Privacy Policy

Dorian Mode Technologies Private Limited · Effective 2026-09-05

This policy explains how Dorian Mode Technologies Private Limited, trading as Tarslink ("we", "us"), handles personal data when you visit this website, contact us, or use Bridge and Connect (the "Services"). We are a "Data Fiduciary" for the website and for our own business records, and a "Data Processor" for the data broking firms put into Bridge on their clients' behalf, within the meaning of the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Two roles, two sets of data

For data in Bridge, the broking firm decides what is collected and why; questions and rights requests about that data should go to the firm first, and we will help it respond.

2. What we collect

• You give us: name, work email, phone, firm and role when you book a demo, sign up, or contact us; billing details for subscribed firms.
• Collected automatically: IP address, browser and device information, pages viewed and referring pages, and the theme preference this site stores in your browser (which never leaves your device).
• From your firm: your account details when your firm's administrator creates your Bridge user.
• In Bridge, on the firm's instruction: client and policy records, employee and dependant lists, claims information, documents and correspondence the firm uploads or forwards.

3. Why we use it

To provide and secure the Services; to respond to you; to run and improve the website; to bill subscribed firms; to send service communications and, with your consent or where the law allows, marketing you can opt out of; to detect fraud and abuse; and to meet legal obligations. In Bridge, to do what the firm has instructed and nothing else.

4. AI and your data

Bridge uses machine learning and large language models to read documents, draft text and propose actions. Data sent to a model provider is limited to what the task needs, is processed under contract for that task only, and is not used by us or by our providers to train models that others use. We do not train any generative model on identifiable personal data. A person reviews AI output before it becomes part of a record. See the AI Use Policy.

5. Who we share it with

Service providers who host, secure, email and support the Services under contract (categories available on request); a successor in a merger or sale, with notice; authorities where the law requires; anyone you ask us to share it with; and in aggregated or de-identified form that cannot identify you. We do not sell personal data.

6. Where it lives, and how it is protected

The Services and Customer Data are hosted in India. Personal data is encrypted in transit and at rest, access is role-based and logged, and our people are trained on handling it. Where a provider processes data outside India, we use contractual safeguards permitted under Indian law. No system is perfectly secure; if a breach affects you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

7. How long we keep it

Website and contact data: for as long as needed for the purpose, then deleted or anonymised — demo requests we do not pursue are deleted within 12 months. Customer Data in Bridge: for the firm's subscription and a wind-down period of 30 days after it ends, unless the firm asks for earlier deletion or the law requires longer. Records we must keep by law (invoices, tax) are kept for the statutory period.

8. Cookies

This website sets only what it needs to work: a preference for light or dark theme, stored in your browser. We do not use advertising cookies. If we add analytics, it will be privacy-preserving and disclosed here first.

9. Your rights

Under the DPDP Act you may ask us to tell you what personal data we hold about you, correct or complete it, erase it where we no longer need it, and withdraw consent where processing rests on consent. You may also nominate a person to exercise these rights for you. Write to the Grievance Officer below; we respond within the time the law allows. If you are unhappy with our response, you may approach the Data Protection Board of India. For data in Bridge, please contact your broking firm first.

10. Marketing

You can stop marketing email at any time via the link in the message or by writing to us. Service messages about your account continue.

11. Third-party sites

Links to other sites are not endorsements and we are not responsible for their practices.

12. Children

The website and the Services are for business use by adults. We do not knowingly collect a child's personal data except where it appears in a broking firm's records as a dependant, on the firm's instruction and with the consents the firm has obtained.

13. Changes

We will post any change here with a new effective date, and notify subscribed firms of material changes.

14. Grievance Officer and contact

15. Indian law

This policy is made under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them, including the reasonable security practices those rules require.