Privacy Policy & Enterprise Data Ethics Statement.
Last Updated: September 2026. Pinnacle9 AI Technologies Pvt Ltd ("Pinnacle9", "we", "our", or "us") is committed to uncompromising standards of data protection, client confidentiality, and responsible AI governance.
1. Fundamental Principle: Zero Training on Client Data
Under no circumstances does Pinnacle9 sell, monetize, or allow client proprietary data, documents, prompts, or transaction records to be utilized for training public commercial foundation models (including those provided by OpenAI, Google, Anthropic, or Meta).
In all client implementation engagements, we architect isolated enterprise tenants (via Microsoft Azure OpenAI Service, AWS Bedrock, or private VPC clusters) with legally enforceable zero data retention agreements and complete encryption at rest (AES-256) and in transit (TLS 1.3).
2. Information We Collect
Depending on how you interact with Pinnacle9, we may collect and process the following categories of data:
- Diagnostic & Audit Inputs: When using our website audit tools (such as the real-time AI Visibility or GEO scanner), you submit a target URL, industry category, and brand name. We collect publicly observable crawl data (robots.txt, sitemap.xml, llms.txt, JSON-LD Schema) and live search grounding observations.
- Direct Inquiries: When submitting an executive consultation request, booking an audit, or messaging via WhatsApp/Phone, you provide your name, professional email address, corporate telephone number, organization name, and operational context.
- Technical Telemetry: Standard server logs, IP addresses (for rate-limiting and anti-abuse defense), browser user-agent strings, and diagnostic latency metrics.
3. Purpose and Legal Basis for Processing
We process information exclusively for legitimate business and contractual purposes:
- To execute technical website diagnostics and generate requested AI visibility audit reports.
- To deliver agreed executive advisory proposals, statements of work, and ongoing governance retainers.
- To prevent malicious scraping, denial-of-service attacks, and ensure system uptime.
- To comply with statutory obligations in India and the United States.
4. Regulatory Compliance: DPDP Act (India) & GDPR (EU)
Pinnacle9 complies with applicable data protection frameworks across our operating jurisdictions:
Data processing adheres to consent-based, purpose-limitation, and statutory data principal rights as mandated by the Digital Personal Data Protection Act of India.
European data subjects retain rights to access, rectification, erasure, and restriction of processing under Articles 15–22 of the General Data Protection Regulation.
5. Data Retention & Security Controls
Diagnostic audit records generated through our public scanner are retained temporarily for diagnostic caching and analysis, and are purged periodically. Formal advisory engagement materials are retained according to the statutory and contractual terms agreed in our client Master Services Agreements (MSA).
We employ strict technical and organizational measures, including multi-factor authentication, least-privilege role-based access control (RBAC), and automated vulnerability monitoring.
6. Contact our Data Governance Officer
For privacy inquiries, data subject access requests, or regulatory clarifications, please contact our Data Governance Officer: