1.Who we are
PharmaAI LLC ("PharmaAI", "we") is a technology services company headquartered at 551 S I-35 Frontage Rd #300, Round Rock, TX 78664, United States, with personnel in the United States and India. This notice explains how we handle personal data when we act as a controller. Our Data Protection Officer can be contacted at barath@pharmaai.tech.
2.Personal data we collect
- Business contacts and clients: name, job title, employer, business email, phone and correspondence.
- Website visitors: information you submit through forms, and basic technical data (IP address, browser type, pages visited) collected through essential cookies and analytics.
- Job applicants and personnel: CV details, contact details, and background verification information collected with consent and as permitted by law.
3.Client data we process for our clients
When we provide services to clients, we process client data only on the client's documented instructions, as a service provider/processor. This processing normally takes place entirely within the client's own environment. The client's privacy notice governs that data, and requests about it should be sent to the client.
4.Why we use personal data and legal bases
| Purpose | Legal basis (where GDPR/DPDP apply) |
|---|---|
| Delivering and managing services and contracts | Performance of a contract; legitimate interests |
| Responding to enquiries and business communications | Legitimate interests; consent where required |
| Recruitment and personnel administration | Steps prior to a contract; legal obligation; consent for background checks where required |
| Security, fraud prevention and legal compliance | Legal obligation; legitimate interests |
| Marketing communications (opt-in where required) | Consent; you can opt out at any time |
5.Sharing
We do not sell or share personal data for cross-context behavioral advertising. We share personal data only with service providers that help us run our business (for example email, hosting and background verification providers) under contracts that protect it, with professional advisers, or where the law requires.
6.International transfers
Our personnel operate from the United States and India. Where personal data is transferred across borders, we use appropriate safeguards (such as Standard Contractual Clauses where required). We do not provide access to bulk US sensitive personal data to countries of concern or covered persons under 28 C.F.R. Part 202.
7.Retention and security
We keep personal data only as long as necessary for the purposes above or as the law requires, and then delete it securely. We protect it with administrative, technical and physical safeguards described in our Information Security Policy, including encryption, MFA and access controls.
8.Your rights
Depending on where you live (for example the EU/UK, California, Texas and other US states, or India), you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, to withdraw consent, and to appeal our decision or complain to a supervisory authority. We do not discriminate against anyone who exercises these rights. To make a request, email barath@pharmaai.tech. We will verify your request and respond within the time required by law (generally 30 to 45 days).
Make a privacy request
Contact our Data Protection Officer at barath@pharmaai.tech.
9.Children
Our services are not directed to children, and we do not knowingly collect personal data from children.
10.Changes
We review this notice at least annually. The effective date at the top shows when it was last updated.