Part I – Information Samishti collects and controls

When you visit one of our websites or use our software, we automatically log some basic information like how you got to the site, where you navigated within it, and what features and settings you use. We use this information to improve our websites and services and to drive new product development.

When you interact with our services, we collect information that you provide to us. For example, many of our services require you to set up an account, so we may need to collect a few important details about you, such as your name, username, password, email address, phone number and date of birth.

Sometimes we receive information indirectly. If you ask about our products through one of our referral programs or reselling partners, or sign in to one of our products through an authentication service provider like LinkedIn or Google, they'll pass on your contact information to us. We'll use that information to complete the request that you made. If you engage with our brand on social media (for instance, liking, commenting, retweeting, mentioning, or following us), we'll have access to your interactions and profile information. We'll still have that information even if you later remove it from the social media site.

What we do with your information

We're required to have a legal basis for collecting and processing your information. In most cases, we either have your consent or need the information to provide the service you've requested from us. When that's not the case, we must demonstrate that we have another legal basis, such as our legitimate business interests.

You can decline certain kinds of information use either by not providing the information in the first place or by opting out later. You can also disable cookies to prevent your browser from giving us information, but if you do so, certain website features may not work properly.

The European Economic Area (EEA) provides certain rights to data subjects (including access, rectification, erasure, restriction of processing, data portability, and the right to object and to complain). Samishti undertakes to provide you the same rights no matter where you choose to live.

We keep your personal information for as long as it is required for the purposes stated in this Privacy Policy. When we no longer have a legitimate need to process your information, we will delete, anonymize, or isolate your information, whichever is appropriate.

Part II – Information that Samishti processes on your behalf

If you handle other people's data using Samishti apps, such as information about your customers or employees, you are entrusting that data to us for processing. If you use a Samishti mobile app and give the app access to your contacts and photo library, you are entrusting data to us. The data you entrust to us for processing is called service data.

You own your service data. We protect it, limit access to it, and only process it according to your instructions. You may access it, share it through third-party integrations, and request that we export or delete it.

We hold the data in your account as long as you choose to use Samishti Services. After you terminate your account, your data will be automatically deleted from our active database within 6 months and from our backups within 3 months after that.

If you are in the European Economic Area and you believe that someone has entrusted your information to us for processing (for instance, your employer or a company whose services you use), you can request certain actions from us regarding your data. To exercise those data rights, please contact the person or company that entrusted the data to us and we will work with them on your request.

Part III – General

There are some limitations to the privacy we can promise you. We will disclose personal information if it's necessary to comply with a legal obligation, prevent fraud, enforce an agreement, or protect our users' safety. We do not currently honour Do Not Track signals from internet browsers; when a universal standard for processing them emerges, we will follow it.

Third-party websites and social media widgets have their own separate privacy policies. Always check the relevant privacy policy before sharing personal information with third parties.

You can always contact us to: ask questions about our privacy practices. We will contact you to let you know if we make any major changes to our privacy policy, or in the highly unlikely event that we ever decide to sell our business.

Privacy Policy

This Privacy Policy statement is made by the Samishti Group consisting of all the entities listed (collectively, "Samishti", "we", "us" or "our") and is effective as of 01^st  April 2021.

Samishti’s Privacy Commitment

Samishti has worried about customer and user privacy since inception, long before it became fashionable, politically correct, or legally binding to take such a position. We ask for only the least amount of information necessary, gathering only what we believe is essential for doing business, or for the specific transaction at hand. We let customers know the information we have on them and allow them to opt out of specific engagements.

The goal of this policy is to make explicit the information we gather on our customers and users, how we will use it, and how we will not. This policy is unfortunately longer than we would like, but we must unambiguously address all the relevant cases. We will try and keep the language simple and direct as much as possible.

Scope of this Privacy Policy

This Privacy Policy applies to all Samishti websites that link to it. It also applies to the products and services provided by Samishti through these websites, our mobile applications, and applications posted by Samishti on Samishti’s online marketplace and in other third-party online marketplaces. This Privacy Policy does not apply to any of our websites, products or services that have a separate privacy policy.

