Uber Media Labs (“we”, “us”, “our”) is an AI-automation and digital agency operating from Mumbai and Bangalore, India. This Privacy Policy explains what personal information we collect through ubermedialabs.com (the “Site”) and the services we provide, how we use it, and the choices you have. By using the Site or our services, you agree to the practices described here.
1. What we collect
We try not to collect anything we don’t need. The categories below cover everything that may be collected through normal use of the Site.
- Information you give us directly — name, work email, phone number, company, role, monthly revenue range, and the message content you submit through our contact forms or the Free Audit request.
- Communications — the content of emails, calls, and meeting notes when you correspond with us about a project, audit, or quote.
- Usage + device data — anonymised analytics from Vercel Analytics + Speed Insights (page views, referrers, broad device class, country-level location, performance metrics). We do not collect IP addresses for analytics; Vercel hashes them server-side before storage.
- Bot-defence signals — Google reCAPTCHA v3 evaluates each form submission to filter out automated abuse. reCAPTCHA may set cookies and access browser device characteristics under Google’s privacy policy.
- Cookies + similar storage — only what is strictly necessary to make the Site work (theme preference in localStorage, a session cookie for our admin console, the reCAPTCHA cookie above). We do not use third-party advertising or behavioural-tracking cookies.
2. How we use your information
- To respond to your audit request, project enquiry, or message.
- To deliver the services you have hired us for and invoice you for them.
- To improve the Site’s performance, content quality, and security (e.g. blocking abusive traffic).
- To meet our legal, tax, and accounting obligations under Indian law (including the Digital Personal Data Protection Act, 2023 — DPDPA).
We do not sell your personal information. We do not share it with third parties for their own marketing purposes.
3. Where your information lives
Site infrastructure, the admin console, and email correspondence run on the following processors. Each is bound by their own enterprise privacy terms; links go to their privacy policies.
- Vercel (hosting + analytics) — vercel.com/legal/privacy-policy
- Neon (database) — neon.tech/privacy-policy
- Google Workspace (Gmail + Calendar for client correspondence and meetings) — workspace.google.com/terms/privacy
- OpenRouter (LLM inference for AI-assisted features) — openrouter.ai/privacy
- Upstash (rate-limit / cache) — upstash.com/trust/privacy
- Google reCAPTCHA (bot defence) — link above under Section 1.
- Clodura.ai (B2B prospect intelligence, used only in outbound marketing for our own pipeline — never for client data) — clodura.ai/privacy-policy
Some of these providers store data outside India (notably in the EU and United States). Where we transfer personal data internationally, we rely on the providers’ standard contractual safeguards.
4. How long we keep it
- Contact form submissions— up to 24 months after our last interaction, unless you ask us to delete sooner.
- Client records(engagement contracts, invoices, project files) — for the term of the engagement plus 7 years to meet Indian tax + accounting law.
- Email correspondence— retained in Gmail under the same retention windows as above.
- Analytics— Vercel retains aggregated metrics for 12 months; we cannot tie those metrics back to an individual.
5. Your rights
You have the right to:
- Ask what personal information we hold about you and request a copy.
- Ask us to correct inaccurate information or update something outdated.
- Ask us to erase your information when it is no longer needed for the purposes above (subject to our legal retention obligations).
- Withdraw consent for processing where consent was the legal basis, including unsubscribing from any marketing communications.
- Lodge a complaint with the Data Protection Board of India under DPDPA or, if applicable, with your local supervisory authority under GDPR.
To exercise any of these rights, email us at support@ubermedialabs.com. We respond inside 30 days.
6. Children
Our Site and services are intended for business use by adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, contact us and we will delete it.
7. Security
Personal information is encrypted in transit (HTTPS everywhere) and at rest where the underlying provider supports it. Sensitive credentials are stored encrypted with AES-256-GCM. Access to the admin console is session-based, IP rate-limited, and reCAPTCHA-gated. We review third-party access quarterly.
No system is perfectly secure. If we ever detect a breach affecting your personal information, we will notify you and the appropriate authority within 72 hours of confirmation.
8. Changes to this policy
We update this Privacy Policy when our practices or the law changes. The effective date at the top reflects the latest version. Material changes are announced on this page; if we have your email on file we will also send you a heads-up.
9. Contact
Questions, requests, or complaints — email support@ubermedialabs.com or write to us at:
Uber Media Labs
Mumbai · Bangalore · Remote, India
Last reviewed: 5 May 2026.

