Privacy Policy
1. Who we are
This policy explains how Litehouse, DBS Heritage House, Prescot Road, Fort, Mumbai 400001 ("Litehouse", "we", "us"), handles personal data collected through litewait.ai. For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Litehouse is the Data Fiduciary.
2. What we collect
When you join the early-access list, we collect:
- your name, city and preferred language;
- your mobile number, and whether and when it was verified;
- the date, time and version of the consent you gave.
For security, we also process your IP address to limit repeated OTP requests. We store it only as a one-way hashed value, not in readable form. Our bot-protection provider may process technical information about your browser to confirm that you are not an automated program.
We do not collect health information, medical records, payment details or government identity numbers at this stage. Please do not send us such information by email.
3. Why we use it
- to verify that the mobile number belongs to you;
- to contact you about the launch of LiteWait, availability in your city, and founding-member offers;
- to protect the Service from fraud, spam and misuse.
We process this data on the basis of your consent, which you give by ticking the consent box before requesting an OTP. We will not use your data for any other purpose without asking you first.
4. Who we share it with
We do not sell or rent your personal data. We share it only with service providers who process it on our behalf and under our instructions:
- Cloudflare, Inc.: website hosting, security, bot protection (Turnstile) and database storage;
- Twilio Inc.: sending and checking the SMS OTP.
These providers may process data on servers located outside India, including in the Asia-Pacific region and the United States, as permitted under the DPDP Act. We may also disclose data where required by law or by a lawful order of a court or government authority.
5. How long we keep it
We keep your early-access details until 12 months after LiteWait launches in your city, or until you withdraw consent, whichever is earlier. OTP request logs used for security are deleted after 30 days. After that, data is deleted or irreversibly anonymised.
6. How we protect it
All traffic to litewait.ai is encrypted with HTTPS. Access to the database is restricted to authorised Litehouse personnel. Service credentials are stored as encrypted secrets. OTPs expire after a short time and requests are rate-limited.
7. Your rights
Under the DPDP Act you have the right to:
- obtain a summary of the personal data we hold about you and how it is used;
- ask us to correct, complete or update your data;
- ask us to erase your data;
- withdraw your consent at any time, as easily as you gave it;
- nominate another person to exercise your rights in the event of your death or incapacity;
- have your grievances addressed.
To exercise any of these rights, email customer@litehouseco.com from any address, and include the mobile number you registered. Withdrawing consent does not affect processing that took place before the withdrawal.
8. Children
The Service is intended for adults aged 18 and above. We do not knowingly collect personal data of children. If you believe a child has registered, please contact us and we will delete the data.
9. Changes to this policy
We will update this page if our practices change. If a change is material, we will ask for fresh consent where the law requires it.
10. Grievance Officer
If you have a concern about how your personal data is handled, please contact our Grievance Officer:
Grievance Officer, Litehouse
DBS Heritage House, Prescot Road, Fort, Mumbai 400001
Email: customer@litehouseco.com
We will acknowledge your complaint within 72 hours and aim to resolve it within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.