Privacy & Data Protection

Last updated 18 September 2026

Who we are

INSEAD Alumni Association India (“the NAA”, “we”) is the national alumni association of INSEAD in India — a Section 8 (not-for-profit) company (CIN U74130MH1996NPL100618), with its registered office at B2, 402B, Marathon Innovo, 4th Floor, Off. Ganpatrao Kadam Marg, Lower Parel, Mumbai, Maharashtra 400013, India. We are the data fiduciary (controller) responsible for the personal data described here.

What we collect and why

We only collect data tied to something you choose to do:

• Membership — your name, email and payment confirmation when you join. Payment itself is handled by our payment processor; we never see your card details. We keep a minimal membership roster to manage your membership.
• Events — your name and email if you RSVP, used only to manage that event.
• Alumni ventures — if you list or claim a venture, your name, email, role, INSEAD programme and class, and the consent you gave, used to send you the confirmation link and to check your alumni status. Only the venture’s details and founder names appear on the site; your email and contact details are never published, and every email about the listing carries a link to withdraw it.
• Mailing list — your email, and your WhatsApp number if you give it, only if you opt in, to send chapter and alumni news. Every email has an unsubscribe link. We use the WhatsApp number only for event reminders and do not share it.
• Careers — if you post a role, we store the details you enter and your contact email until the listing closes.
• Spotlight — if you nominate an alum, we store the nomination and your email so the committee can follow up.
• Contact & the assistant — anything you send us, or type into the “Ask the NAA” assistant, to answer you. Please don’t enter sensitive personal details into the assistant.
• Committee admin — sign-in details for committee members who manage the site.

We do not sell your data, and we do not use it for advertising or profiling.

Consent and your choices

Where we rely on your consent — the mailing list, optional cookies, and similar — it is always a clear opt-in, and you can withdraw it as easily as you gave it (unsubscribe links, the cookie controls below, or by emailing us). Withdrawing consent doesn’t affect anything we already did lawfully before you withdrew it.

Who we share data with

We share data only with service providers who help us run the NAA, under contract and only for that purpose:

• Razorpay — to process membership payments and refunds securely.
• Resend — to send transactional and newsletter email.
• Anthropic — to generate answers in the “Ask the NAA” assistant. Your questions are processed to produce a reply and are not used to train their models.
• Cloudflare — to protect every public form and the assistant from automated use (Turnstile).
• Google (Gemini) — to generate illustrations for the site from short descriptions written by committee members and, only with that person’s permission, a reference photograph. No visitor data is sent to Google.
• Vercel — which hosts the website, in Mumbai, and measures page views and page speed if you turn Analytics on.
• Supabase — which holds the database and uploaded files, in Mumbai.

For INSEAD’s own platforms (MyINSEAD, iLink) we link out to INSEAD — those services are governed by INSEAD’s own privacy notice.

Where your data is stored

Our database and files are held with Supabase in Mumbai, and the website runs on Vercel in Mumbai. Some service providers above may process limited data outside India under appropriate safeguards; we keep such transfers to the minimum needed to provide the service.

How long we keep it

We keep personal data only as long as needed for the purpose it was collected, or as required by law — membership records for the life of your membership and applicable statutory periods; mailing-list data until you unsubscribe; event RSVPs until shortly after the event; venture listing details until you withdraw the listing or we archive it.

Your rights

Under the DPDP Act you can:

• access a summary of the personal data we hold about you;
• have it corrected, completed or updated;
• have it erased when it’s no longer needed;
• withdraw consent at any time; and
• raise a grievance with us (see below).

If you are in the EU/EEA, you also have GDPR rights to restriction, data portability, objection, and to lodge a complaint with your supervisory authority.

Contact & grievances

For any privacy question, to exercise a right, or to raise a grievance, contact our data protection point of contact at india.committee@insead.edu. We aim to respond within a reasonable time and, in any case, within the periods required by law.