We collect only what we need to respond to you, deliver the work and meet our legal obligations. We do not sell personal data. This website runs no advertising pixels, and it uses Google Analytics only if you accept analytics cookies.
Who we are
YERID AI is a brand of YARDAI Agency (OPC) Private Limited (CIN U73100WB2025OPC276016, GSTIN 06AABCY9453B1ZC), a company incorporated in India under the Companies Act, 2013 (“YERID”, “we”, “us”, “our”). We provide growth architecture, AI search visibility, data and automation services to businesses in India, the UAE, Saudi Arabia and internationally.
This policy explains how we handle personal data when you visit www.yerid.ai, contact us, apply to work with us, or engage us as a client. For personal data we process on behalf of clients, such as data inside your ad accounts, CRM or analytics, see our Data Protection Policy.
For personal data covered by this policy, we act as the Data Fiduciary (India) or Data Controller (GDPR, UAE and KSA).
The laws we follow
Because we work with national and international clients, we design our practices to meet the following frameworks where they apply to you:
- India: the Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules as they come into force; the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
- European Union and United Kingdom: the General Data Protection Regulation (GDPR) and UK GDPR, for individuals located there.
- United Arab Emirates: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
- Kingdom of Saudi Arabia: the Personal Data Protection Law (PDPL) and its Implementing Regulations.
Where these laws differ, we aim to apply the more protective standard wherever it is practical to do so.
Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, company, job title, work email, phone number | You, or a colleague who introduces you |
| Enquiries and communications | Messages, emails, meeting notes; call recordings only with your consent | You |
| Engagement and billing | Billing entity and address, GSTIN / VAT TRN, purchase-order numbers, payment records | You or your finance team |
| Recruitment | CV, portfolio, work history and references you choose to share | You |
| Technical data | IP address, browser type, device information, pages requested, timestamps | Our hosting provider, automatically |
We do not intentionally collect sensitive personal data, such as health data, biometric data, passwords or financial account credentials. Please do not send it in an enquiry. We never store full card numbers. Payments are made by bank transfer or through regulated payment providers.
How we use it, and why
| Purpose | Legal basis |
|---|---|
| Respond to enquiries and prepare a proposal | Your consent, or data you have voluntarily provided for that purpose (DPDP s.7(a)); steps before entering a contract (GDPR) |
| Deliver and manage an engagement | Performance of our contract with you or your organisation |
| Invoicing, accounting and tax records | Legal obligation, including the Companies Act 2013, GST law, the Income-tax Act 1961 and applicable VAT law |
| Keep the website and our systems secure | Legitimate uses and legitimate interests in security and fraud prevention |
| Send occasional practice updates or field notes | Your consent, which you can withdraw at any time |
| Assess job and collaborator applications | Your consent, and steps before entering a contract |
We do not sell or rent personal data. We do not use it for automated decision-making that produces legal or similarly significant effects on you.
This website, cookies and analytics
The enquiry form on this website does not submit data to a server. It prepares a draft in your own email application, and nothing is sent until you choose to send it.
We use Google Analytics 4 to understand how the website is used, for example which pages are read and whether the enquiry form is used. Analytics cookies are set only after you accept them in the consent banner. Until you accept, or if you decline, Google Analytics receives cookieless measurement signals with analytics storage denied, which Google may use for modelled, aggregate reporting. Advertising storage, ad personalisation and ad-data sharing are always denied on this website.
Google Analytics data is processed by Google (Google LLC and Google Ireland Limited) as our service provider. IP addresses are not logged or stored by Google Analytics 4. We use the data only in aggregate to improve the website, and GA4 retains event-level data for the period configured in our account.
We remember your consent choice in your browser's local storage under the key yerid-consent. You can change it at any time using the Cookie settings link in the website footer. Our hosting provider, Cloudflare, may also set strictly necessary security cookies. Details are in our Cookie Policy.
International transfers
We are based in India and serve clients in the UAE, Saudi Arabia and elsewhere, so personal data may be processed in India, the UAE, the European Union, the United States or other countries where our providers operate.
We transfer personal data out of India only in line with Section 16 of the DPDP Act, and never to a country the Government of India restricts. For data from the EU or UK, we rely on adequacy decisions or Standard Contractual Clauses. For the UAE and KSA, we rely on the transfer conditions set out in their PDPL frameworks.
How long we keep it
| Record | Retention period |
|---|---|
| Enquiries that do not become an engagement | Up to 24 months after our last contact |
| Engagement, contract and billing records | For the engagement plus 8 years, to meet accounting and tax record-keeping requirements |
| Recruitment applications | Up to 12 months, or longer with your consent |
| Hosting and security logs | As set by our hosting provider's standard retention |
When a retention period ends, we delete or anonymise the data, unless the law requires us to keep it for longer.
How we protect it
We maintain reasonable security practices and procedures in line with Rule 8 of the Indian SPDI Rules and recognised industry standards. These include:
- Multi-factor authentication and least-privilege access.
- Encrypted devices, and encryption of data in transit.
- Named access to client-owned accounts in place of shared passwords.
- Documented offboarding, so access is removed when it is no longer needed.
If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires. Where it applies, we will also report to CERT-In within the timelines in its 2022 Directions, and to other supervisory authorities within their deadlines.
Your rights
Depending on where you are, you may have the right to:
- Access a summary of the personal data we hold about you and how we process it.
- Correct, complete or update inaccurate or incomplete data.
- Request erasure of data that is no longer needed or that you have withdrawn consent for.
- Withdraw consent at any time. Withdrawal does not affect processing that already took place.
- Nominate another person to exercise your rights in the event of death or incapacity (DPDP Act).
- Object to or restrict processing, and receive your data in a portable format (GDPR, UAE and KSA).
- Complain to the Data Protection Board of India or your local supervisory authority.
To exercise any of these rights, email alex@yerid.ai. We may need to verify your identity first. We aim to respond within 30 days.
Children
Our services are for businesses and professionals. This website is not directed at anyone under 18, and we do not knowingly collect their personal data. If you believe a child has shared personal data with us, contact us and we will delete it.
Grievance Officer
In accordance with the IT Act, 2000, its Rules, and the DPDP Act, 2023, our contact for privacy questions and grievances is:
We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India or to the relevant authority in your jurisdiction.
Changes to this policy
We may update this policy as our services or the law change. The “last updated” date below shows the current version. If we make material changes, we will notify active clients directly.
