Privacy Policy

1. Introduction

Exthalpy Technologies Pvt. Ltd. (“Exthalpy,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains:

What data we collect,
How we use it,
Your rights regarding your data, and
How we safeguard it.

By using our services, you consent to the practices described in this Policy.

2. Data We Collect

We may collect the following categories of information:

Account Information – name, email address, contact details, company details.
Usage Data – logs of interactions with Exthalpy’s platform (e.g., API calls, session duration, error reports).
Transaction Data – billing details, payment method, subscription history.
Communications Data – emails, support tickets, and messages exchanged with our team.
AI Input & Output Data – text, voice, or video provided to Exthalpy agents and corresponding outputs (subject to consent policy).
Technical Data – IP address, browser type, device information, cookies.

3. How We Use Your Data

We process personal and usage data for the following purposes:

Service Delivery – to operate and maintain our AI agent infrastructure.
Account Management – to verify accounts, provide customer support, and send notifications.
Billing & Transactions – to process payments, invoices, and subscriptions.
Security & Compliance – to detect fraud, ensure platform integrity, and comply with legal obligations.
Product Improvement – to analyze trends, monitor performance, and enhance features.
Marketing (Optional) – to send updates, newsletters, and promotional offers (with opt-out options).

4. Data Sharing & Disclosure

We may share your data only in the following cases:

Service Providers – trusted vendors (cloud hosting, payment gateways, analytics).
Legal Compliance – if required by law, regulation, or government request.
Business Transactions – in case of merger, acquisition, or restructuring.
User Consent – with your permission for integrations with third-party services (e.g., CRMs, payment processors).

We do not sell your data to third parties.

5. Cookies & Tracking

We use cookies and similar technologies for:

Session management and authentication,
Analytics and performance tracking,
Personalization of user experience.

For details, see our Cookie Policy.

6. Data Retention

We retain personal data as long as necessary for service provision, legal compliance, and dispute resolution.
AI interaction logs may be stored temporarily for debugging and product improvement, unless users opt out.
Data can be deleted upon verified request (see Section 8).

7. Security Measures

We implement industry-standard safeguards, including:

Data encryption (in transit and at rest),
Access controls and authentication,
Regular audits and monitoring,
SOC 2 and GDPR-aligned practices.

However, no system is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction (including GDPR/DPDP), you have the right to:

Access – request a copy of your personal data.
Correction – update inaccurate or incomplete data.
Erasure – request deletion of your personal data.
Portability – obtain a machine-readable copy.
Withdraw Consent – revoke consent for optional data processing.
Object/Restrict Processing – limit how your data is used.

Requests may be submitted to privacy@exthalpy.com.

9. International Data Transfers

Exthalpy is headquartered in India, but we may process and store data in cloud infrastructure located globally.
When transferring data outside India/EU, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent protections.

10. Children’s Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children.

11. Changes to Privacy Policy

We may update this Policy periodically. Any material changes will be communicated through email or platform notifications.

12. Contact Us

For privacy-related concerns, contact us:
📧 privacy@exthalpy.com
📍 Exthalpy Technologies Pvt. Ltd.