Privacy Policy

1. Introduction

Astafic Technologies Private Limited ("Astafic", "we", "our", or "us") respects your privacy and is committed to protecting your personal information and business data.

This Privacy Policy explains how we collect, use, store, process, disclose, and protect information when you access our websites, applications, software platforms, products, and services.

This policy applies to all visitors, registered users, customers, business partners, and other individuals who interact with Astafic.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We may collect the following categories of information:

2.1 Personal Information

Depending on how you use our services, we may collect:

• Full name
• Email address
• Mobile phone number
• Business name and company details
• Business address
• Billing and shipping address
• Account login credentials
• Profile information
• Communication preferences

2.2 Business Information

When you use our business management software and related services, we may collect:

• Business and company details
• Customer and client records
• Product and inventory information
• Sales orders and purchase records
• Quotations, invoices, and billing information
• Transaction and payment records
• Project and operational information
• Uploaded documents, images, and files

Authority Notice: You are responsible for ensuring that you have the necessary authority to provide personal or business information belonging to your employees, customers, suppliers, or other individuals.

2.3 Technical Information

We may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Device type and operating system
• Website usage information
• Pages visited and time spent
• Login activity
• Application performance information
• Error logs and diagnostic information

2.4 Payment Information

When you purchase our products or subscribe to our services, payment-related information may be processed by authorised third-party payment service providers.

We may receive transaction references, payment status, subscription information, and billing details.

We do not intend to store complete payment card details or sensitive banking authentication credentials on our own servers.

3. How We Use Your Information

Astafic may use collected information for the following purposes:

• Creating and managing user accounts.
• Providing access to our websites, software, and applications.
• Delivering business management and SaaS services.
• Processing subscriptions, payments, and transactions.
• Managing customer support requests.
• Sending account-related notifications and service updates.
• Improving website functionality and user experience.
• Analysing product usage and performance.
• Detecting fraud, unauthorised access, and security threats.
• Maintaining business, accounting, and transaction records.
• Complying with applicable legal and regulatory obligations.
• Communicating important changes to our services or policies.

We will process personal information only for lawful purposes and where an applicable legal basis or permitted ground exists.

4. Cookies and Tracking Technologies

Our website and applications may use cookies, pixels, analytics tools, and similar technologies. These technologies help us:

• Remember user preferences.
• Maintain login sessions.
• Improve website functionality.
• Understand visitor behaviour.
• Analyse website traffic.
• Improve marketing and advertising performance, where applicable.

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some website features.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar tracking technologies.

5. Sharing and Disclosure of Information

Astafic does not sell your personal information to third parties.

We may share information with the following categories of service providers where necessary:

5.1 Technology and Infrastructure Providers

Cloud hosting providers, database providers, storage providers, analytics services, and security service providers.

5.2 Payment Service Providers

Payment gateways and financial service providers responsible for processing transactions and subscriptions.

5.3 Communication Providers

Email, SMS, OTP, customer support, and notification service providers.

5.4 Professional and Legal Advisors

Auditors, accountants, lawyers, consultants, and other professional advisors where necessary.

5.5 Legal and Regulatory Authorities

We may disclose information where required by applicable law, court orders, government authorities, or valid legal processes.

Third-party service providers are expected to handle information in accordance with applicable contractual, confidentiality, and data protection obligations.

6. Data Storage and Security

We take reasonable technical and organisational measures to protect personal information and business data against:

• Unauthorised access
• Accidental loss
• Misuse
• Alteration
• Disclosure
• Destruction

Our security measures may include access controls, authentication mechanisms, encryption where appropriate, secure infrastructure, monitoring, and regular system maintenance.

Although we take reasonable precautions, no internet transmission or electronic storage system can be guaranteed to be completely secure.

In the event of a personal data breach, we will take appropriate steps to investigate, mitigate, and provide notifications as required by applicable law.

7. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.

We may retain certain information for longer periods where required for:

• Tax and accounting purposes.
• Legal and regulatory compliance.
• Dispute resolution.
• Fraud prevention.
• Enforcement of contractual rights.
• Maintaining necessary business records.

When information is no longer required, we will take reasonable steps to delete or anonymise it, subject to applicable legal requirements.

8. Your Privacy Rights

Subject to applicable laws, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete information.
• Request erasure of personal information where legally permissible.
• Withdraw consent where processing is based on consent.
• Raise grievances concerning the processing of your personal information.
• Nominate another individual to exercise applicable rights in the event of your death or incapacity, where provided by law.

To exercise your rights, contact us using the details provided in the Contact Information section. We may need to verify your identity before processing certain requests.

9. Children's Privacy

Our services are intended for businesses, professionals, and individuals who are legally eligible to use them.

We do not knowingly seek to collect personal information from children in violation of applicable law.

Where parental or guardian consent is legally required, we will follow the applicable requirements. If you believe that a child has provided personal information to us unlawfully, please contact us so that we can take appropriate action.

10. Third-Party Websites and Services

Our website or applications may contain links to third-party websites, platforms, integrations, or services.

Astafic does not control the privacy practices, policies, or security procedures of these third parties.

We encourage users to review the privacy policies of third-party services before sharing their information with them.

11. International Data Transfers

Some of our technology and infrastructure service providers may process or store information outside India.

Where personal information is transferred outside India, Astafic will take steps to ensure that such transfers comply with applicable Indian data protection laws and other relevant legal requirements.

12. Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or other business transaction, personal information may be transferred to the relevant successor entity, subject to applicable privacy and data protection requirements.

13. Changes to This Privacy Policy

Astafic reserves the right to update or modify this Privacy Policy from time to time.

Any changes will be published on this page with an updated "Last Updated" date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes. We encourage users to review this page periodically.

14. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India, including applicable data protection and information technology legislation.

Any disputes arising in connection with this Privacy Policy shall be subject to the jurisdiction of the competent courts in India, subject to applicable law.

15. Contact Information

For questions, privacy-related requests, complaints, or concerns regarding this Privacy Policy or the processing of your personal information, please contact us.