Privacy Policy

Last updated: 30 August 2026

Not Out Labs is a business brand operated by NV Venture, a GST-registered business in India. This Privacy Policy explains how we handle personal information in connection with www.notoutlabs.com, business enquiries, service discussions, client work and relevant business-to-business development activity.

Scope of this policy

This policy applies to personal information we handle through this website and related business communications. It also explains our approach when we identify and contact professional or business prospects using information from public or otherwise permitted business sources. A different written agreement may apply to information processed on behalf of a client during an engagement.

Information we may collect

Website and enquiry information: name, company, business email, country, phone or WhatsApp number where requested or provided, website/store/profile URL, service interest, project or operating context, budget or timing information, preferred contact method and information you choose to provide.
Business-development and professional contact information: company name, business website, professional name or role, business email, publicly listed business phone number, city/country, business category, public profile or marketplace/store information, source URL, source date, relevance notes, outreach status, follow-up history and opt-out or suppression status.
Communications and relationship records: emails, call notes, meeting notes, proposals, quotations, follow-up records, service discussions and other business correspondence.
Client and service information: information, files, account identifiers, system details or access information a client authorizes us to use to scope or deliver agreed work. We ask clients not to send passwords or highly sensitive credentials through ordinary website forms, chat or email.
Technical and security information: IP address, browser/device information, timestamps, referring page, request/security logs and similar information produced when the website is delivered or protected.
Analytics and consent information: website usage and conversion information described in our Cookie Notice, together with the analytics preference stored in your browser.

Where information comes from

Information may come directly from you; from your employer or business; from communications with us; from public company websites, business directories, professional pages, public marketplace or store profiles and similar publicly available business sources; from referrals; or from service providers used for legitimate business operations. Where we use public professional information for outreach, we may keep the source and date so we can assess relevance and document why the contact was considered appropriate.

How we use information

To respond to enquiries, understand business requirements, goals, opportunities or operating problems and take requested steps before an engagement.
To prepare proposals, quotations, meetings, scopes of work and service recommendations.
To deliver, support, secure and improve agreed services and business systems.
To research businesses and conduct relevant business-to-business development, including personalised email, human calling and follow-up, where permitted by applicable law.
To maintain CRM, pipeline, relationship, source, suppression and follow-up records.
To measure website and campaign performance where permitted and, where required, with appropriate consent.
To prevent abuse, secure our website and systems, troubleshoot issues and maintain legal, accounting and business records.

Business-to-business prospecting and direct outreach

Not Out Labs may identify businesses that appear relevant to our services and contact them using professional contact information obtained from public or otherwise permitted business sources. We aim to keep outreach relevant to the recipient’s business, role or function rather than send indiscriminate consumer marketing.

Public availability does not by itself make every use lawful in every country. Before or during outreach we may record the source of a business contact, whether the address or number appears intended for business communication, the reason the message is relevant, and any jurisdiction-specific compliance basis required for that channel. Where applicable law requires consent or another condition before a marketing communication, we seek to use the channel only where that condition is satisfied.

Every recipient may ask us to stop direct marketing. We maintain a suppression or do-not-contact record so that an opt-out can be respected. The minimum information needed to prevent accidental re-contact may therefore be retained even after other prospecting information is deleted.

Legal bases and consent

The legal basis for processing depends on the jurisdiction, the information and the purpose. It may include taking steps at your request before a contract, performing a contract, complying with legal obligations, our legitimate interests in operating and developing a business, or consent where consent is required. Where we rely on legitimate interests, we aim to consider necessity, relevance, reasonable expectations and privacy impact. Where processing is based on consent, you may withdraw that consent using the relevant control or by contacting us, subject to processing that remains necessary or permitted by law.

Website enquiry forms

When you submit a website enquiry form, the information you enter is transmitted through our form-delivery provider, FormSubmit, so it can reach our business email inbox. We use the submission to respond to your enquiry, understand the requested work and take appropriate pre-contract steps. You may contact us directly by email instead. Please do not submit passwords, payment-card data, government identifiers, medical information or other highly sensitive information through website forms. Before an enquiry or gated-resource request is accepted, Cloudflare Turnstile may process security signals needed to distinguish legitimate visitors from automated traffic. Turnstile is used for website security and bot prevention. We validate the Turnstile response server-side before the submission proceeds; after successful verification, the browser sends the form information to FormSubmit for delivery to our business inbox.

