Privacy Policy

1. Information We Collect

a) Information you provide

We collect information you provide directly when you sign up for the Service, contact us, or otherwise interact with the Service. This includes:

• Account information: name, company name, email address, phone number, billing details, and password (stored as a salted hash).
• Payment information: payment method details processed through our third-party payment processors (we do not store full card details on our servers).
• Support and communication: messages, feedback, and other correspondence you send us.

b) Information collected automatically

When you access the Service, we automatically collect:

• Usage data: feature usage, logs, diagnostics, performance metrics, and events that help us operate and improve the Service.
• Device and browser data: IP address, browser type and version, operating system, device identifiers, and language settings.
• Cookies and similar technologies: see our Cookie Policy for details.

c) Information from third parties

We may obtain information from third-party services and partners, including identity providers (OAuth), analytics providers, and other integrations you enable.

2. How We Use Information

We use personal information for the following purposes:

• To provide and maintain the Service, including account management, authentication, invoicing, and feature delivery.
• To communicate with you about your account, updates, security alerts, and support requests.
• To improve, analyze, and develop the Service, including troubleshooting, usage analytics, testing, and personalization.
• To comply with legal obligations, detect and prevent fraud, abuse, and security incidents.
• For marketing and promotional purposes (only where permitted). You can opt out of marketing emails via the unsubscribe link in those emails or by contacting us.

3. Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area (EEA) or the UK, our legal bases for processing personal data include:

• Performance of a contract — necessary to provide the Service and fulfill our obligations.
• Legal compliance — to comply with applicable laws and regulations.
• Legitimate interests — for fraud prevention, internal analytics, and improving the Service, when such interests are not overridden by your rights.
• Consent — where requested (e.g., certain marketing communications or optional cookies).

4. How We Share Information

We may share personal information in the following limited circumstances:

• Service providers: third parties that perform services on our behalf (hosting, analytics, payment processing, email delivery). These providers are contractually bound to process information only per our instructions.
• Affiliates and business transfers: in the event of a merger, acquisition, or sale of assets, user data may be transferred and become subject to a different privacy policy.
• Legal and safety reasons: to comply with laws, respond to lawful requests, protect rights, property, or safety, and to detect or prevent illegal activities.
• With your consent: when you authorize us to share information for a specific purpose.

5. Data Retention

We retain personal information as long as necessary to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer necessary, we delete or anonymize it.

6. International Transfers

Our servers and third-party providers may be located in countries outside your jurisdiction. When we transfer personal data across borders, we protect it using appropriate safeguards such as standard contractual clauses, data processing agreements, and other measures required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information, including:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request deletion of your data (subject to legal exceptions and account retention requirements).
• Restriction or objection: restrict or object to certain processing.
• Data portability: receive your data in a structured, commonly used format.

To exercise your rights, contact us at the address below. We may need to verify your identity before fulfilling requests.

8. Security

We implement reasonable organizational and technical measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. No system is completely secure; in the event of a data breach, we will comply with applicable law regarding notification and response.

9. Children

Our Service is not intended for children under 16. We do not knowingly collect personal data from children under this age. If we learn that we have collected such data, we will take steps to delete it.

10. Third-Party Links

The Service may contain links to third-party websites and services. This policy does not apply to those third parties. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll post the revised policy here with a new effective date and, where appropriate, notify you by email or through the Service.

12. Contact Us

If you have questions or requests about this Privacy Policy or our data practices, contact:

BasilGregory Software Labs Private Limited
C6, Dotspace The Cliff3, Market Road, Kuravankonam,
Thiruvananthapuram, Kerala, India - 695003
Email: support@appxiom.com