Legal

Privacy notice

Last updated: 17 September 2026

RSL Quantum Private Limited (CIN U62010DL2026PTC466369), with its registered office at A Block 6th Floor 6A1, (TCS) FITT R and I Park, Hauz Khas, New Delhi 110016, runs this website. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) we are the data fiduciary for the personal data described here. This notice explains what we collect, why, who processes it for us, how long we keep it, and how to exercise your rights.

1. Page visit records

When you open a page, your browser sends us a short visit record, and a second one when you leave the page. We use these records to understand which pages are useful and how people find us. A visit record contains:

• the page path (without the query string), the time, how long the page stayed open and how far it was scrolled;
• the domain name of the website that referred you (not its full address), and any campaign tags in the link;
• your browser, operating system and type of device. We do not keep the full user agent text, except for visits that look automated, where the first 200 characters are kept so that we can filter out bots;
• an approximate location and network estimated by our hosting provider from your internet connection: country, region, city, coordinates rounded to about 10 km, time zone, the Cloudflare data centre that served you, and the number and name of your network provider;
• a broad label we derive from the network name and the referring website, such as education, government or industry, and a flag for visits that look automated;
• a random identifier kept in your browser, which lets us tell repeat visits apart, including across days, and a random identifier for the current browsing session;
• a one-way hash of your IP address combined with a secret value and the date, so it changes every day. We do not store the IP address itself in visit records.

Visit records made before 17 September 2026 were collected with more detail and can still hold the full address of the referring page, the page address with its query string, a postal code, more precise coordinates and the full user agent text. We are removing those details from the older records; until that is done, they remain in the database.

We do not use advertising trackers or third-party advertising cookies, and we do not sell personal data. Our pages send visit records unless you turn them off. They send none if you use the switch below, if your browser sends a Do Not Track signal, if your browser blocks site storage, or if JavaScript is turned off. The children’s playground pages under /play and the cartoons page under /learn/cartoons do not send visit records at all.

2. Forms you fill in

Contact form. We receive your name, email address, organisation, topic and message, together with your country (estimated from your internet connection) and the time you sent it. They are sent by email to our inbox so that we can reply to you. The website keeps no other copy.

Investor interest, research collaboration, the chat contact card and email updates. We store what you enter (for example name, email address, organisation, role, fund size range, message, proposal summary or ORCID iD), the page you were on and your country, to follow up on your enquiry. For investor interest, the chat contact card and email updates we also store the referring web address your browser sends and, for the chat contact card, the chat session identifier. If you use the email updates bar that appears at the bottom of some pages, we store your email address and optional name to send you updates about RSL Quantum.

Company lookup. If you give a work email address on one of these forms (not a personal address such as Gmail), we visit the public home page of the website at your email domain and summarise it with an AI model, so that we can understand which organisation is writing to us. The organisation name goes into our notification about your enquiry (section 5). For investor interest, the chat contact card and email updates, we also store the summary with your enquiry. We do not look up anything about you personally.

Confirmation emails. If you give your name on the investor, chat contact card or email updates form, or send a research collaboration proposal, we send a confirmation email to the address you entered, at most two a day to the same address.

3. Chat assistant

The chat assistant at the bottom right sends your messages to an AI model run on Cloudflare to write a reply. The requests pass through Cloudflare AI Gateway, which can keep a log of each request and reply. Replies are generated automatically and can be wrong. We store each message and reply, with the time, the page you were on, the referring website, your country, a chat session identifier and a shortened version of your browser’s user agent, so that we can review conversations and follow up. Our hosting provider’s service logs can also hold an extract of each message with your country. Each message is also sent to us as a notification (see section 5). Please do not enter sensitive personal details in the chat.

4. Signed documents and document verification

If you return a signed document through the upload page, we store the PDF in private storage that is not publicly accessible, together with the document reference, file name, size, a checksum, the time of upload, your IP address and your browser’s user agent, as a record of receipt. We are notified by email. The email contains the reference, the document type, the name the document is addressed to, the file name, size and checksum, your IP address and the time.

