Privacy Policy
Effective date: 1 October 2026 Last updated: 1 October 2026
This Privacy Policy explains how RedBlackTree Technologies Private Limited (CIN U72200TN2002PTC050113), the company behind Methodical ("we", "us", "our"), collects and uses your personal data, and what you can do about it. It is written to meet the Digital Personal Data Protection Act, 2023 and the rules under it ("DPDP Act"), and the Information Technology Act, 2000 and the rules under it.
- 1. What this policy covers
- 2. The personal data we collect, and why
- 3. Our legal basis
- 4. Marketing
- 5. Who we share it with
- 6. Where your data is processed
- 7. How long we keep it
- 8. Your rights
- 9. How we protect it
- 10. Children
- 11. Cookies
- 12. Links to other websites
- 13. Changes to this policy
- 14. Grievance Officer and contact
1. What this policy covers
It covers personal data we collect and decide how to use — as the "data fiduciary" — when you:
- visit methodical.ai;
- fill in a form, email us, or talk to us about Methodical;
- sign up for, sign in to, or use Methodical as a User; or
- are a billing or business contact at one of our customers.
It does not cover Customer Data. When a business uses Methodical, the data its people put in — tasks, documents, tables, recordings, messages, and personal data about its staff, customers or suppliers — belongs to that business. The business decides how it is used and is the data fiduciary for it; we process it on its behalf as a "data processor", under our contract with it. If your personal data is in a Methodical account run by your employer or a company you deal with, their privacy notice applies, and requests about that data should go to them. If you contact us, we will pass your request on.
2. The personal data we collect, and why
| What | Examples | Where it comes from | Why we use it |
|---|---|---|---|
| Enquiry details | Name, work email, phone number, company, role, what you asked about, your message | You, through our contact form or email | To reply, arrange a demo, and discuss whether Methodical fits your needs |
| Account details | Name, work email, phone number, designation, department, profile picture, login credentials | You, or your organisation's administrator | To create and run your account and let you use Methodical |
| Usage and device data in Methodical | IP address, browser and device type, sign-in times, actions taken, error logs | Collected automatically when you use Methodical | To keep Methodical secure, investigate problems, provide support and improve the product |
| Website data | Pages visited, the site you came from, approximate location from IP address, browser type | Collected automatically on methodical.ai — see our Cookie Policy | To understand which pages are useful and improve the site |
| Communications | Emails, support requests, meeting notes, call details | You | To respond, support you and keep a record of our dealings |
| Billing contacts | Name, work email, phone number | You or your organisation | To invoice, collect payment and meet tax and accounting law |
| Marketing preferences | Whether you have agreed to receive updates from us | You | To send updates only to people who have asked for them |
We only ask for what we need for these purposes. We do not collect sensitive categories of personal data such as financial account details, health information or biometric data about you for our own purposes.
3. Our legal basis
We process your personal data:
- with your consent, for example when you submit our contact form, subscribe to updates, or accept analytics cookies. The notice on each form says what we will use your data for. You can withdraw consent at any time (see section 8); this does not affect processing before you withdrew;
- for a purpose you provided it for, where you have voluntarily given it to us for that purpose and have not said you object — for example, contact details you give us so that we can reply; and
- to comply with law, for example keeping invoices and tax records, or responding to lawful requests from authorities.
We do not use your personal data for any purpose you have not been told about. If we want to use it for a new purpose, we will tell you first and, where the law requires, ask for your consent. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
4. Marketing
We send marketing emails only if you have separately agreed to receive them. Agreeing to be contacted about an enquiry does not sign you up. Every marketing email has an unsubscribe link, and unsubscribing takes effect promptly.
5. Who we share it with
We never sell your personal data. We share it only with:
- Service providers who process it for us under contract and only on our instructions: cloud infrastructure (Amazon Web Services in Mumbai with backups in Hyderabad), email delivery, website analytics (see our Cookie Policy), and payment processing;
- AI model providers, when you use a Methodical feature that relies on one, as described in section 6;
- Our affiliates, where needed to provide Methodical;
- A successor business, if all or part of our business or assets is transferred, merged or reorganised, including to a company formed to run Methodical. The successor will be bound by this policy for the data it receives, and we will tell you before your data becomes subject to a different policy; and
- Authorities and others where the law requires it, or where it is needed to prevent fraud, protect the security of our systems, or protect anyone's rights or safety.
6. Where your data is processed
We store personal data in data centres in India.
Some processing happens outside India:
- AI features. When you use a feature that relies on an AI model — for example asking the Methodical Agent a question — the content needed for that request is sent to the model provider chosen for the feature, some of which may process it outside India. The providers we use are Google, OpenAI, Anthropic, xAI (the maker of Grok), Sarvam AI, and models accessed through OpenRouter.
- Website analytics. If you accept analytics cookies, Google Analytics processes website data, which may be outside India.
Transfers outside India are made only to countries not restricted by the Government of India under the DPDP Act.
7. How long we keep it
We keep personal data only as long as we need it for the purpose we collected it for, and then erase it, unless the law requires us to keep it longer.
- Enquiries that don't lead to a customer relationship: up to 24 months after our last contact.
- Account details: while the account is active, and then for up to 90 days after it closes.
- Invoices, billing and tax records: for the period required by the Companies Act, 2013 and tax law, currently eight years.
- Security and system logs: for at least the period required by law and by directions of the Indian Computer Emergency Response Team (CERT-In).
- Marketing preferences: until you unsubscribe, and then only a record that you did, so that we don't email you again.
8. Your rights
Under the DPDP Act you have the right to:
- Access: a summary of the personal data we hold about you and how we use it, and who we have shared it with;
- Correction and erasure: to have inaccurate or incomplete data corrected, completed or updated, and data we no longer need erased;
- Withdraw consent: at any time, as easily as you gave it;
- Grievance redressal: to raise a complaint with us and have it resolved; and
- Nominate: to name someone to exercise these rights for you in the event of your death or incapacity.
To exercise any of these, email privacy@methodical.ai from the address we hold for you, or tell us how to verify your identity. We will acknowledge your request promptly and respond within thirty (30) days. We may keep data we are required by law to keep, and will tell you if so.
If your data is in an account run by your employer or another business, please contact them first — see section 1.
If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.
9. How we protect it
We use reasonable security practices to protect personal data, including encryption in transit, access limited to staff who need it, logging and monitoring of access, regular backups, and staff training. No system is perfectly secure, and we cannot guarantee security. Please keep your password safe and don't reuse it elsewhere.
If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires, and report incidents to CERT-In where required.
10. Children
Methodical is a business service and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe we have, contact us and we will erase it.
11. Cookies
We use cookies and similar technologies on methodical.ai and in Methodical. Our Cookie Policy explains what they are, what we use, and how to choose.
12. Links to other websites
Our website and product may link to websites and services we don't control. Their own privacy policies apply to them.
13. Changes to this policy
We will update this policy when our practices change. We will change the "Last updated" date, and if a change is significant we will tell you by email or in Methodical before it takes effect.
14. Grievance Officer and contact
For questions, requests or complaints about your personal data, contact our Grievance Officer:
Sambhu Lakshmanan, Grievance Officer RedBlackTree Technologies Private Limited #8, Lalitha Nagar 1st Street, Papanasam Sivan Road, Santhome, Chennai 600004, India Email: privacy@methodical.ai
We will acknowledge complaints within twenty-four (24) hours and resolve them within fifteen (15) days, or within thirty (30) days for requests to exercise the rights in section 8.