email, Google account, device, and browser secure.
If we become aware of a personal data breach or cyber security incident requiring notice, we will take appropriate steps to contain, assess, and notify affected users, the Data Protection Board, CERT-In, payment processors, or other authorities where legally required.
We retain personal data only as long as reasonably needed for the purposes described in this Policy, unless a longer period is required or permitted by law, payment rules, tax/accounting obligations, fraud prevention, security, dispute resolution, or legal claims.
Subject to identity verification and applicable law, you may request:
To exercise these rights, email support@builtnotborn.in. We may ask for information needed to verify your identity and locate your account. We aim to respond within 30 days where possible and within the period required by applicable law.
You can delete your account and app data from the account screen where available, or request deletion by email. The product processes eligible product-data deletion as one resumable operation before deleting the authentication account. It deletes or anonymises the profile, diagnostic results, highlights, practice entries, reading progress, entitlements, product events, testimonial or feedback content associated with the account, workplace moments, and optional private notes, subject to lawful retention requirements.
Payment and accounting evidence may be retained for tax, accounting, fraud, chargeback, dispute, legal, or regulatory purposes. Where retained, the active application-account link is detached and replaced with a minimised non-public reference. Deletion does not automatically create a refund.
You can delete an individual workplace moment from Before the Room history, or delete all workplace moments. Deleting an unreviewed prepared moment releases its free-cycle reservation. Deleting a completed reviewed cycle does not reset the free allowance.
Final accounting and legal retention wording requires review by a qualified Indian legal and tax professional.
Built, Not Born™ is intended for adults and working professionals. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account or submitted data, contact us at support@builtnotborn.in. We may delete the account and related data, subject to lawful retention.
Please provide accurate information when creating an account, purchasing access, requesting correction/erasure, leaving testimonials, or contacting support. You should not submit another person's personal data unless you have permission or another lawful basis.
Testimonials are published only when submitted voluntarily and approved for publication. Do not include confidential employer/client information, sensitive personal data, or another person's personal data in a testimonial. You may request removal by emailing support. We may retain records needed to prove consent, handle disputes, prevent fake reviews, or comply with law.
We may disclose information where required by law, court order, government direction, regulator, payment processor, or lawfully authorized agency, including for verification of identity, prevention or detection of offences, investigation, prosecution, cyber security incidents, fraud prevention, or protection of rights and safety.
We may update this Privacy Policy as the product, law, or service providers change. If changes are material, we may notify you by email, in-product notice, or website notice. Continued use of the product after changes are posted means the updated Policy applies from the stated effective date.
For privacy, data, account, consumer, or legal requests:
Built, Not Born™ Support
Email: support@builtnotborn.in
Website: builtnotborn.in
If your privacy grievance is not resolved through our contact process, you may have the right to approach the Data Protection Board of India once the relevant statutory process is available and applicable.
This policy applies to builtnotborn.in and associated services. It is governed by the laws of India, including the Information Technology Act, 2000, the IT SPDI Rules, 2011 where applicable, the Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025 as they come into force.