Privacy Policy — Kreatorverse Venture Studio

Last updated: 20 June 2026

This Privacy Policy describes how Kreatorverse Venture Studio (“Kreatorverse”, “we”, “us”, or “our”) collects, uses, processes, shares and protects personal data of individuals (“you”, “your”, “Data Principal”) who interact with our website (kreatorverse.com), our LinkedIn Company Page, our products (including Kollect), or any related services.

We are committed to processing personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) of India, the rules notified under it, and applicable international data protection frameworks where relevant (including the EU GDPR, Singapore PDPA, and UAE PDPL) for the markets in which we operate.

1. Who we are (Data Fiduciary)

Kreatorverse Venture Studio is an AI + Web3 venture studio for financial services, co-building IP-rich, balance-sheet-grade fintech ventures with banks, founders and CxOs. We serve clients across India, Singapore, the USA, the UAE and Europe.

For the purpose of the DPDPA, we are the Data Fiduciary with respect to personal data collected via our digital properties.

 

2. Personal data we collect

We collect personal data only to the extent necessary for the purposes set out in Section 3. The categories of personal data we may collect include:

2.1 Data you provide directly

  • Identity data: first name, last name, professional title
  • Contact data: work email address, work phone number (optional), country of residence
  • Professional data: company name, company size, industry, role/seniority, LinkedIn profile URL
  • Engagement data: content you download, forms you submit, discovery call requests, messages you send us

2.2 Data collected automatically when you visit our digital properties

  • Technical data: IP address (in masked or partial form), browser type, device identifiers, operating system
  • Usage data: pages viewed, time spent, referral source, interactions with our content
  • Cookie data: see Section 9 below

2.3 Data we receive from third-party platforms

  • LinkedIn Lead Gen Forms: when you submit a LinkedIn-hosted form for one of our content offers (e.g., the Katalyst playbook), LinkedIn shares your name, work email, job title, company, and any custom fields you completed with us.
  • Calendly: When you book a discovery call, we receive your name, email, timezone, and your answers to the booking qualifier questions.
  • Web analytics providers (e.g., Google Analytics, LinkedIn Insight Tag): aggregated or pseudonymised usage data.

 

We do not knowingly collect sensitive personal data (such as financial account details, health data, biometric data, or government identifiers) through our website or LinkedIn properties. If you choose to share such data with us in a business context (e.g., during a discovery call), we will treat it under heightened safeguards.

 

3. Purposes for which we process your data

We process personal data only for the following specified purposes, each linked to a clear lawful ground under the DPDPA:

 

Purpose

Lawful ground (DPDPA)

To deliver content you request (e.g., the Katalyst playbook, case studies, decks)

Consent (Section 6)

To schedule and conduct discovery calls, you request

Consent + Performance of a request you made

To send you relevant follow-up communications about our services

Consent (separately and clearly obtained)

To respond to your enquiries or messages

Legitimate use — voluntary provision (Section 7(a))

To improve our website, products and services through analytics

Consent for non-essential analytics; legitimate use for essential functionality

To comply with legal, regulatory or tax obligations

Legitimate use (Section 7(g))

To detect, prevent and respond to fraud, security incidents or misuse

Legitimate use (Section 7(d))

To carry out venture-build engagements with corporate partners

Performance of contractual obligations

 

We will not process your personal data for purposes materially different from those listed above without obtaining fresh consent.

4. Consent and your control

4.1 How we obtain consent

Where consent is the lawful ground, we will request it before or at the point of collection through clear, plain-language notices. Your consent will be:

  • Free — not bundled with unrelated services
  • Specific — tied to a clearly identified purpose
  • Informed — accompanied by an itemised description of the data and the purpose
  • Unconditional — you can decline without losing access to unrelated services
  • Unambiguous — given through a clear affirmative action (such as ticking a box or submitting a form)

4.2 Withdrawing consent

You may withdraw consent at any time, with the same ease with which it was given. To withdraw consent:

  • Click the “unsubscribe” link in any marketing email we send, or
  • Email privacy@kreatorverse.com with the subject line “Withdraw Consent”

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4.3 Consequences of withdrawal

If you withdraw consent for a specific processing purpose, we will stop that processing. Where processing is necessary to deliver a service you have requested, withdrawing consent may mean we can no longer provide that service.

 

5. Sharing and disclosure

We do not sell personal data. We share personal data only as set out below, and only where necessary:

5.1 With our service providers (Data Processors)

We engage trusted third parties to provide services on our behalf, under written contracts requiring them to process data only on our instructions and to maintain appropriate security. Categories include:

  • Customer relationship management (CRM) platforms
  • Email marketing and automation tools
  • Calendar and meeting-scheduling tools
  • Cloud hosting and storage providers
  • Analytics providers

 

A current list of processor categories is available upon request at contact@kreatorverse.com.

5.2 With Creative Dock Group

Where you engage with our venture-building services that involve our partner Creative Dock Group (including Creative Dock India, of which our Founder is Managing Director), relevant business contact data may be shared for the purpose of delivering that engagement, under appropriate data-sharing arrangements.

5.3 For legal and regulatory reasons

We may disclose personal data where required by applicable law, by a court or regulatory authority of competent jurisdiction, or to protect our rights, property, or safety, or the rights, property, or safety of our users or others.

