Privacy · Updated 8 November 2026

Your information, handled with care.

How Armature AI Labs handles website visits, enquiries, ecosystem contributions and free membership registration.

Who is responsible

Armature AI Labs is operated by Jayasri Nageswara Rao and Partners LLP (LLPIN ACB-2865). This notice covers armatureailabs.com and enquiries sent to our lab.

For privacy questions or requests, email privacy@armatureailabs.com. Our lab contact address is 1490, 11th Cross, 20th Main Rd, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102.

When you visit or contact us

You can browse our public pages without applying for membership. When you contact us, we receive the name, email address and other information you choose to include. We use it to respond, discuss your enquiry and keep the related correspondence.

Our hosting and service providers process technical information needed to deliver and protect their services, such as IP addresses, browser information and request logs. We use Cloudflare for website delivery and Google Workspace for lab email. Relevant lab staff can access enquiries to handle them.

Please do not send government ID copies or other sensitive documents by ordinary email. Use the protected registration portal when applications are available.

Browser storage and external content

  • Your selected reading theme is saved in your browser. The website’s service worker may cache its interface and assets so pages can load again. You can clear this through your browser’s site-data settings.
  • Our journal may load a video thumbnail from YouTube before you press play. The embedded YouTube player loads only when you press play and uses YouTube’s privacy-enhanced domain.
  • The ecosystem map loads map styles and tiles from OpenFreeMap. These requests, like requests for external images, share connection information with the provider.
  • Following links to services such as Discord, LinkedIn or GitHub takes you to websites governed by their own privacy notices.

Third-party content and services may use their own storage and processing practices. Their privacy notices apply alongside this one when you use them.

Optional website analytics

Only if you select Allow analytics, we use PostHog, processed in the United States, to measure public page visits and anonymous registration milestones. We do not send names, email addresses, phone numbers, membership or account identifiers, profile fields, government ID contents, uploaded images, or form input values. Private account and administration pages are excluded from page-view measurement.

Measurement uses a temporary anonymous identifier rather than a persistent member profile. Session recording and automatic interaction capture are disabled. Your analytics preference is saved in this browser so we can honour it on later visits. PostHog receives connection information needed to deliver the analytics request; anonymous events should not be treated as a promise of complete anonymity from the service provider.

You can decline without affecting registration or website access. Withdraw consent through Analytics settings to stop future measurement in this browser. Withdrawal does not automatically delete events already received; contact privacy@armatureailabs.com about privacy requests.

Optional public member directory

You can choose to publish a display name, short bio and skills in the public member directory. These details can be read by anyone. Publishing is optional and does not change your membership or learning access.

Your retained, security-scanned avatar appears publicly only if you separately agree to share it. Verification photos and government IDs are never used directly in the directory. You may separately opt in to show a public contact email (your confirmed sign-in email or a different address) and your LinkedIn profile URL. These contact choices are private by default. Phone numbers, dates of birth, approval records and bookings are not included.

Use My public profile in your account menu to edit or hide your listing or withdraw public-photo or contact-sharing permission. Hiding removes it from future directory responses; people may have saved information previously made public. Public sharing is separate from consent to retain an avatar for member-only use.

Basic membership and identity review

Free basic registration is available through our protected membership portal. Confirming your email gives you Basic membership. Verified membership also requires an approved identity application and a verified mobile number. Premium membership requires Verified membership and an active qualifying workspace subscription. Membership classification alone does not purchase or activate coworking, equipment, cabins or other paid access.

You can sign in with a secure email link or Google. Supabase manages website accounts and sessions; Resend delivers authentication emails. Google sign-in shares basic account information such as your name, email and profile picture, without giving the lab access to your Gmail messages or Calendar. A sign-in session is stored in your browser so you can return to your application. Sign out on shared devices.

For mobile verification, we send your number and a one-time code through Bird by SMS, using our United States workspace. Supabase verifies the code and links the confirmed number to your existing account. We retain the verification result; we do not include your number or code in analytics. WhatsApp verification is not enabled. Your Google or email sign-in remains unchanged.

