Privacy Policy
How we collect, use, store and protect personal data under India's DPDP Act 2023 and, for EU clients, the GDPR.
Last updated
This Privacy Policy explains how Ragu and Lika IP Private Limited ("Ragulika IP", "we", "us") processes personal data when you visit fto.ragulikaip.com, contact us, create an account on our online portal, or engage our search services. We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and, for individuals in the European Economic Area, as a controller under the General Data Protection Regulation ("GDPR").
1. Personal data we collect
- Contact details you give us through our forms, email, phone or WhatsApp: name, email, phone number, organisation and role.
- Engagement details: the information and files you share about your product or invention. Technical disclosures are also treated as confidential information under our Confidentiality & NDA Policy.
- Billing details: billing name and address, GSTIN and payment status. Payments are processed by Razorpay or your bank; we never see or store your card or bank details.
- Account details (online portal): your name, email address, password (stored only as a one-way hash), optional company, phone, GSTIN and billing address, two-step verification settings, and a list of your signed-in devices (IP address and browser type).
- Search inputs and reports (online portal): the product description, features and search options you enter, and the reports we generate. They are stored encrypted and treated as confidential information.
- Google sign-in data: if you choose "Continue with Google", Google shares with us your name, email address, whether Google has verified that address, and a Google account identifier. We request only the basic
openid,emailandprofilepermissions. We do not receive your Google password, contacts, files, Gmail or any other Google data. - Technical data: IP address and browser information in server logs (for security), and — only if you consent — analytics cookies.
2. Why we use it
| Purpose | Legal ground |
|---|---|
| Replying to enquiries and quote requests | Your consent |
| Performing the searches you engage us for, including automated searches you run on the portal | Contract / your consent |
| Creating and securing your portal account, including Google sign-in | Contract |
| Invoicing, tax and accounting records | Legal obligation |
| Website security and preventing abuse | Legitimate uses (DPDP s.7) / legitimate interests (GDPR) |
| Newsletter | Consent — withdraw any time using the unsubscribe link |
| Analytics cookies | Consent via our cookie banner |
3. How we use Google user data
Information received from Google is used only to create your account, sign you in, keep your account secure (for example, linking the sign-in to an existing account with the same verified email) and contact you about your account and orders. We do not use it for advertising, do not sell it, do not share it with anyone except as described in section 4, and do not use it to train AI or machine-learning models. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
You can disconnect our app at any time at myaccount.google.com/connections. To delete the account itself, use Delete my account in Account settings or email fto.contact@ragulikaip.com.
4. Sharing
We share personal data only with service providers who help us run the business — our web and email host (Hostinger), our payment gateway (Razorpay), Google (only if you use "Continue with Google") and, where you ask us to, a patent agent or counsel bound by confidentiality. We do not sell personal data.
Patent database queries: to run an automated search, our software sends search keywords and patent classification codes derived from your description to the European Patent Office's Open Patent Services. Your name, email, full description and files are never sent. The EPO processes these queries under its own terms.
5. Retention
- Portal accounts: kept until you delete your account. Search inputs and reports are deleted from the portal 90 days after delivery; you can delete your account and its confidential data at any time in Account settings.
- Enquiries that do not become projects: deleted within 12 months.
- Technical files you send for a search: deleted 90 days after we deliver your report, or sooner on request.
- Reports, invoices and engagement records: kept for as long as required under Indian tax and company law.
6. Security
Files are exchanged over encrypted channels, access is limited to the people working on your project, reports can be password-protected, and our website uses HTTPS with modern security headers. On the portal, confidential inputs, reports and keys are encrypted at rest, passwords are hashed (Argon2id), sessions use secure HttpOnly cookies, and two-step verification is available.
7. Your rights
Subject to applicable law you may ask to: access a summary of your personal data; correct or complete it; erase it; withdraw consent; nominate another person to exercise your rights (DPDP); object to or restrict processing, or receive a portable copy (GDPR). You can download your portal data or delete your account yourself in Account settings, or email fto.contact@ragulikaip.com. You may also complain to the Data Protection Board of India or your EU supervisory authority.
8. Grievance Officer
Dr. Rupalika, Grievance Officer — rupalika@ragulikaip.com. We aim to respond within 7 working days.
9. Changes
We will post updates on this page with a new "last updated" date.
Ragu and Lika IP Private Limited, Y 2 E 120/2, Triveni Puram, Jhunsi, Prayagraj, Uttar Pradesh 211019, India.