1. Introduction

TrainPlex ("we", "us", "our") is a managed AI training service operated by Cybdeer Network Pvt Ltd, headquartered in Jaipur, Rajasthan, India. We connect Indian-language AI Trainers with global AI companies for RLHF, annotation, and evaluation work.

This Privacy Policy explains what personal information we collect when you visit trainplex.in, apply as an AI Trainer, or engage us as a client — and how we use, share, and protect that information. By using our services you consent to the practices described here.

2. Information we collect

From AI Trainers: full name, email, phone, city/state, PAN number, Aadhaar number (for KYC), bank account or UPI details (for payouts), language proficiency, education level, work samples, Google account information if you sign in via Google OAuth.

From clients: company name, contact person, billing details, and any data you provide as input for annotation or RLHF projects.

From all website visitors: IP address, browser and device information, pages visited, referral source, and cookies. We use Google Analytics for aggregated traffic measurement.

3. How we use your information

We use personal information strictly for: (a) reviewing AI Trainer applications and verifying identity; (b) assigning tasks, evaluating quality, and processing weekly payouts; (c) delivering services to clients per signed agreements; (d) communicating about your account, invoices, and product updates; (e) complying with Indian tax and regulatory requirements; (f) detecting fraud or platform abuse.

4. Sharing with third parties

We share minimum-necessary data with: Netlify (website hosting), Google (Analytics, OAuth login, Workspace), Zoho (transactional email), and payment processors required for INR disbursement. Client projects see only anonymized trainer IDs — never personal identifiers.

We do not sell personal data. We do not share your information with advertisers or data brokers.

5. Face data and image collection

This section applies to projects in which you photograph yourself or upload your own photographs — for example facial age-progression data collection. It adds to, and does not replace, the rest of this policy.

What we collect. Selfies and head-pose photographs you take with your device's camera inside the collection flow; older photographs you choose yourself from your device's photo library for projects that ask for them — nothing is read from your library unless you pick it; and, recorded with each photograph, the time it was taken, the angle your head was turned to, whether your eyes were open, an estimate of expression, how much of the frame your face fills, and your device's model and operating-system version. We collect these solely to assemble training and evaluation datasets for the client who commissioned the project, and to check each photograph meets that project's requirements.

On-device face detection. While the camera is open we run face detection on your device, in real time, to help you line your face up in the frame and to tell you when a photograph will not be accepted — for example when your eyes are closed or your head is turned too far. This runs through Google ML Kit in our mobile application and Google MediaPipe Face Landmarker in the browser-based version. It runs on your device. The live camera frames it reads are used for that purpose only, in the moment, and are never uploaded. Only the photographs you actually take, and the measurements listed above, leave your device.

No biometric identification. We do not create, derive or store a face template, faceprint or facial-geometry vector for recognising or verifying who you are. The face-landmark data the on-device detector produces stays on your device and is not transmitted or retained. We do not use Apple's TrueDepth camera data or Face ID data. We do not perform face recognition, face matching, face search or identity verification on your photographs, and we do not use them to identify you or anyone else.

Consent and age. You must be 18 or older and must give explicit, informed consent before any photograph is taken or uploaded for these projects. You are told beforehand what the photographs are for and who will receive them. Participation is voluntary and you may stop at any point.

Storage and security. Photographs are transmitted over HTTPS/TLS and stored on cloud infrastructure with AES-256 encryption at rest. Access is restricted to authorised personnel who need it to review and deliver the project.

Who receives them. Photographs and the information recorded with them are delivered to the client who commissioned the project, under a written agreement limiting them to the purpose you consented to; that delivery may be made into cloud storage or a shared drive folder controlled by that client. We do not sell or rent your photographs or face data, and we do not share them with advertisers, data brokers, or any third party for advertising or marketing.

Retention and deletion. We keep photographs only as long as is necessary to complete and deliver the project you submitted them for, or until you ask us to delete them, whichever is sooner. You can ask for deletion from inside the application, under Profile → Privacy & data → Delete account, confirmed with your password; your account and the photographs you submitted are then permanently deleted within 30 days, and you may cancel the request from the same screen during that period. You can also write to us at the address in this policy. Where a photograph has already been delivered to a client, we pass your deletion request on to that client as our agreement with them requires.

6. Data security

We use HTTPS across all our properties, encrypt sensitive fields (PAN, Aadhaar, bank details) at rest, maintain access controls on administrative systems, and log privileged actions for audit. Despite these measures, no system is perfectly secure — we will notify you promptly if a breach affects your data.

7. Retention

Application data from rejected applicants is retained for up to 2 years. Active AI Trainer records are retained throughout your engagement and for 7 years thereafter to comply with Indian tax record-keeping requirements. Client records are retained per your Master Services Agreement, typically 7 years.

8. Your rights under the DPDP Act 2023

As a Data Principal under India's Digital Personal Data Protection Act 2023, you have the right to: access your personal data, request correction of inaccuracies, request erasure where legally permissible, nominate another person to exercise your rights in case of death or incapacity, and lodge a grievance with our Grievance Officer.

To exercise any of these rights, email contact@trainplex.in. We respond within 30 days.

9. Cookies

We use essential cookies for session management and analytical cookies for aggregated traffic analysis (Google Analytics). You can disable cookies in your browser settings, though some features may not work correctly.

10. Children

TrainPlex is not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us personal information, please contact us immediately for deletion.

11. International transfers

Our servers are located in India. Some third-party processors (Google, Netlify) may process data outside India under their own compliance frameworks. We ensure transfers meet Indian law requirements.

12. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted here, with the "Last updated" date above revised. Material changes affecting active users will be communicated by email.

13. Contact

Grievance Officer / Privacy Contact:
TrainPlex (a flagship product of Cybdeer Network Pvt Ltd)
Jaipur, Rajasthan, India
Email: contact@trainplex.in
Website: trainplex.in

14. Related policies

This Privacy Policy should be read together with our Terms of Service and Refund Policy. For information about TrainPlex services and how we work with AI companies, see our services, case studies, and home page. AI Trainers can review the AI Trainer programme or read our blog for practical guides on Indic AI data quality. Questions? Contact us.