Live chat

We provide live chat through Tawk.to. The widget code is made available on the website and Tawk.to may process technical information needed to provide chat functionality. If you choose to interact with the widget, it may also process your name, email, message content and other information you provide. Tawk.to may use cookies, local storage or session storage depending on its configuration and your consent status. Where its built-in consent form is enabled, Tawk.to states that chat-related cookies and local-storage data are not set until the visitor accepts the consent form. You can choose not to use chat and contact us by email or phone instead.

AI-assisted processing

Not Out Labs uses AI-assisted tools for tasks such as research, summarisation, drafting, classification, workflow support, technical analysis and organising business context. Human judgement remains part of our commercial conversations and service decisions. We aim to minimise personal information supplied to AI-assisted tools and to use information only for legitimate business purposes connected with the task. Clients should not provide secrets, passwords, payment-card data, government identifiers or other highly sensitive information unless a specific secure process has been agreed in writing.

Service providers and recipients

We use service providers for website hosting and security, business email, form delivery, live chat, analytics, communications, customer relationship management, research, productivity, file handling and related business operations. The website is delivered through Cloudflare infrastructure; Cloudflare Turnstile is used to protect website forms from automated abuse; accepted form submissions are currently sent through FormSubmit for delivery to our business inbox; live chat is provided through Tawk.to; and website analytics are provided through Google Analytics 4. Providers may process information for the service they supply to us. We may also disclose information where reasonably necessary to professional advisers, authorities or other parties to comply with law, protect rights, prevent abuse, resolve disputes or complete a business transaction. We do not sell or rent prospect contact lists as a business.

International processing

NV Venture operates from India and supports businesses internationally. Our service providers may process or store information in India, the United States or other countries in which they or their subprocessors operate. Privacy protections can differ between countries. Where applicable law requires safeguards for international transfers, we seek to use appropriate provider arrangements or other lawful mechanisms available for the relevant processing.

Analytics and advertising measurement

We currently use Google Analytics 4 and Google Consent Mode v2 to understand website use and measure relevant events. Analytics storage is denied by default and may be granted through our website analytics control. Advertising storage, advertising user-data and advertising-personalisation signals remain denied in the current website configuration. When analytics storage is denied, Google tags may still send limited cookieless measurement signals as part of Consent Mode. We do not intentionally send enquiry message content, email addresses, phone numbers or other direct identifiers to Google Analytics or place them in analytics URL parameters. If we materially change advertising or measurement technology, we will update the relevant notices and controls.

Sale, rental and personalised advertising

We do not sell or rent personal information or business prospect lists for money. The current website configuration does not enable Google advertising storage, advertising user-data or advertising-personalisation consent signals. If that changes materially, we will update this policy and the Cookie Notice before or when the new processing is introduced.

Retention

Retention depends on purpose. Website enquiries and inactive prospect or business-development records are normally reviewed for deletion or minimisation after up to 24 months from the last substantive interaction, unless a shorter period is appropriate or a longer period is reasonably needed for an active opportunity, legal claim, fraud/security issue or other lawful business requirement. Client, contract, invoice, tax and accounting records may be retained for periods required by law or an agreement. Suppression or do-not-contact records may be retained longer, using only the information reasonably needed to ensure that an opt-out remains effective.

Your choices, objections and privacy rights

Depending on applicable law, you may have rights to request access, correction, completion, updating, deletion or restriction of personal information; withdraw consent; or object to certain processing. Where the right to object to direct marketing applies, we will respect that objection. If you receive a business-development email from us and do not want further marketing contact, use the unsubscribe method provided in the message or reply asking us to stop. For calls, you can tell the caller that you do not want further marketing calls from Not Out Labs. Privacy requests can be sent to [email protected]. We may need reasonable information to verify and action a request.

Security

We use reasonable administrative and technical safeguards appropriate to the information we handle, including HTTPS, authenticated business email, access controls and security measures provided by our infrastructure and service providers. No internet transmission, third-party service or storage system can be guaranteed to be completely secure. If you believe information relating to you has been exposed through our systems, contact us promptly at [email protected].

Children

Not Out Labs is a business-to-business service and this website is not directed to children. We do not knowingly seek personal information from people under 18 through our website or business-development activity.

Complaints and questions

If you have a privacy concern, contact us first at [email protected] so we can review it. Depending on where you are located, you may also have the right to complain to an applicable data-protection, privacy or communications regulator.

Changes to this policy

We may update this policy when our services, website, service providers, outreach practices, measurement tools or legal requirements materially change. The “Last updated” date identifies the current public version.

Privacy contact

Operator: NV Venture · Brand: Not Out Labs · Location: India · Email: [email protected] · Website: www.notoutlabs.com