Privacy Policy

AftrBase Private Limited is a company incorporated under the laws of India. For personal data processed by AftrBase for its own purposes, AftrBase acts as the relevant Data Fiduciary under applicable Indian data-protection law.

Registered office: A-432, Plot No. B8, Paryatan Vihar CGHS, Vasundhara Enclave, East Delhi, Delhi – 110096, India.

Website: https://aftrbase.com · Privacy contact: [email protected] · Grievance contact: [email protected]

This Privacy Policy applies to personal data collected through the AftrBase website; AftrBase applications and software; account registration and onboarding; communications with AftrBase; customer support; product usage; integrations and connected services; and other interactions with AftrBase.

It does not apply to third-party websites, applications or services that we do not control.

Depending on how you use AftrBase, we may collect the following categories of personal data.

· Account and registration information: name; email address; phone number; password or authentication information; company or organisation name; job title or role; account preferences; and other information you provide during registration.

· Profile information: profile photograph; professional information; preferences; workspace information; and other information you choose to associate with your account.

· Usage and technical information: IP address; browser type; operating system; device information; approximate location derived from technical information where applicable; pages and features accessed; dates and times of access; referring URLs; session information; crash reports; diagnostic information; and logs relating to security and system activity.

· Content you provide: documents; text; files; records; comments; messages; images; business information; workspace information; configuration data; and other content submitted through AftrBase. The exact categories depend on the products and features you use.

· Payment and billing information: transaction reference; billing name; billing address; subscription information; payment status; and limited payment-related information. Where a third-party payment processor handles payment-card information, AftrBase does not ordinarily receive or store the complete payment-card number.

· Communications: your name; email address; phone number; support requests; correspondence; attachments; and other information you choose to provide.

Providing the Services — to create and manage accounts; authenticate users; provide requested functionality; operate workspaces; store and retrieve information; provide customer support; and perform the Services requested by you or your organisation.

Security and fraud prevention — to protect accounts; detect suspicious activity; prevent fraud; investigate security incidents; prevent abuse; and protect the integrity of our systems.

Product improvement — to understand how our Services are used, diagnose technical problems, improve functionality, develop new features and improve user experience. Where information is used for analytics or product improvement, we will use appropriate safeguards and will not use your Customer Data for unrelated purposes merely because it is available to us.

Communications — to send service notifications; security alerts; account-related communications; billing communications; support communications; and other communications necessary to provide the Services. Where required by applicable law, we will obtain consent before sending promotional communications.

Legal compliance — to comply with applicable law; respond to lawful requests; enforce our agreements; establish, exercise or defend legal claims; and protect our rights, property and users.

Where applicable law requires consent, we will seek consent before processing personal data on that basis. Consent requests will be presented in clear and understandable language and will identify the relevant purposes and categories of personal data.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to provide certain Services where the relevant processing is necessary to provide them.

We seek to collect and process personal data that is reasonably necessary for the purposes described in this Privacy Policy.

You should not submit sensitive or highly confidential personal information through AftrBase unless the relevant Service specifically requires it and you have appropriate authority to do so.

Service providers — we may use third-party providers to support cloud hosting; infrastructure; authentication; analytics; customer support; communications; payment processing; security; monitoring; error reporting; and other business operations. These providers may process personal data on our behalf and will be subject to contractual or other appropriate safeguards.

Business customers and workspace administrators — if you use AftrBase through an organisation, that organisation and its authorised administrators may be able to access information associated with its account or workspace.

Legal and regulatory authorities — we may disclose information where reasonably necessary to comply with applicable law, legal process, governmental requests or court orders, or to protect the rights, safety or security of AftrBase, our users or others.

Corporate transactions — personal data may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets or similar transaction, subject to applicable law.

Some of our service providers or infrastructure may be located outside India. Where personal data is transferred outside India, we will comply with applicable Indian data-protection requirements and implement appropriate contractual, technical or organisational safeguards where required.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may depend on the nature of the information; the purpose for which it was collected; whether your account remains active; legal or regulatory requirements; dispute resolution; security and fraud prevention; and contractual obligations.

When personal data is no longer required, we will delete, anonymise or otherwise dispose of it in accordance with applicable law and our internal retention practices.

Subject to applicable law, you may have the right to obtain information about processing; access personal data; request correction of inaccurate or incomplete personal data; request deletion where applicable; withdraw consent where processing is based on consent; nominate another individual to exercise applicable rights where permitted by law; and lodge a grievance concerning our processing.

Requests may be submitted using the contact details in “Contact us”. We may need to verify your identity before responding, and we will process requests within the periods required by applicable law.

AftrBase is intended for users who are legally capable of entering into binding agreements. We do not knowingly permit individuals who do not satisfy applicable age or legal-capacity requirements to create accounts.

If we learn that personal data has been collected in violation of applicable requirements concerning children, we will take reasonable steps to address the situation.

We may use cookies, local storage, pixels and similar technologies to operate the website; maintain sessions; remember preferences; understand website usage; improve performance; maintain security; and measure marketing effectiveness where applicable.

Where required, we will obtain consent for non-essential cookies and similar technologies. You can control certain cookies through your browser or available cookie settings.

We maintain reasonable technical and organisational safeguards designed to protect personal data from unauthorised access, alteration, disclosure, loss or destruction. Depending on the nature of the information and Services, safeguards may include encryption; access controls; authentication mechanisms; logging and monitoring; secure infrastructure; backups; vulnerability management; and employee and contractor access controls.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a personal-data breach occurs, we will take reasonable steps to contain, investigate and remediate the incident, and provide notifications where required by applicable law.

The Services may contain links to or integrations with third-party services. Those services are governed by their own terms and privacy policies. AftrBase is not responsible for the privacy or security practices of third parties that we do not control.

Where AftrBase processes personal data contained in Customer Data on behalf of an organisation, the organisation may determine the purposes and means of processing, and may have separate responsibilities toward the individuals whose personal data it provides to AftrBase.

AftrBase will process such information in accordance with the applicable customer agreement, DPA and documented instructions, subject to applicable law.

You may receive transactional and service-related communications necessary to operate your account. Where required, promotional communications will be sent only in accordance with applicable law and your communication preferences.

You may unsubscribe from promotional email using the mechanism included in the relevant communication. Unsubscribing will not prevent us from sending essential account, security, billing or service communications.

If you provide AftrBase with personal data relating to another person, you represent that you have the necessary authority and permissions to provide that information and that its processing through AftrBase is lawful.

You should provide accurate information; keep your account credentials secure; avoid submitting unnecessary personal information; use the Services lawfully; and promptly notify us of suspected unauthorised access or security incidents.

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements or business practices.

If we make material changes, we will provide reasonable notice through the Services, by email or another appropriate method. The updated policy becomes effective on the date specified in the notice.

If you have a concern about our processing of personal data, you may contact us first at [email protected] — Grievance Officer / Privacy Contact, AftrBase Private Limited, Delhi, India.

We will acknowledge and address grievances in accordance with applicable law. Where applicable, you may also exercise your statutory rights before the competent regulatory authority or tribunal.

AftrBase Private Limited, A-432, Plot No. B8, Paryatan Vihar CGHS, Vasundhara Enclave, East Delhi, Delhi – 110096, India.

Email: [email protected] · Website: https://aftrbase.com