We request your name, verified email, phone number, date of birth, personal LinkedIn URL, photo and one government ID: PAN card, Aadhaar card or passport. We use these for identity and age review, application corrections and membership administration. Your application and documents are private to you and authorised reviewers; submitting them does not create a public member profile.

The minimum age is 16. For applicants aged 16–17, a guardian must email hello@armatureailabs.com with the member’s name and registered email, the guardian’s name and relationship, and explicit permission. Staff review the actual email before approving the application and record its reference. Overnight access is for adults aged 18 or above and requires a separate paid entitlement when offered.

Photos and ID images pass through a private Google Cloud malware and image-validation service before being stored in a private Supabase bucket. Documents are viewed through the protected portal. Staff must not download, screenshot or retain copies. A scanner failure prevents the upload from being accepted. The service uses malware scanning and image-format validation, not AI, LLMs, OCR or automated identity assessment. Only authorised staff or admins review government IDs and decide verification.

Verification photos expire 30 days after upload. For government IDs, we ask for a separate explicit agreement to retain the private copy while you want equipment rental eligibility. Earlier IDs keep their original 30-day deadline unless you explicitly choose the new retention option before expiry. Expired or deleted copies are not restored. You can end ID retention and request deletion by contacting privacy@armatureailabs.com; a fresh ID review may be required for later rentals. Correction requests expire previous copies earlier and require fresh uploads. Scheduled cleanup deletes expired copies; failures are monitored and retried. Verification results remain after images are deleted.

If you choose to use your profile photo as an avatar, we keep a separate, processed copy without image metadata until you replace it, remove it or delete your account. This avatar can be seen by approved signed-in members where member profiles appear, and by authorised staff. It is not a public photo directory. A Talent Network profile photo is a separate public copy, published only with the approved profile owner’s explicit consent. Owners can reuse their membership photo or upload a different photo, and remove the directory copy without changing their membership original. Government ID images are never used as avatars. The original verification photo still follows the 30-day deletion rule. You can remove the retained avatar in your registration page without withdrawing your identity verification.

Membership reviewers can access pending applications and approve them. Admins can manage membership decisions and staff access; Super admins also manage Admin access. We record role changes and membership decisions for accountability. Revocation removes member privileges but preserves sign-in so you can see your status and contact the lab.

We retain registration details, notice-acceptance history, review decisions and necessary correction or guardian-permission references to administer membership and respond to disputes or requests. The government ID copy is stored separately under the retention choice described above. They do not currently have an automatic deletion deadline. Guardian permission emails remain in our Google Workspace mailbox and are not covered by the 30-day upload cleanup. Contact us to request review or deletion of these records; we will explain what needs to remain and why.

Supabase database backups contain database records and Storage metadata, not the uploaded Storage image files. Deleting an uploaded image does not erase related database history or every provider log or backup. Restored records must be checked against expired or deleted uploads before document access is restored.

Identity-review notice version: 2026-09-26-release-1. We record your explicit acceptance with the application revision and server timestamp. Corrections require a new acceptance; previous acceptance records are retained.

Payments

Online rent, seat, hardware-order and workshop payments are processed by Razorpay Payments Private Limited and its partner banks. New cabin and equipment security deposits are paid separately by bank transfer. You enter your card, UPI or net-banking details on Razorpay's secure checkout. We never see or store your full card number, CVV, UPI PIN or banking password.

Razorpay shares with us the payment amount, status, date, method type (for example card or UPI), a transaction reference and the name, email and phone number you entered at checkout. We use this to confirm your booking or order, issue receipts, process refunds and handle disputes. Razorpay's own privacy policy applies to the information it processes.

For bank-transfer security deposits, we keep the booking and transfer references, amount, payment date and staff verification record. In your signed-in booking, we collect the refund account-holder name, bank name, account number and IFSC, with your confirmation of account ownership, to return the deposit. Full refund-account details are available only to you and authorised staff using MFA, not public listings or receipts. Staff use bank credit records to reconcile receipt and review your current refund-account details before a manual transfer; any change requires renewed review. Saving these details does not initiate an automatic payout. We retain the deposit receipt, deduction decisions and refund transfer reference as restricted accounting and contract records. Do not send banking passwords, PINs or OTPs.

