Privacy Policy
Notice under the Digital Personal Data Protection Act, 2023 (India) — the “DPDP Act”. Last updated 2026-06-23.
This page is maintained by Knowledge Capital Consulting LLP (the “Data Fiduciary”) to describe how personal data is collected and used in the 4-D AI Maturity Assessment application. It is not a legal certification.
1. Who we are (Data Fiduciary)
Knowledge Capital Consulting LLP
5/4, Assisi Nagar, P L Lokhande Marg, Chembur, Mumbai 400043
Email: david@transactmedia.in
2. Personal data we collect
- Identity & contact: full name, work email, role/title, organisation.
- Assessment data: persona selection, answers, scores, attempt timestamps and duration, AI-generated training recommendations.
- Account & technical: authentication identifiers, sign-in events, IP address and user-agent at the time of consent, basic audit logs.
3. Purposes of processing
- To provide the assessment, save your results and enable re-runs.
- To generate role-appropriate AI training recommendations and personalised dashboards.
- To produce aggregate organisation-level reports for admins and organisation leads of your company.
- To secure the service, prevent misuse, and comply with applicable law.
4. Lawful basis — your consent
We process the personal data listed above on the basis of your free, specific, informed, unconditional and unambiguous consent obtained at sign-up and re-confirmed when this policy changes, in line with Section 6 of the DPDP Act. Certain limited processing may also rely on “legitimate uses” permitted by Section 7 of the DPDP Act (for example, to comply with a legal obligation).
5. Your rights as a Data Principal
Under the DPDP Act you have the right to:
- Access a summary of your personal data and how it is being processed.
- Correct, complete, update or erase your personal data.
- Withdraw your consent at any time (this will end further processing).
- Nominate another person to exercise your rights in the event of death or incapacity.
- Have your grievances addressed by the Grievance Officer named below.
To exercise any of these rights, email david@transactmedia.in. You may also delete your account from within the application, which withdraws consent and triggers erasure of your personal data subject to legal retention requirements.
6. Data Protection Officer & Grievance Officer
Data Protection Officer: Naomi David — Email: Naomidavid005@gmail.com
In accordance with Section 8(9) of the DPDP Act, the Data Fiduciary has appointed a Grievance Officer:
Naomi David
Email: Naomidavid005@gmail.com
We will respond to grievances within the timelines prescribed by the DPDP Act and associated Rules. If you are not satisfied with our response, you may approach the Data Protection Board of India.
7. Retention & deletion
We retain your personal data only for as long as needed to provide the assessment service and to maintain historical assessment trends for your account. When you withdraw consent or delete your account, your identifiable assessment data is erased, except where retention is required by law.
8. Data storage location
Personal data collected through this application is processed and stored on infrastructure located in India. We do not transfer personal data outside India for processing.
9. Sharing of data
We do not sell your personal data. Within your organisation, aggregated and individual assessment data is visible to designated administrators and organisation leads of your company for reporting purposes. We share data with service providers (e.g., authentication, hosting, AI processing) only to the extent necessary to run the service, under contractual confidentiality obligations.
10. Security
We use reasonable security safeguards, including row-level access controls, role-based authorisation, and encrypted transport (HTTPS), to protect your personal data against unauthorised access, disclosure or loss. In the event of a personal data breach, we will notify the Data Protection Board and affected Data Principals as required by the DPDP Act.
11. Children
This service is intended for working professionals and is not directed at children under 18. We do not knowingly process personal data of children without verifiable parental consent.
12. Changes to this policy
We may update this policy from time to time. When we make a material change, we will publish the updated version here and ask you to re-confirm your consent on next sign-in. The current version is v2026-06-23.