Privacy Policy

1. What we collect on this website

Forms on this website. Three forms on naradatum.com submit to our own service on this domain, which stores each submission in Google Firebase Firestore: the contact form, the buyer requirement form, and the supplier application form. What we use them for is set out in section 2. The categories of information each one collects are set out below. We describe categories rather than listing every field, because the forms change; the categories are what you are being told about.

Contact form.

• Your name and email address
• Your organisation, if you supply it
• The subject and content of your message
• Any other information you choose to include

Buyer requirement form.

• Identity and contact details
• Organisation
• The model or product, and the use case
• Data purpose and deployment environment
• Languages and buyer-defined variants
• Speaker structure, recording environment and channel
• Approximate volume
• Transcript and annotation requirements
• Metadata requirements
• Rights and exclusivity requirements
• Security and delivery requirements
• Budget range
• Procurement stage and purchase path
• Timeline
• Evaluation or acceptance path
• Any other information you choose to supply

Supplier application form.

• Identity, contact and organisation details
• Language and geographic coverage
• Dataset and capability information
• Provenance and collector information
• Ownership and licensing authority
• Consent and rights evidence
• Technical format and metadata
• Volume and capacity
• Security and delivery arrangements
• Commercial information
• Any other information or evidence you choose to supply

Analytics data. We use Google Analytics 4 (measurement ID G-8VRE3396NF) to understand how visitors interact with naradatum.com: pages viewed, traffic sources, and session duration. Google Analytics is not loaded until you affirmatively accept it. Before that choice, your browser makes no request to Google Analytics or Google Tag Manager, no analytics cookie is set, and no information about your visit reaches Google. If you reject analytics, that remains the case. You can change your choice at any time from the Cookie settings control in the footer of every page. See our Cookie Policy for the specific cookies and how withdrawal is handled.

What we do not collect on this website. We do not collect voice recordings, biometric data, or payment information on naradatum.com. Voice consent, recording, QA, and payouts happen on collect.sonexis.in under separate, explicit consent flows, and are not covered by this policy.

Contributor applications. One page on this website, /collect/apply, carries a form for applying to contribute. What you enter there is sent to the NaraDatum Collect application service at api.sonexis.in, which is operated for us by Railway, a hosting provider in the United States. This policy tells you that the form exists, what it sends, and where it goes. How NaraDatum Collect then handles your application, and any voice data if your application is accepted, is governed by the NaraDatum Collect consent framework rather than by this policy.

2. How we use it, and on what authority

Information you submit to us. When you submit a contact enquiry, a buyer requirement, or a supplier application, we process the information you voluntarily provide in order to receive, evaluate and respond to your request, to operate our intake process, to prevent abuse of it, and to maintain the business records relevant to it, as permitted by applicable law. We do not add you to marketing lists without your separate consent.

Analytics. We process analytics information only after you give affirmative analytics consent through the Cookie settings control. Before that choice, and if you decline it, no analytics information is collected and nothing about your visit is transmitted. You can change that choice at any time.

Acknowledgement records. When you submit the contact, buyer requirement, or supplier application form on this website, we record that this notice was shown to you and which version you saw. That record is evidence of disclosure. It is not a consent record and does not itself authorise any processing. The contributor application form at /collect/apply does not create this record; it is submitted to NaraDatum Collect, which takes its own consent.

Legal obligations. We may retain records where required by applicable law.

Current law and future rules. This section describes our practice under the law currently in force. Where the Digital Personal Data Protection Act 2023 rules are notified and impose further obligations, we will update this notice. We do not claim compliance with rules that are not yet in force.

3. Storage and security

Contact, buyer requirement and supplier application submissions are stored in Google Firebase Firestore (hosted in Google Cloud infrastructure). Analytics data is processed by Google LLC under their data processing terms.

We do not operate our own servers to store marketing website visitor data. Firebase and Google Analytics data are governed by Google's security controls and data processing agreements.

Retention. We retain records only for as long as is reasonably necessary for the purpose for which they were collected, and for any applicable legal, contractual, security, rights-management and dispute-resolution needs. We do not publish fixed retention periods for these records.

Erasure. Erasure requests are reviewed and actioned where deletion is appropriate and legally permitted. Where a record also controls your access to sample material, erasing it will end that access; we will tell you before that happens.

Cross-border processing. The forms on this website are stored in Google Cloud infrastructure, and analytics is processed by Google LLC; that infrastructure may process data outside your country. The contributor application form at /collect/apply is sent to the NaraDatum Collect application service, which is operated for us by Railway in the United States. Where the GDPR or UK GDPR applies to a transfer of your data outside the EEA or the UK, and the destination is not covered by an adequacy decision, we rely on the appropriate safeguards for that transfer, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement or Addendum. India does not currently have an EU or UK adequacy decision, so transfers of EEA or UK personal data to India rely on those safeguards. Under Indian law, cross-border transfer is currently permitted except to any destination the Government notifies as restricted; none is notified as at the effective date above.

4. Third-party services on this website

• Google Analytics 4: analytics, consent-gated. Google's Privacy Policy.
• Google Firebase Firestore: storage for the contact, buyer requirement and supplier application forms. Google's Firebase Privacy & Security.

Google Fonts is no longer used. This site previously loaded three typefaces from Google’s font CDN on every page, which disclosed your IP address to Google before you had consented to anything. Those fonts are now served from naradatum.com itself, so no font request leaves this site.

We do not use advertising networks, retargeting pixels, or third-party data brokers on naradatum.com. We do not sell or rent your contact information to any third party.

5. Your rights

The rights you have depend on the law that applies to you. We honour the following on this website:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data from our records, where deletion is appropriate and legally permitted.
• Withdraw analytics consent: change your choice at any time from the Cookie settings control in the footer of every page.
• Complaint: lodge a complaint with the relevant data protection authority in your jurisdiction.

Which law applies. The rights above are read against the law of your jurisdiction, and no single law governs everyone.

• India: the Digital Personal Data Protection Act 2023 and its Rules. The Act's data-principal rights, including access, correction, erasure and grievance redressal, take effect as the corresponding provisions are commenced; we honour them as they come into force and do not claim compliance with obligations that are not yet in force.
• EU/EEA: the GDPR, where it applies to your data: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
• United Kingdom: the UK GDPR and the Data Protection Act 2018, giving the same set of rights for data to which they apply.
• United States: there is no single federal privacy law. Where the California Consumer Privacy Act applies to a California resident's data, that resident may exercise the CCPA rights, including to know, delete, correct and opt out of sale or sharing, and we honour a Global Privacy Control signal as an opt-out. Other US state privacy laws grant their own rights to residents of those states on their own terms. We do not represent that any single US rule applies to everyone.
• Canada: the Personal Information Protection and Electronic Documents Act, and applicable provincial laws such as Quebec's Law 25, giving rights of access and correction and requiring meaningful consent.

To exercise any of these rights, email us at privacy@naradatum.com. We will respond within 30 days, or sooner where the applicable law requires. If you are not satisfied with the response, you may escalate to our Grievance Officer at grievances@naradatum.com, whose details are in section 7.

6. Changes to this policy

We may update this policy when we change how we process data on naradatum.com. Material changes will be reflected by updating the effective date at the top of this page. Continued use of the site after the date of change constitutes acceptance of the updated policy.

7. Contact us

For questions about this Privacy Policy or to exercise your data rights: