Instilify
Request early access

Home / Privacy Policy

Privacy Policy

Draft dated: 11 November 2026 (Asia/Kolkata)
Effective date: 11 November 2026

This Privacy Policy explains how Instilify collects, uses, stores, and shares personal data in connection with the website and software service at instilify.com (the "Service"). It is intended to meet our obligations under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

By using the Service or submitting personal data to us, you acknowledge this Policy. Where the DPDP Act requires consent, we will ask for it.

1. Who we are

Instilify is the trade name of a software service operated by Mimansh Verma, an individual / sole proprietor in India ("Instilify", "we", "us", or "our").

  • Address: Bengaluru, Karnataka, India
  • Contact for privacy and data principal requests: support@instilify.com | +91 8839913903
  • Grievance officer: Mimansh Verma, support@instilify.com

Under the DPDP Act:

  • We are a Data Fiduciary for personal data we determine the purpose and means of processing, such as your account, billing, and support information, and website usage data we collect.
  • We act as a Data Processor on your behalf for personal data you import or generate in the Service in the course of your outreach — in particular lead lists you upload and mailbox-related content processed to run sequences, the unified inbox, stop-on-reply, opt-out / suppression, and reporting. For that data, you are the Data Fiduciary. You must have a lawful basis to collect and use it, and you instruct us to process it only to provide the Service.

2. Personal data we collect

The data we process depends on how you use the Service.

2.1 Account and billing data (we are Data Fiduciary)

  • name, business or trade name, and contact details (email, phone)
  • login identifiers and authentication data
  • billing details, plan, invoices, and payment status (payments are processed by a third-party payment provider; we do not store complete card or UPI credentials)
  • tax details you provide, if any
  • support correspondence

2.2 Customer-imported and mailbox data (we are Data Processor)

  • lead records you import (for example from a CSV), which may include names, email addresses, phone numbers, company names, and other fields you choose to upload
  • information from mailboxes you connect (Google Workspace or Microsoft 365), limited to what is needed to operate the Service — for example sending and tracking sequences, displaying a unified inbox, applying stop-on-reply, honouring unsubscribes and global suppression, applying per-mailbox daily caps, and producing client reports
  • workspace and client-reporting data you or your users create

We do not sell lead lists and we do not provide lead lists to you. We do not send outreach email from Instilify’s own servers; messages are sent through the mailboxes you connect.

2.3 Website and technical data

  • basic device and log information (such as IP address, browser type, date and time, and pages requested) needed to operate, secure, and diagnose the website and Service
  • cookies or similar technologies if used on the website (see Section 9)

We do not knowingly collect personal data that is not needed for the purposes below.

3. Purposes and legal basis

We process personal data for these purposes:

  • to create and administer accounts and workspaces
  • to provide the Service features listed in our Terms of Use, including sequences, inbox, caps, opt-out / suppression, and reporting
  • to process payments, issue invoices, and meet tax and accounting duties
  • to provide support and respond to your requests
  • to keep the Service secure, prevent abuse, and enforce our Terms and Acceptable Use Policy
  • to meet applicable legal obligations
  • with your consent, to send you service or product updates about Instilify (you may withdraw consent at any time)

Under the DPDP Act, we process personal data on the basis of:

  • consent, where required; and/or
  • voluntary provision of personal data by the Data Principal for a specified purpose (for example, when you create an account or contact us), used only for that purpose and as otherwise permitted by law

We will not use personal data for a new purpose that is not reasonably connected to the original purpose without a fresh lawful basis, including a new consent where the DPDP Act requires it.

When we act as your Data Processor, we process Customer Data on your instructions to provide the Service, and to comply with law.

4. Your duties when you import leads or send email

If you upload leads or send messages through connected mailboxes, you confirm that:

  • you have collected and are using that personal data lawfully
  • you have a lawful basis to contact recipients
  • you will honour opt-outs and unsubscribes
  • you will not upload purchased, rented, or scraped lists, or use the Service for spam or other prohibited activity under the Acceptable Use Policy

Recipients who want to exercise DPDP rights in respect of lead or mailbox data you control should normally contact you. We will support you in responding where the request is properly made and we hold the relevant data.

5. When we share personal data

We do not sell personal data.

We may share personal data with:

  • service providers who process data on our instructions, such as hosting and infrastructure providers, email or notification vendors we use to operate our own service communications, and payment service providers
  • Google and Microsoft, to the extent necessary to connect and operate the mailboxes you authorise
  • professional advisers (for example accountants or lawyers) where needed
  • authorities, courts, or regulators, when required by law or to protect legal rights, safety, or the security of the Service
  • a successor, if the Service is reorganised or transferred, subject to applicable law and appropriate safeguards

These parties are expected to use personal data only for the purposes we specify, or as required by law.

6. Storage, retention, and security

Personal data is stored and processed using service providers that we use to operate the Service. We take reasonable security safeguards designed to protect personal data against unauthorised access, use, loss, or disclosure, taking into account the nature of the data and the risks involved. No method of transmission or storage is completely secure.

We retain personal data only as long as needed for the purposes above, including to provide the Service, maintain records, resolve disputes, and meet legal, tax, and accounting requirements. When an account is closed, we delete or de-identify Customer Data after a reasonable period, except where retention is required by law or needed to complete a pending request or investigation.

7. Cross-border transfers

We and our service providers may process personal data in India or in other countries. Where personal data is transferred outside India, we will do so in accordance with the DPDP Act and any government directions on restricted territories that are in force at the time.

8. Your rights under the DPDP Act

If we are the Data Fiduciary for your personal data, you (as a Data Principal) have rights under the DPDP Act, including, subject to the Act and applicable rules:

  • the right to access a summary of personal data we process about you and the processing activities
  • the right to correct inaccurate or incomplete personal data, and to complete it
  • the right to erase personal data when it is no longer necessary for the purpose, or when you withdraw consent and we are not required or permitted to retain it
  • the right to withdraw consent, where processing is based on consent (withdrawal does not affect processing already completed, and we may not be able to continue providing parts of the Service)
  • the right to grievance redressal
  • the right to nominate another person to exercise your rights in the event of death or incapacity, as provided under the Act

To exercise these rights, email support@instilify.com or write to the grievance officer below. We may need to verify your identity before acting on a request. We will respond within the time required by law.

If you are not satisfied with our response, you may escalate the matter as provided under the DPDP Act, including to the Data Protection Board of India, once the applicable procedure is available to you.

9. Cookies and similar technologies

The website may use essential cookies or similar technologies needed to operate the site, keep it secure, or remember a signed-in session. If we use any non-essential cookies, we will provide appropriate information and obtain consent where required. You can also control cookies through your browser settings. Blocking essential cookies may affect sign-in or other functions.

10. Children

The Service is a B2B product for businesses and professionals. We do not knowingly offer the Service to children (persons under 18) or knowingly process their personal data. If you believe a child has provided us personal data, contact support@instilify.com and we will take appropriate steps to delete it.

11. Grievance redressal

If you have a complaint about how we handle personal data, contact:

  • Grievance officer: Mimansh Verma
  • Contact: support@instilify.com
  • Address: Bengaluru, Karnataka, India

We will acknowledge and address grievances within the time required by applicable law.

12. Changes to this Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised effective date. If a change is material, we will give reasonable notice, for example by email or an in-product message.

13. Contact

  • Email: support@instilify.com
  • Phone: +91 8839913903
  • Address: Bengaluru, Karnataka, India