For a reference number that is entered, the verification page shows the document type, reference, issue date, issuing party, the party the document is addressed to, subject, signing authority, whether the document is valid or revoked, and whether a signed copy is on record. For documents addressed to an individual, such as internship or offer letters, the name is shown as initials unless the person checking enters the matching full name.

5. Notifications

We receive notifications in a private Telegram chat. It receives:

• a daily summary of visit counts, the most visited pages as short paths, the referring websites and the countries of visitors, with no details about individual visitors;
• a weekly summary with counts of chat messages and enquiries, and the countries, pages and referring websites they came from, with no details about individual visitors;
• an alert for each investor interest, email updates sign-up, chat contact card or research collaboration proposal, containing your email address, name and organisation, an extract of your message (up to 200 characters), the page you were on, your country and the name of the organisation found by the company lookup;
• an alert for each chat message, containing the first 200 characters of your message, the page you were on, your country and any email address or phone number the message contains.

Contact form messages and signed document uploads are not sent to Telegram; they are sent to our inbox by email.

6. Who processes data for us

We use these service providers to run the site. Some of them process data outside India.

• Cloudflare: hosting and service logs, the database that holds the records above, private file storage for signed documents (R2), the AI models for the chat assistant and company lookup (Workers AI, with request logs in AI Gateway), the bot check on forms (Turnstile) and security protection for the site.
• Resend: sending contact form and upload notifications to our inbox, and confirmation emails to you.
• Zoho Mail: our email inboxes.
• Telegram: notifications, as described in section 5.

Our security page describes how the site protects data and how to report a security problem.

7. Cookies and browser storage

• rslq-vid (local storage) and rslq-sid (session storage): the random identifiers used in visit records.
• rslq-no-visits (local storage): remembers that you turned visit records off with the switch in section 1.
• rslq-exit-done (local storage): remembers that you closed or used the email updates bar.
• rslq-chat-sid and rslq-lead-shown (session storage): keep a chat conversation together within one browsing session.
• rslq_studio and rslq_view (cookies, 24 hours): set only when a reviewer opens a book with an access key.
• Cloudflare Turnstile checks your browser when you submit a form, to block automated spam.
• Cloudflare, which hosts the site, can add its own security scripts to pages and set security cookies (for example __cf_bm or cf_clearance) to tell people apart from automated traffic and to block attacks. These are needed to keep the site available. We do not use them for visit records or advertising.

You can clear these at any time by clearing this site’s data in your browser.

The readiness assessment at /readiness works entirely in your browser; your answers are not sent to us or saved. The “Ask an AI assistant” links open an outside AI service with a fixed question about RSL Quantum. The question, and anything you add to it, goes to that provider under its own privacy terms. We do not record which link you choose.

8. How long we keep data

Automatic deletion on the schedule below is being set up. Until it is in place, records are kept until we delete them by hand, which can be longer than these periods. You can ask us to delete your records at any time (section 9).

• Page visit records: 90 days.
• Chat messages and replies: 12 months.
• Investor and collaboration enquiries, chat contact cards, company lookup summaries and related emails: 24 months after our last exchange with you, unless we are working together and need them longer.
• Email updates sign-ups: until you ask to be removed.
• Signed documents and their upload records: for as long as the related agreement or record is in force, and afterwards for as long as the law requires us to keep it.
• Notification messages in Telegram: 30 days.

9. Your rights

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it, where we no longer need it for the purpose you gave it for or a legal obligation;
• withdraw your consent, for example to email updates, or to visit records by using the switch in section 1, which does not affect what was done before;
• nominate another person to exercise these rights if you die or become incapable.

Write to info@rslquantum.com with the subject “Privacy request” and the email address you used on this site. We may ask you to confirm that the address is yours before acting. We aim to respond within 30 days.

10. Grievances

If you have a complaint about how we handle your personal data, write to info@rslquantum.com with the subject “Privacy grievance”. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Children

Some pages, such as the Quantum Bazaar books and the playground pages, are made for children to use with a parent or teacher. The book, playground and cartoon pages do not show the email updates bar. Children should not fill in forms or use the chat assistant. If you believe a child has sent us personal data, write to us and we will delete it.

12. Changes to this notice

We will update this page when our practices change and show the date of the latest update at the top.