1. INTRODUCTION

Humancloud Technologies Private Limited ("Company," "we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our services, visit our website, or interact with us.

This Privacy Policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. DEFINITIONS

Personal Data: Any data about an individual who is directly or indirectly identifiable by or in relation to such data.
Sensitive Personal Data: Personal data consisting of information relating to passwords, financial information, health information, sexual orientation, medical records, biometric information, and any other category of personal data specified by the Government.
Data Principal: The individual to whom the personal data relates.
Data Fiduciary: Any person who alone or in conjunction with others determines the purpose and means of processing of personal data.
Processing: Any operation or set of operations performed upon personal data including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, or destruction.

3. DATA CONTROLLER

Humancloud Technologies Private Limited acts as the Data Fiduciary for personal data processed under this Privacy Policy.

Contact Information:

Address: A-1102, MontClaire, Baner - Pashan Link Rd, Pashan, Pune, Maharashtra 411021
Email: privacy@humancloud.co.in

4. PERSONAL DATA WE COLLECT

4.1 Information You Provide Directly

Account Information: Name, email address, phone number, company details, job title, and professional information
Communication Data: Information in your communications with us, including emails, support requests, and feedback
Profile Information: Professional qualifications, work experience, skills, and other profile-related data
Payment Information: Billing address, payment method details (processed through secure third-party payment processors)

4.2 Information We Collect Automatically

Technical Data: IP address, browser type, device information, operating system, and access times
Usage Data: Pages visited, time spent on our services, click patterns, and navigation paths
Log Data: Server logs, error reports, and system activity logs
Performance Data: Application performance metrics and system diagnostics

4.3 Information from Third Parties

Business Partners: Contact information and professional details from authorized business partners
Public Sources: Publicly available professional information from legitimate sources
Service Providers: Data from third-party service providers who support our operations

5. PURPOSES FOR DATA PROCESSING

We process your personal data for the following lawful purposes:

5.1 Service Delivery

Providing and maintaining our services
Creating and managing user accounts
Processing transactions and payments
Delivering customer support and technical assistance

5.2 Business Operations

Improving our services and developing new features
Conducting market research and analytics
Managing vendor relationships and partnerships
Ensuring system security and preventing fraud

5.3 Legal and Compliance

Complying with applicable laws and regulations
Enforcing our terms and conditions
Protecting our rights and preventing misuse
Responding to legal requests and proceedings

5.4 Communication

Sending service-related notifications and updates
Providing marketing communications (with consent)
Responding to inquiries and requests
Conducting surveys and feedback collection

6. LEGAL BASIS FOR PROCESSING

We process personal data based on the following lawful grounds:

Consent: Where you have given clear consent for specific processing activities
Contract Performance: Where processing is necessary to fulfill our contractual obligations
Legal Obligation: Where processing is required to comply with legal requirements
Legitimate Interest: Where processing is necessary for our legitimate business interests

7. DATA SHARING AND DISCLOSURE

7.1 Internal Sharing

We may share personal data within our organization on a need-to-know basis for legitimate business purposes.

7.2 Third-Party Service Providers

We may share data with trusted service providers who assist us in:

Cloud hosting and data storage
Payment processing and financial services
Analytics and performance monitoring
Marketing and communication services
Customer support and technical assistance

7.3 Legal Requirements

We may disclose personal data when required by law, court order, or government authority, or to protect our rights, property, or safety.

7.4 Business Transactions

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the business transaction.

8. INTERNATIONAL DATA TRANSFERS

We may transfer personal data outside India to countries that provide adequate level of data protection as determined by the Government of India. All international transfers comply with applicable data protection laws and include appropriate safeguards.

9. DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

Account Data: Retained while account is active and for 3 years after account closure
Transaction Data: Retained for 7 years for financial and legal compliance
Communication Data: Retained for 2 years unless ongoing legal matters require longer retention
Technical Logs: Retained for 1 year unless required for security investigations

10. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:

10.1 Technical Safeguards

Encryption of data in transit and at rest
Secure authentication and access controls
Regular security assessments and penetration testing
Intrusion detection and prevention systems
Secure backup and recovery procedures

10.2 Organizational Safeguards

Employee training on data protection practices
Access controls based on role and necessity
Regular security audits and compliance reviews
Incident response and breach notification procedures
Vendor security assessment and monitoring

11. YOUR RIGHTS

As a Data Principal, you have the following rights:

11.1 Right to Information

You have the right to obtain information about our data processing activities and this Privacy Policy.

11.2 Right to Access

You have the right to access your personal data and obtain copies of the data we process.

11.3 Right to Correction

You have the right to correct inaccurate or incomplete personal data.

11.4 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

11.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another data fiduciary.

11.6 Right to Withdraw Consent

You have the right to withdraw consent at any time where processing is based on consent.

11.7 Right to Grievance Redressal

You have the right to file complaints regarding our data processing practices.

12. COOKIES AND TRACKING TECHNOLOGIES

12.1 What are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies to enhance your experience and provide personalized services.

12.2 Types of Cookies We Use

Essential Cookies: Necessary for the website to function properly and cannot be disabled.
Performance Cookies: Collect anonymous information about how visitors use our website to help us improve performance.
Functional Cookies: Remember your preferences and settings to provide a more personalized experience.
Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
Marketing Cookies: Used to track visitors across websites to display relevant advertisements and measure campaign effectiveness.

12.3 Third-Party Cookies

We may use third-party services that set cookies on our behalf:

Google Analytics for website analytics
Social media platforms for content sharing
Advertising networks for targeted marketing

12.4 Cookie Management

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our services.

12.5 Other Tracking Technologies

We may also use web beacons, pixel tags, and similar technologies to collect usage information and improve our services.

13. CHILDREN'S PRIVACY

Our services are not intended for children under 18 years of age. We do not knowingly collect personal data from children under 18 without verifiable parental consent.

14. GRIEVANCE REDRESSAL

14.1 Grievance Officer

We have appointed a Grievance Officer to address privacy-related concerns:

Name: Mr. Nitin Patil

Email: privacy@humancloud.dev

14.2 Complaint Process

Submit your complaint in writing to our Grievance Officer
We will acknowledge receipt within 72 hours
We will investigate and respond within 30 days
If unsatisfied, you may approach the Data Protection Board of India

15. DATA BREACH NOTIFICATION

In the event of a data breach that may pose a risk to your rights and freedoms, we will:

Notify the Data Protection Board of India within 72 hours
Inform affected individuals without undue delay
Provide details about the breach and remedial actions taken
Implement measures to prevent future breaches

16. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes through:

Email notifications to registered users
Prominent notices on our website
In-app notifications where applicable

The updated Privacy Policy will be effective from the date specified in the notice.

17. CONTACT INFORMATION

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Humancloud Technologies Private Limited

Address: A-1102, MontClaire, Baner - Pashan Link Rd, Pashan, Pune, Maharashtra 411021

Email: privacy@humancloud.dev

Website: www.humancloud.dev

Data Protection Officer

Name: Bhardwaj Kulkarni

Email: dpo@humancloud.dev

18. GOVERNING LAW

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000.

Any disputes arising from this Privacy Policy will be subject to the jurisdiction of courts in Pune, Maharashtra, India.