Privacy policy

This policy explains how Evolqon Technologies LLP ("Evolqon", "we", "us") handles personal data. It covers this website, our software products, and work we carry out for clients. We are a limited liability partnership registered in India, based in Bengaluru.

It is written against the Digital Personal Data Protection Act, 2023 (the DPDP Act) and the Information Technology Act, 2000 together with the SPDI Rules, 2011.

The two roles we act in

This distinction decides who is answerable for what, so it comes first.

• As a Data Fiduciary, for people who contact us, visit this website, or hold an account with us. We decide why and how that data is handled, and this policy governs it.
• As a Data Processor, for the data our customers enter into our products — their own customers, students, orders and payments. That data belongs to them. They decide what is collected and why; we hold and process it on their instructions, under the licence agreement between us. If you are a customer of a business that uses our software, ask that business for its privacy policy.

Personal data we collect

• Enquiry data: your name, email address or phone number, and whatever you write to us through a form, the contact panel, email or WhatsApp.
• Account data: for licence holders, the contact and business details needed to create, bill and support an account, including GST details where applicable.
• Billing data: invoices and payment records. Card and bank details are handled by our payment provider and are not stored by us.
• Technical data: request logs kept by our hosting provider, including IP address, browser type and pages requested. These are used for security and diagnosing faults.
• Client project data: correspondence, documents and credentials shared with us during an engagement, held only for the duration of that work and its record-keeping.

We do not buy personal data, we do not sell it, and we do not share it with advertisers.

Why we hold it, and on what basis

Under the DPDP Act we rely on your consent, given when you contact us or enter into an agreement with us, and on the legitimate uses the Act permits — including performing a contract you are party to and meeting legal obligations.

• To answer enquiries and provide quotes.
• To provide, support and improve the products you licence.
• To bill, and to keep the tax and accounting records Indian law requires.
• To carry out client engagements and hand work over at the end of them.
• To keep our systems secure and investigate misuse.

Cookies and analytics

This website sets no advertising or tracking cookies and runs no third-party advertising scripts. Our products use strictly necessary cookies to keep a signed-in session working. Where analytics are used, they are configured to measure usage rather than identify individuals.

Who else processes this data

We use a small number of processors, each handling data on our instructions and under contract:

• Hosting and content delivery for this website and our products.
• A content management service for the text and images on this website.
• Amazon Web Services (Simple Email Service) to deliver enquiry email.
• A payment provider for subscription billing and invoicing.
• Email and business productivity services for correspondence.

A current list of processors is available on request. We will tell licence holders before adding a processor that handles their data.

Where data is stored

We prefer Indian regions for hosting and email where the service offers them. Some processors operate outside India; where data is transferred abroad, it is to countries not restricted under the DPDP Act, and under contractual terms requiring protection equivalent to this policy.

How long we keep it

• Enquiries that do not lead to work are kept only while they are useful, and deleted on request.
• Account, billing and tax records are kept for the period Indian tax and company law requires. [Confirm the exact retention period with your accountant before publishing.]
• Customer data inside our products is retained while the licence is active. On termination it is available for export for an agreed period and then deleted, as set out in the licence agreement.
• Client project material is deleted or returned at the end of the engagement, apart from what we must retain as a record of the work.

Security

We keep access to production systems limited to those who need it, use multi-factor authentication on the accounts that matter, encrypt data in transit, and rely on managed platforms for encryption at rest. No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal data we will notify you and the Data Protection Board of India as the DPDP Act requires.

Your rights

Under the DPDP Act you may:

• Ask what personal data of yours we hold and how it is being processed.
• Ask us to correct or complete inaccurate data.
• Ask us to erase data we no longer need.
• Withdraw consent you have given, at any time.
• Nominate someone to exercise these rights on your behalf in the event of death or incapacity.
• Raise a grievance, and escalate it to the Data Protection Board of India.

Write to contact@evolqon.com and we will respond. If your data sits inside a product operated by one of our customers, we will pass the request to that business, since the data is theirs.

Children

Our products are sold to businesses and are not directed at children. We do not knowingly collect the personal data of anyone under 18 through this website. Where a customer of ours enrols minors — an academy, for example — that customer is responsible for obtaining verifiable parental consent as the DPDP Act requires.

Grievance redressal

Complaints about how we handle personal data go to our Grievance Officer at contact@evolqon.com, and we will acknowledge within a reasonable period. [Appoint a named Grievance Officer and publish the name, designation and address here — the DPDP Act and the IT Rules both require it.]

Changes

We will update this policy as our products and obligations change, and will note the date it was last revised. Material changes affecting licence holders will be communicated directly.

Contact

Evolqon Technologies LLP, Bengaluru, Karnataka, India. Email contact@evolqon.com.