SolutoZeeX Privacy Policy

2. Information We Collect

Information you give us. When you fill in a contact, "Get Started" or free pilot form, book a call, email us, message us on WhatsApp or sign a contract with us, we may collect:

• Your name, email address and phone number
• Your company name and website
• Business details such as monthly support ticket volume, team size and the tools you use
• The contents of your message and any files you share
• Billing and payment details, if you become a client (payments are handled by our payment providers; we do not store full card numbers)

Information collected automatically. When you visit our website, we and our service providers may collect:

• IP address, approximate location (city or country), browser type and device type
• Pages visited, links clicked, time on page and the page that referred you
• Cookie and similar identifiers (see Section 5)

Information from other sources. We may receive information from business partners, referral sources, public professional profiles (such as LinkedIn), and the social media platforms where you interact with us (LinkedIn, Facebook, Instagram, X and YouTube).

3. How We Use Your Information

We use personal information only for clear business purposes. Where the GDPR or UK GDPR applies, each use relies on one of the legal bases below.

Under India's Digital Personal Data Protection Act, 2023, we process your personal data with your consent or for a legitimate use permitted by the Act, such as when you voluntarily provide data for a specific purpose.

We do not sell your personal information. We do not use it for automated decisions that have legal or similarly significant effects on you.

4. Data We Process for Our Clients

When we provide customer support, order management, returns and refunds handling, store management or similar services, we access personal data belonging to our clients' customers. This can include names, contact details, order and delivery information, and support conversations.

For this data, our client is the data controller ("data fiduciary" under Indian law) and SolutoZeeX acts as a data processor. We:

• Process it only on our client's documented instructions and under a written agreement
• Use it only to deliver the contracted services, never for our own marketing
• Limit access to trained team members who need it, under confidentiality obligations
• Work inside our clients' own systems (such as their helpdesk, ecommerce platform and messaging tools) wherever possible
• Return or delete it when the engagement ends, as our agreement requires

If you are a customer of one of our clients and have a question about your data, please contact that brand directly. We will help them respond to your request.

5. Cookies and Similar Technologies

Cookies are small text files stored on your device. We use them to make our website work and to understand how it is used.

Where the law requires it, we ask for your consent before setting non-essential cookies. You can change your choice at any time through our cookie banner or your browser settings. Blocking some cookies may affect how the site works.

6. How We Share Information

We share personal information only as described here:

• Service providers who help us run our business, such as hosting, email, CRM, form handling, analytics, video calls, payments and accounting. They may use the data only to provide services to us.
• Our clients, when the data was collected while delivering services to them.
• Professional advisers, such as lawyers, auditors and accountants, under confidentiality duties.
• Business transfers, if we are involved in a merger, acquisition or sale of assets. We will tell you before your data becomes subject to a different privacy policy.
• Legal requirements, when we must respond to a court order, lawful request from authorities, or to protect our rights, our clients or the public.
• With your permission, in any other case.

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising except through the marketing cookies you can switch off in Section 5.

7. International Transfers, Retention and Security

International transfers. SolutoZeeX is based in India, and our clients and service providers are located in several countries, including the United States, the United Kingdom and the European Union. Your information may be transferred to and processed in countries other than your own. Where required, we protect these transfers with safeguards such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum.

How long we keep data. We keep personal information only as long as needed for the purposes in this policy:

Security. We use reasonable technical and organisational measures to protect personal information. These include encryption in transit, access controls, multi-factor authentication, role-based access, staff confidentiality agreements and regular training. No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

8. Your Rights and Choices

Depending on where you live, you may have the following rights over your personal information:

• Access: ask for a copy of the information we hold about you
• Correction: ask us to fix inaccurate or incomplete information
• Deletion: ask us to erase your information
• Withdraw consent: take back consent at any time, without affecting earlier processing
• Object or restrict: object to processing based on legitimate interests, including direct marketing
• Portability: receive your information in a common, machine-readable format
• Complaint: complain to a data protection authority

India. Under the Digital Personal Data Protection Act, 2023, you can ask for a summary of your data and how it is processed, correct or erase it, withdraw consent, raise a grievance with us, and nominate someone to exercise your rights if you die or become incapacitated. If we do not resolve your grievance, you may approach the Data Protection Board of India.

European Economic Area and United Kingdom. You have the rights listed above under the GDPR or UK GDPR, and can complain to your local supervisory authority or the UK Information Commissioner's Office.

California and other US states. Residents of California and other states with privacy laws can request to know, delete and correct personal information, and opt out of its "sale" or "sharing" for targeted advertising. We do not sell personal information. We will not discriminate against you for using these rights. You may use an authorised agent, and we may need to verify your identity before acting.

How to make a request. Email privacy@solutozeex.com with the subject "Privacy Request". We will reply within the time the law requires, usually within 30 days. To stop marketing emails, click "unsubscribe" in any email.

9. Children, Third-Party Links and Changes

Children. Our website and services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

Third-party links. Our website links to other sites and platforms, including LinkedIn, Facebook, Instagram, X, YouTube and WhatsApp. Their privacy practices are their own, and we encourage you to read their policies.

Changes to this policy. We may update this policy as our services or the law change. We will post the new version on this page with a new "Last updated" date. If the changes are significant, we will give more notice, such as an email to clients or a notice on our website.

10. Contact Us

If you have questions about this policy or how we handle your information, contact us:

Grievance Officer (India). In line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you can raise a grievance with our Grievance Officer:

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.