+918879952595
Varanasi, UP- IN
Let’s Talk
Let’s Talk

Privacy Policy

Effective date: 5 September 2025

We respect your privacy and are committed to protecting it. This Privacy Policy explains how Ektasi Technology (“Ektasi”, “we”, “us”, “our”) collects, uses, discloses, and safeguards personal data when you visit our websites, interact with our marketing or sales teams, use our products and services, or communicate with us in any way.

This policy is informational and not legal advice.

Quick Navigation

  1. Who we are & contact
  2. Scope & roles
  3. Data we collect
  4. How we use data (including marketing)
  5. Cookies & similar technologies
  6. How we share data
  7. Legal bases (GDPR/UK GDPR)
  8. Your privacy rights & choices
  9. Region-specific disclosures (India, EEA/UK, California)
  10. Retention
  11. Security
  12. International transfers
  13. Children’s privacy
  14. Third-party sites & social media
  15. Changes to this policy
  16. How to contact us

1) Who we are & contact

Controller: Ektasi Technology
Registered address: Varanasi, Uttar Pradesh, India
Phone: +91 88799 52595
Email: info@ektasi.io

When we process personal data for our own purposes (e.g., our website, marketing, hiring, client billing), we act as a data controller. When clients use our products or Ektasi Labs tools (e.g., bulk email/SMS, social automation, ERP modules) and we process personal data on their instructions, we act as a data processor/service provider.

2) Scope & roles

This policy covers our online properties, communications, events, and services. If you are an end user of a client that uses our tools, please also review that client’s privacy notice; they determine the purposes of processing and we follow their instructions under a data processing agreement.

3) Data we collect

  • Identifiers & contact data: name, email, phone/WhatsApp number, company, role, postal address.
  • Professional data: industry, team size, interests, project requirements, RFP details.
  • Usage & device data: pages viewed, links clicked, session duration, referrer, IP address, device/OS/browser, language, approximate location, campaign/UTM parameters.
  • Marketing preferences: email/SMS/WhatsApp opt-in status, unsubscribe signals, cookie consents.
  • Support & communications: messages, tickets, call notes, recordings when permitted.
  • Payment & commercial data: invoicing, purchase history, tax and billing information (processed via payment providers).
  • Client end-user data (processor context): customer/contact records, event logs, content, analytics—only as instructed by the client.

We collect data directly from you (forms, email, phone, WhatsApp, meetings), automatically via cookies/SDKs/pixels, and from third-party sources (e.g., partners, public databases, or social profiles consistent with your settings and the law).

4) How we use data (including marketing)

  • Provide & improve services: operate sites and apps; develop features; ensure reliability and security.
  • Sales & customer success: respond to inquiries; proposals; onboarding; support; training.
  • Marketing & personalization: send newsletters and product updates; show relevant content and ads; measure campaign performance; build audience segments (e.g., by industry or interest) with appropriate consent.
  • Analytics & research: understand usage, A/B test, forecast capacity, optimize funnels.
  • Security & fraud prevention: detect, investigate, and prevent malicious or illegal activity.
  • Legal & compliance: contracts, tax, audits, enforcing terms, and responding to lawful requests.

Marketing communications. We use email, SMS, and WhatsApp for product news, invites, and educational content. You can opt out at any time:
• Email: click “unsubscribe” or email info@ektasi.io with subject “Unsubscribe”.
• SMS/WhatsApp: reply “STOP”. Message and data rates may apply.

Profiling & automated decisions. We may create segments (e.g., by industry, role, engagement) to tailor content. We do not make decisions that produce legal or similarly significant effects without human review.

5) Cookies & similar technologies

We use first-party and third-party cookies, pixels, and SDKs to provide core functionality, remember preferences, analyze traffic, and support advertising/remarketing. You can manage consent via our cookie banner (where shown) and browser settings. Blocking some cookies may affect site functionality.

  • Strictly necessary: security, session management, load balancing.
  • Preferences: remember settings such as language and region.
  • Analytics: page performance, events, funnels (e.g., GA4, server-side tagging or similar).
  • Advertising/remarketing: measure campaigns and build audiences (e.g., Meta Pixel, LinkedIn Insight).

