Em EMPIRITH LABS
CONTACT
LEGAL — 01 · PRIVACY

Privacy Policy

LAST UPDATED — 9 SEPTEMBER 2026

This site collects very little. It sets no cookies and runs no analytics. The only personal information we hold is what you choose to send us through the contact form or a job application. This page explains exactly what that is, why we keep it, for how long, and how to have it corrected or deleted.

1. Who we are and how to reach us

Empirith Labs is an empirical research institution based in Chennai, Tamil Nadu, India. It operates the website at empirithlabs.com (“the site”).

For anything in this policy — questions, requests or complaints — write to [email protected], marked for the attention of Santhosh Kumar SampathKumar, Founder. That address is also our grievance contact for the purposes of India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under it.

2. What we collect

We collect personal information in three situations, and only these three.

(a) Contact inquiries

When you submit the form on our contact page we receive: your name; your email address; your organisation, if you give one; the research domain you select; and the message you write.

(b) Job applications

When you apply for a role through our careers page we receive: your name; email address; phone number; location; years of experience; notice period; the role you are applying for; your current role, expected salary and education, if you give them; links to your LinkedIn profile or portfolio, if you give them; how you heard about us; a covering message; your résumé file (PDF, DOC or DOCX); and a record that you ticked the consent box.

(c) Technical data

Each inquiry and application record is stored with the date and time it was submitted and the IP address it was sent from. Separately, to limit abuse, our hosting provider may keep a count of submissions per IP address; that count is deleted automatically after 24 hours and is not linked to your name or message.

We do not knowingly collect special categories of data — health, caste, religion, biometrics, financial account details — and ask that you do not send them to us.

3. What we do not collect

The site does not set cookies of any kind: not for analytics, not for advertising, not for preferences. It does not use Google Analytics or any other analytics or tracking service. It does not embed social-media widgets, advertising pixels or session-recording tools. It does not store anything in your browser’s local storage.

Simply visiting and reading the site sends us no personal information beyond what your browser and our hosting provider exchange to deliver the page (see section 5).

4. Why we use it

  • Contact inquiries — to read and answer your message, and to follow up on any research, partnership or collaboration you raise. We use the information for that purpose and no other. We do not add you to a mailing list.
  • Job applications — to assess your application for the role you applied to, to contact you about it, and, if you consent, to consider you for similar roles that open later. You give this consent by ticking the box on the application form; you can withdraw it at any time (section 8).
  • Technical data — to keep the forms working, to prevent spam and abuse, and to investigate a security incident if one occurs.

We do not sell personal information. We do not share it with anyone for marketing. We do not use it to train models or for any automated decision-making.

5. Who processes it for us

We rely on a small number of service providers, each of which handles data only to provide its service to us:

  • Cloudflare, Inc. — hosts and serves the site, and runs the code that receives form submissions. Like any web host, Cloudflare sees the IP address and request details of every visitor in order to deliver pages. It may also run a bot-detection challenge (Turnstile) on the forms. Cloudflare’s privacy policy.
  • Supabase, Inc. — stores inquiry and application records in a database, and stores résumé files in a private storage bucket that is not publicly accessible. Supabase’s privacy policy.
  • Google LLC (Google Fonts) — the site’s typefaces are loaded from Google’s font service; when your browser fetches them, Google receives your IP address and the page that requested them. Google’s privacy policy.
  • cdnjs (operated by Cloudflare) — some pages load open-source JavaScript libraries from this content delivery network; it receives your IP address when your browser fetches them.

No other third party receives your personal information, except where we are required to disclose it by law, a court order or a lawful request from a public authority — and then only to the extent required.

6. Where it is stored

Our service providers operate data centres in several countries. Records and files may therefore be stored and processed outside India. Where that happens, we rely on the provider’s contractual commitments to protect the data to a standard consistent with Indian law.

7. How long we keep it

  • Contact inquiries — 24 months from the date you submit them, then deleted.
  • Job applications and résumés — 12 months after the role you applied for closes or a decision is made on your application, whichever is later, then deleted. If you asked us to keep your application on file for future roles, the same 12 months runs from your last contact with us.
  • Submission counts used to limit abuse — 24 hours, automatically.
  • IP addresses and timestamps attached to a record are deleted with that record.

We keep information longer only where the law requires it, or where it is needed to establish, exercise or defend a legal claim.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

  • ask what personal information we hold about you and receive a copy;
  • have inaccurate or incomplete information corrected or completed;
  • have your information deleted, unless we must keep it by law;
  • withdraw consent you have given — for example, for us to hold your application. Withdrawal does not affect anything done before it;
  • nominate another person to exercise these rights for you if you are unable to;
  • raise a grievance with us and, if you are not satisfied with our response, with the Data Protection Board of India.

To exercise any of these, email [email protected] from the address you used when you contacted us, or tell us how we can confirm it is you. We will respond within 30 days. There is no charge.

9. Security

The site is served only over HTTPS, with HTTP Strict Transport Security. Form submissions are received by server-side code; the credentials that write to the database and storage never reach your browser. Résumés are held in a private bucket and are not reachable by URL. Access to stored records is limited to the people at Empirith Labs who need it to answer you or assess your application.

No system is perfectly secure. If we learn of a breach affecting your data, we will tell you and the Data Protection Board of India as the law requires.

10. Children

The site is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, email us and we will delete it.

11. Changes to this policy

We will update this page when our practices change and will change the “last updated” date at the top. If a change materially affects information we already hold about you, we will make reasonable efforts to tell you by email.

12. Contact

Empirith Labs · Chennai, Tamil Nadu, India
[email protected] · Attention: Santhosh Kumar SampathKumar, Founder

See also our Terms of Use.