Privacy Policy & Data Notice
At 1008 Network ("1008 Network", "we", "us", or "our"), we operate as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act, India). Protecting the commercial secrets, trade ideas, candidate profiles, and personal data of founders, operators, and investors is core to our operational integrity.
Mutual NDA from Day 1
All founder business theses, technical architectures, and applicant resumes are held in strict commercial confidence.
Zero Data Brokerage
We never sell, rent, monetize, or trade your personal or commercial data with third-party brokers or advertisers.
Active Listing Lifecycle
Partner network listings and inactive profile data are automatically archived or purged to prevent stale data retention.
DPDP Act 2023 Compliant
Fully aligned with India's Digital Personal Data Protection Act 2023 and international data privacy principles.
Scope & Statutory Governance
This Privacy Policy applies to digital personal data collected and processed through https://www.1008.network (the "Platform"). We comply with:
- The Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India;
- The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
- Global data protection best practices including the General Data Protection Regulation (GDPR) for international and cross-border users.
Categories of Digital Personal Data Collected
We collect data strictly necessary to fulfill venture co-building, talent matchmaking, and capital discovery services:
A. Data Provided Voluntarily by You
- Founder & Venture Studio Intake: Full name, work email, phone number, entity stage, sector, operational bottlenecks, revenue run-rate, and deck URLs.
- Partner Network & Talent Pool: Full name, email, phone, LinkedIn profile URL, current company & role, years of domain experience, primary functional capability, target equity expectations, and executive bio.
- Capital Network Investor Profiles: Full name, accredited email, phone, investor category (Angel, Family Office, Corporate CXO), target deployment tier (₹2L–₹5Cr+), risk appetite, and sector mandates.
- General Inquiries: Name, work email, organization, inquiry category, and message payload sent via contact or diagnostic forms.
B. Technical Metadata & Analytics
- Device & Telemetry Data: Browser type, operating system, anonymized IP addresses, session duration, and page view sequences.
- Privacy-Conscious Analytics: We use Google Analytics 4 (GA4) with IP anonymization to evaluate aggregate platform usage patterns without profiling or tracking individual visitors across the web.
Legal Grounds for Processing (Sections 4 & 7 of DPDP Act)
We process personal data solely on lawful grounds under Indian data protection law:
Reasonable Security Safeguards (Section 8(5) DPDP Act)
In accordance with Section 8(5) of the DPDP Act 2023, 1008 Network implements technical and organizational measures to prevent personal data breaches:
- Transport Layer Encryption: All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 cryptographic protocols.
- Strict Access Control: Access to confidential venture proposals and talent records is restricted to authorized partners bound by non-disclosure agreements.
- Content Security Policy (CSP): Next.js security headers with strict script, frame, and connect constraints to prevent cross-site scripting (XSS) and clickjacking.
- Anti-Abuse Architecture: Sliding-window rate limiting, client input sanitization, and hidden honeypot spam traps neutralize automated attacks.
Data Retention & Automated Archiving
We enforce strict data minimization principles under Indian law:
- Active Partner Postings: Public opportunity listings are curated with active lifecycles to eliminate stale listings.
- Archival Schedule: Talent and investor registration profiles that remain inactive without active matchmaking engagements are archived and permanently purged within 12 months.
- Right to Immediate Erasure: Any user may request immediate erasure of their submitted profile at any time by emailing
join@1008.network.
Information Sharing & Confidential Introductions
We do not sell, barter, lease, or monetize personal data with commercial brokers or third-party advertisers. Data is shared exclusively under the following strict conditions:
- Consensual Introductions: Contact information is shared with prospective co-founders, advisors, or venture partners only after mutual consent under our Mutual NDA framework.
- Infrastructure Processors: Secure cloud infrastructure providers (Vercel, Google Cloud, Web3Forms) operating under contractual confidentiality and data processing agreements.
- Statutory Mandate: Where required by valid court order, regulatory subpoena, or competent statutory authority in India.
Rights of Data Principals (Sections 11–14 DPDP Act 2023)
As a Data Principal under Indian law, you possess the following statutory rights:
To exercise any of these statutory rights, submit a written request to our Grievance Desk at join@1008.network. All requests are acknowledged within 24 hours and completed within 72 hours.
Data Protection Officer & Grievance Redressal Mechanism
In compliance with Section 10 and Section 13 of the DPDP Act 2023 and the Information Technology Act 2000, our designated Grievance Redressal Officer coordinates all privacy inquiries and complaints:
Designation: Data Protection & Grievance Officer
Entity: 1008 Network (1008.network)
Headquarters: Delhi NCR, India (Operating Pan-India)
Direct Grievance Email: join@1008.network
Statutory SLA: Acknowledgment within 24–48 business hours; complete resolution within 30 days.