For delivery orders, we collect your shipping address and phone number and share them with our courier partner only to deliver your order.

We keep invoices and payment records for as long as Indian tax and accounting laws require, even if you close your account.

Equipment requests and votes

Approved members can suggest equipment and support requests. Administrators review suggestions before publication. Published equipment names, intended uses, product images, procurement updates and vote totals are public; requester email addresses and voter identities are not. Please do not include personal information in your suggestion or upload images you do not have permission to share.

Optional product images are scanned and stripped of image metadata before private storage. Unpublished images are accessible to their submitter and authorised Admins or Super admins. Publication makes the image public. These images are kept while attached to a request and do not follow the verification-photo retention rule. Replaced images, images from merged or deleted requests, and unsuccessful upload remnants are queued for monitored deletion. We retain request, vote and moderation records to manage demand and accountability. Contact our privacy address to request removal or review of these records.

Ecosystem contributions

Anyone can suggest a listing or an edit without membership. Suggestions stay private until an Admin or Super admin reviews them. Approved listing details, public contacts you have permission to share, and separately opted-in contributor credit become public. Your optional private name and email are only for review follow-up and are never automatically used for public credit.

We use Cloudflare Turnstile to protect submissions from automated abuse. Our submission service does not send your IP address to the verification endpoint. We retain a salted abuse-control hash for up to 24 hours. Private follow-up contact details are deleted 90 days after review closes; pending suggestions retain them for follow-up. Public listing revisions and review decisions are retained for accountability without those private contact fields. Provider logs and backups follow their own retention arrangements.

If you allow analytics, we measure only the selected listing-type and need filters, not searches, listing URLs, form contents, phone numbers or email addresses. GitHub contributions are public on GitHub and also require approval before appearing here. Please never put private contact details into a public pull request.

Talent Network profiles and requests

The Talent Network includes professional information supplied through permitted research sources and updates from approved profile owners. Unclaimed records have not been confirmed by their owners. Listing does not imply availability, endorsement or membership. Research classifications are not verified skills.

You can sign in to request a claim, correction or removal without becoming a verified member. Claim evidence and review notes are private to the requester and authorised Admins or Super admins. Please provide professional links or an explanation, not identity documents or private financial information. Ownership approval allows public profile editing; it does not certify professional skills.

Approved owners can unlist their profiles immediately. Other removal requests are reviewed. We retain the minimum identity reference needed to prevent removed records being re-imported, and request and moderation history for accountability. These records do not currently have an automatic deletion deadline. To request review or removal without an account, contact privacy@armatureailabs.com. Public profiles never display account email addresses or private claim evidence.

Signed agreements and contract records

Signed agreements, their signature certificates and related audit records are retained during and after the contract as evidence of the agreed terms, payments, performance and any claims or disputes. This includes the PAN and contracting address recorded in the signed agreement. Access is restricted to authorised personnel and service providers who need these records for contract administration, accounting or legal purposes. These records are separate from raw identity-verification uploads and are not deleted automatically when those uploads expire. You may contact our privacy address to request a retention review; we will explain any continuing need to retain the agreement.

Retention, providers and your choices

We keep enquiry correspondence while it is needed to respond and maintain the related relationship, or to meet applicable obligations and resolve disputes. Service-provider logs and backups follow their own retention arrangements. Depending on the provider, processing may take place outside India.

You can ask us to explain the information we hold about you, correct it, delete it, or stop using it for an enquiry. Contact privacy@armatureailabs.com with enough context to identify your request. We may need to verify who is making the request and will explain any information we need to retain and why.

If you have a concern about how we handled your information or request, use the same address to raise it with the lab. We will review it and respond.

Changes to this notice

We will update this page when our services or data practices change. The date above shows the latest revision. New membership or booking features will be accompanied by the relevant information before you use them. Payments are covered in the Payments section above, and in our Terms and Conditions and Cancellation and Refund Policy.