5.4 In connection with a business transaction

If Kreatorverse is involved in a merger, acquisition, restructuring or sale of assets, personal data may be transferred as part of that transaction, subject to confidentiality obligations and continued protection under this Policy or an equivalent successor policy.

 

6. Cross-border transfers

Kreatorverse operates across multiple jurisdictions. Personal data we collect from India may be transferred to, stored in, or processed in countries outside India, including Singapore, the United States, the United Arab Emirates, and the European Economic Area, where our partners and service providers are located.

 

Such transfers are made:

 

  • In accordance with the Central Government’s notifications under Section 16 of the DPDPA, where applicable
  • Under contractual safeguards ensuring an equivalent standard of protection
  • Subject to the additional restrictions of GDPR (for EEA data subjects) and other applicable laws

 

7. Data retention

We retain personal data only for as long as is necessary for the purposes set out in this Policy, after which we delete or anonymise it. Indicative retention periods:

 

Data type

Retention period

Lead generation form submissions (downloads, content offers)

24 months from last interaction

Discovery call records and notes

36 months from the call

Active customer/partner records

Duration of the engagement + 7 years (for tax and contractual records)

Marketing consent records

Until withdrawn, plus 12 months for audit

Website usage data (analytics)

14 months (aggregated thereafter)

Backup and disaster-recovery copies

90 days from primary deletion

 

We may retain data for longer periods if required by applicable law or to defend against legal claims.

 

8. Your rights as a Data Principal

Under the DPDPA, you have the following rights with respect to personal data we hold about you:

8.1 Right to access information

You may request a summary of the personal data we hold about you, the processing activities, and the identities of any third parties with whom we have shared it.

8.2 Right to correction and erasure

You may request that we correct inaccurate or misleading personal data, complete incomplete data, or erase personal data that is no longer necessary for the purposes for which it was collected (subject to lawful retention requirements).

8.3 Right to grievance redressal

If you have a grievance regarding our processing of your personal data, you may raise it with our Grievance Officer (Section 12). We will acknowledge receipt promptly and respond within the timeframes prescribed under the DPDPA.

8.4 Right to nominate

You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. To register a nominee, write to privacy@kreatorverse.com.

8.5 Right to withdraw consent

As set out in Section 4.2.

8.6 How to exercise your rights

Send a written request to privacy@kreatorverse.com identifying yourself, the right you wish to exercise, and the personal data concerned. We will respond within the statutory timelines, generally within 30 days of receipt of a valid request. We may ask you to verify your identity before acting on the request.

 

9. Cookies and similar technologies

Our website uses cookies and similar technologies for the following purposes:

  • Strictly necessary cookies — for essential site functionality (e.g., security, session management). These are set without your consent because they are required for the service.
  • Analytics cookies — to understand how visitors use our site (set only with your consent)
  • Marketing and tracking cookies — including the LinkedIn Insight Tag, used to measure the effectiveness of our LinkedIn campaigns (set only with your consent)

When you first visit our website, you will see a cookie banner allowing you to accept, reject or customise non-essential cookies. You may change your preferences at any time through the “Cookie Settings” link in our footer.

 

10. Children’s data

Our services are intended for business audiences and are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly.

In line with Section 9 of the DPDPA, we will not undertake any processing of children’s data that is likely to cause a detrimental effect, nor will we engage in tracking, behavioural monitoring or targeted advertising directed at children.

 

11. Security

We implement reasonable security safeguards proportionate to the nature and volume of personal data we process. These include:

  • Encryption of personal data in transit (TLS) and at rest, where appropriate
  • Access controls based on the principle of least privilege
  • Multi-factor authentication for administrative access
  • Regular security reviews and patching of systems
  • Contractual security obligations on our service providers
  • Incident detection and response procedures

In the event of a personal data breach that is likely to cause harm, we will notify the Data Protection Board of India and the affected Data Principals in accordance with the timelines and procedures prescribed under the DPDPA.

 

12. Grievance Officer

In compliance with the DPDPA, we have appointed a Grievance Officer to address any concerns regarding the processing of your personal data:

Name: Yuvaraj Thanikachalam Designation: Grievance Officer, Kreatorverse Venture Studio Email: yuva@kreatorverse.com

We will acknowledge your grievance within 7 working days of receipt and resolve it within the statutory timeline, which ordinarily does not exceed 30 days.

If you are not satisfied with our response, you may approach the Data Protection Board of India established under the DPDPA.

 

13. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do:

  • We will update the “Last updated” date at the top of this page
  • For material changes, we will provide a more prominent notice (e.g., a banner on our website or an email to active contacts)
  • We encourage you to review this Policy periodically

 

14. Contact us

For any questions about this Privacy Policy or our data processing practices:

General privacy queries: privacy@kreatorverse.com Grievance officer: grievance@kreatorverse.com Postal address: #67, 1st Floor, 13th Cross, off 27th Main Road, HSR Layout, Bengaluru, Karnataka -560102

This Privacy Policy has been prepared in accordance with the Digital Personal Data Protection Act, 2023 of India and the rules notified thereunder, and aligned with international data protection frameworks applicable in the jurisdictions in which Kreatorverse operates.