6) How we share data

  • Service providers & partners: cloud hosting, analytics, communications, billing, security, and support vendors under contracts that protect your data.
  • Clients (processor role): when we operate tools on a client’s behalf, we process data only for that client and share results back to them per contract.
  • Business transfers: merger, financing, or acquisition events (we will notify where required).
  • Legal: to comply with law or protect rights, safety, and security.

We do not sell personal data. For jurisdictions that define “share” for cross-context behavioral advertising (e.g., California), you can opt out as described in Your rights & choices.

  • Consent (e.g., email/SMS/WhatsApp marketing, non-essential cookies).
  • Contract (to provide requested services, respond to inquiries, or perform agreements).
  • Legitimate interests (to secure our services, understand usage, and market to business contacts in a proportionate way; you may object at any time).
  • Legal obligation (tax, accounting, compliance).
  • Vital/public interests (rare; safety/security scenarios).

8) Your privacy rights & choices

Depending on your location, you may have rights to access, correct, update, delete, restrict or object to processing, opt out of targeted advertising, portability, and to withdraw consent. To exercise rights or appeal a decision, email info@ektasi.io with “Privacy Request” in the subject, or call +91 88799 52595. We may verify your identity and respond within the time required by law.

Marketing choices: unsubscribe in any message; reply STOP to SMS/WhatsApp; adjust cookie settings via our banner; or email us directly.

Authorized agents (where applicable): You may designate an agent; we may require proof and direct verification.

9) Region-specific disclosures

India (DPDP Act, 2023)

  • Where required, we obtain your consent for processing and for sending promotional communications. You may withdraw consent at any time.
  • You can request access, correction, erasure, or grievance redressal by contacting us at info@ektasi.io.
  • We implement reasonable security safeguards and maintain logs and audits as appropriate.

EEA/UK (GDPR/UK GDPR)

  • You have rights described in Section 8. We rely on consent, contract, legitimate interests, and other bases listed in Section 7.
  • When transferring data outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses.

California (CPRA)

  • We do not sell personal information for money. We may “share” personal information for cross-context behavioral advertising. You can opt out by contacting us and adjusting cookie preferences.
  • You have rights to know, correct, delete, access, and opt out of sale/share, and to limit use of sensitive personal information (we do not use SPI for inferring characteristics).

10) Retention

We keep personal data only as long as necessary for the purposes described, including legal, accounting, or reporting obligations. Typical periods:

  • Marketing contacts: until you opt out or after 24 months of inactivity.
  • Contract & billing records: up to 7 years (or as required by law).
  • Support logs & telemetry: 12–24 months, unless needed longer for security or legal reasons.
  • Client processor data: per client instructions and our agreement, then securely deleted or returned.

11) Security

We use administrative, technical, and physical safeguards appropriate to the risk, including least-privilege access, encryption in transit, secure development practices, backups/DR, and monitoring. No system is 100% secure; please contact us immediately if you believe your data has been compromised.

12) International transfers

We may process and store data in countries other than where you live. Where your laws require it, we use lawful transfer mechanisms (e.g., SCCs, contractual protections) and assess partners for appropriate safeguards.

13) Children’s privacy

Our services are not directed to children under 13 (or the age defined by your local law). We do not knowingly collect such data. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

14) Third-party sites & social media

Our sites may link to third-party sites, plugins, and platforms. Their privacy practices are governed by their own policies.

15) Changes to this policy

We may update this policy to reflect changes in law, technology, or our practices. We will post the updated version and change the effective date. Material changes will be notified where required.

16) How to contact us

Email: info@ektasi.io  |  Phone: +91 88799 52595
Postal: Ektasi Technology, Varanasi, Uttar Pradesh, India

Appendix A — Summary of cookies & technologies (examples)

Vendors and tools may change; see your cookie banner or settings for the latest list.

  • Analytics: GA4/server-side tagging; event and funnel measurement.
  • Advertising: Meta Pixel, LinkedIn Insight, and similar for reach and performance; used with consent where required.
  • Communications: email service provider; WhatsApp Business; SMS gateway (opt-in required).
  • Security & reliability: CDN/WAF, error tracking, uptime monitoring.

Appendix B — Processor services (Ektasi Labs)

When clients use Ektasi Labs (bulk email/SMS, social automation, ERP modules), we process data only under their instructions and our data processing terms. We implement security, access controls, logging, and data deletion/return procedures upon termination or request.