{{PLACEHOLDER}} and have a qualified lawyer review before publishing. This is not legal advice.{{LEGAL_ENTITY_NAME}} · Last updated: {{LAST_UPDATED}}
This policy explains how {{LEGAL_ENTITY_NAME}} (“we”, “us”) collects, uses, and protects personal data in connection with {{BRAND_NAMES}} (the “Services”). We comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 (SPDI Rules), and — for users in those regions — the EU/UK GDPR and applicable US laws.
Data Fiduciary: {{LEGAL_ENTITY_NAME}}, {{POSTAL_ADDRESS}}. Contact: {{SUPPORT_EMAIL}}.
| Data | Purpose (DPDP: purpose limitation) |
|---|---|
| Account & contact details (name, work email) | Provisioning your licensed account, support, billing |
| Usage & security logs, device/agent data | Operating the Service, security monitoring, audit |
| Billing details | Invoicing, tax (GST) compliance |
We collect only what is needed for these purposes and retain it only as long as necessary or as law requires.
We process personal data on the basis of your consent and/or to perform our contract with your organisation. Under the DPDP Act you consent at the point of collection via a clear notice; you may withdraw consent at any time by contacting us (withdrawal does not affect prior lawful processing).
You may request to access, correct, update, or erase your personal data, request a summary of processing, nominate another person to exercise rights on your behalf, and raise a grievance. To exercise any right, email {{SUPPORT_EMAIL}}. GDPR users additionally have portability and objection rights.
The Services are intended for business use by adults. Under the DPDP Act, anyone under 18 is a “child”. We do not knowingly process a child's personal data without verifiable parental/guardian consent, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. Account holders confirm they are 18 or older at sign-up/activation. US COPPA: we do not knowingly collect data from children under 13.
We use only essential cookies required to run the Service and keep you signed in. We do not run third-party session-replay, behavioural tracking, or advertising cookies by default. Any product analytics, if enabled, are privacy-preserving with input fields masked.
Fonts are self-hosted; we do not load them from third-party CDNs, so your IP address is not shared with font providers. We share personal data only with processors needed to run the Service (e.g., hosting, email delivery, payment) under contract, and never sell it.
We apply reasonable security practices (encryption in transit and at rest where applicable, access controls, audit logging) consistent with the SPDI Rules.
In the event of a personal-data breach we will notify the Data Protection Board of India and affected users as required, and report to CERT-In within the mandated timelines.
{{GRIEVANCE_OFFICER_NAME}}
Email: {{GRIEVANCE_OFFICER_EMAIL}}
Address: {{POSTAL_ADDRESS}}
We acknowledge grievances within 24 hours and resolve them within the timelines prescribed by law.
We will post updates here and adjust the “Last updated” date. Material changes will be notified to account holders.