1. Information We Collect
We collect the following types of information:
Product Activity Data: Information about how users interact with our platform and integrated tools (e.g., logins, feature usage, time spent).
Demographic Data: Names, email addresses, roles, and other contact or account-related details.
Conversations Data: Interaction logs, messages, or other communication data shared within the platform.
2. How We Use Your Information
We use the data we collect to:
- Deliver and improve our Services
- Analyse product usage and generate insights for customer success teams
- Personalise user experiences
- Monitor platform health and security
- Comply with legal obligations and protect our rights
- Provide customer support and respond to inquiries
3. Data Sharing and Disclosure
We do not sell your personal data. We may share data with:
- Sub Processor: For example, cloud infrastructure via AWS, and AI services via OpenAI
- Authorised Integrations: When you connect third-party tools, we access relevant data as per their API permissions
- Legal or Regulatory Bodies: Where required to comply with applicable laws, regulations, or legal processes
4. Data Storage and Security
We do not sell your personal data. We may share data with:
- Sub Processor: For example, cloud infrastructure via AWS, and AI services via OpenAI
- Authorised Integrations: When you connect third-party tools, we access relevant data as per their API permissions
- Legal or Regulatory Bodies: Where required to comply with applicable laws, regulations, or legal processes
5. International Data Transfers
As we serve customers in multiple countries, your data may be processed and stored in the United States, India, or Europe, where we or our service providers operate. We ensure appropriate safeguards are in place when transferring data internationally, including Standard Contractual Clauses where required.
6. Data Protection and Security
RetainSure implements appropriate technical and organizational safeguards to protect sensitive information processed through the platform, including data obtained via third-party integrations and connected accounts.
• Encryption in Transit
All data transmitted between users, third-party services, and RetainSure is encrypted in transit using industry-standard security protocols, including HTTPS and Transport Layer Security (TLS).
• Encryption at Rest
Sensitive data, including authentication credentials, access tokens, and customer data, is encrypted at rest. Access and refresh tokens are encrypted using managed key services, and customer data is stored in encrypted databases within our cloud infrastructure.
• Access Controls and Data Isolation
Access to sensitive data is restricted using role-based access controls and the principle of least privilege. RetainSure enforces per-company data isolation and row-level security to ensure that customer data is accessible only to authorized users and systems associated with the relevant account.
• Token Handling and Revocation
Authentication tokens used to connect third-party services are stored in encrypted form and used solely to provide user-authorized functionality. Users may disconnect integrated accounts at any time, upon which associated tokens are revoked and no further access to connected service data occurs.
• Compliance with API Data Use Policies
RetainSure’s use and handling of data obtained from third-party APIs complies with applicable API provider data protection requirements, including restrictions on use, sharing, and security of such data.
7. Your Rights
Depending on your location, you may have the following rights:
• Right to Be Informed
You have the right to know how we collect, use, share, and store your personal data.
We provide this information in this Privacy Policy and through in-product notices where relevant.
• Right of Access
You can request a copy of the personal data we hold about you, along with details on how and why we process it.
We will provide this information free of charge within one month of receiving your request.
• Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you can ask us to correct or update it.
• Right to Erasure (Right to Be Forgotten)
You can request that we delete your personal data in certain circumstances, such as:
- When the data is no longer needed for its original purpose
- When you withdraw your consent
- When you believe your data has been processed unlawfully
We may retain some information if required by law or for legitimate business purposes (e.g., record-keeping).
• Right to Object
You have the right to object to how we process your data:
- If the processing is based on our legitimate interests
- If we use your data for direct marketing (including automated profiling)
If you object to marketing, we will stop sending you such communications immediately.
• Rights Related to Automated Decision-Making and Profiling
You have the right not to be subject to decisions made solely through automated means, including profiling, if those decisions have a legal or significant effect on you.
You can request human review, express your views, or challenge such decisions.
• Right to Withdraw Consent
If you have given consent for us to process your data, you can withdraw it at any time.
Withdrawing consent will not affect the lawfulness of any processing carried out before your withdrawal.
To exercise these rights, please contact us at privacy@retainsure.com to reach our Data Protection Officer Anand Thakkar
For EU residents, you can reach out to our EU GDPR representative at below given address or email:
Rickert Rechtsanwaltsgesellschaft mbH
RetainSure Technologies Private Limited
Colmantstraße 15
53115 Bonn
Germany
email: art-27-rep-retainsure@rickert.law
9. Data Retention
We retain our customer/prospect data as long as necessary for the purposes described in this policy or to meet legal obligations. You can exercise your right to get your data deleted by reaching out to us at support@retainsure.com.
For data shared by our customer for us to meet the purpose of the contract via source integrations for the RetainSure's product functioning will be deleted within 90 days of subscription cancellation.
10. Children's Privacy
Our Services are not intended for individuals under the age of 13 (or equivalent minimum age in relevant jurisdictions). We do not knowingly collect personal data from children.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated version on our website and updating the "Effective Date" at the top.
We take the best security practices to avoid any kind of incidents or breach. In case of any breach or incident, we would let our customers and concerned parties know about the incident within 72 hours of the incident occurrence.
12. Incident Management
We take the best security practices to avoid any kind of incidents or breach. In case of any breach or incident, we would let our customers and concerned parties know about the incident within 72 hours of the incident's occurrence.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
RetainSure Technologies Pvt. Ltd.
support@retainsure.com
17, 2nd floor, 7th Main Road, ll Stage Indiranagar, Bangalore - 560038