This Privacy Policy is divided into three parts:

Part I – Information Samishti collects and controls

This part deals with how Samishti collects and uses information about website visitors, potential customers, users of Samishti's products and services, and others who contact Samishti through forms or email addresses published on or linked to our websites.

Part II – Information that Samishti processes on your behalf

This part deals with how Samishti handles data that you entrust to Samishti when you use our products and services, or when you share any personal or confidential information with us while requesting customer support.

Part III – General

This part deals with topics that are relevant to both Parts I and II, and other general topics such as Samishti's security commitments and how we will inform you when we change this Privacy Policy.

Part I – Information Samishti collects and controls

What information Samishti collects

We collect information about you only if we need the information for some legitimate purpose. Samishti will have information about you only if (a) you have provided the information yourself, (b) Samishti has automatically collected the information, or (c) Samishti has obtained the information from a third party. Below we describe the various scenarios that fall under each of those three categories and the information collected in each one.

Information that you provide us

I . Testimonials : When you authorize us to post testimonials about our products and services on websites, we may include your name and other personal information in the testimonial. You will be given an opportunity to review and approve the testimonial before we post it. If you wish to update or delete your testimonial, you can contact us.

II . Interactions with Samishti : We may record, analyse and use your interactions with us, including email, telephone, and chat conversations with our sales and customer support professionals, for improving our interactions with you and other customers.

Information that we collect automatically

i. Information from first party cookies and tracking technologies : We use temporary and permanent cookies to identify users of our services and to enhance user experience. We embed unique identifiers in our downloadable products to track usage of the products. We also use cookies, beacons, tags, scripts, and other similar technologies to identify visitors, track website navigation, gather demographic information about visitors and users, understand email campaign effectiveness and for targeted visitor and user engagement by tracking your activities on our websites. We also use first-party Local Storage Objects (LSOs) such as HTML5 to store content information and preferences to provide certain features.

ii. Information from application logs and mobile analytics : We collect information about your use of our products, services and mobile applications from application logs and in-house usage analytics tools, and use it to understand how your business use and needs can improve our products. This information includes clicks, scrolls, features accessed, access time and frequency, errors generated, performance data, storage utilized, user settings and configurations, and devices used to access and their locations.

Information that we collect from third parties

i. Referrals : If someone has referred any of our products or services to you through any of our referral programs, that person may have provided us your name, email address and other personal information. You may contact us to request that we remove your information from our database. If you provide us information about another person, or if another person gives us your information, we will only use that information for the specific reason for which it was provided to us.

ii. Information from our reselling partners and service providers : If you contact any of our reselling partners, or otherwise express interest in any of our products or services to them, the reselling partner may pass your name, email address, company name and other information to Samishti. If you register for or attend an event that is sponsored by Samishti, the event organizer may share your information with us. Samishti may also receive information about you from review sites if you comment on any review of our products and services, and from other third-party service providers that we engage for marketing our products and services.

iii. Information from social media sites and other publicly available sources : When you interact or engage with us on social media sites such as Facebook, Twitter, Google+ and Instagram through posts, comments, questions and other interactions, we may collect such publicly available information, including profile information, to allow us to connect with you, improve our products, or better understand user reactions and issues. We must tell you that once collected, this information may remain with us even if you delete it from the social media sites. Samishti may also add and update information about you, from other publicly available sources.

iv. Device information: We collect information from and about the devices you use. For example, we collect:

• information about your hardware and software, such as the hardware model, operating system version, device memory, advertising identifiers, unique application identifiers, apps installed, unique device identifiers, browser type, keyboards installed, language, battery level and time zone;
• information from device sensors, such as accelerometers, gyroscopes, compasses, microphones and headphone connection; and
• information about your wireless and mobile network connections, such as mobile phone number, service provider, IP address and signal strength.

v. Device phonebook: Because our services are all about communicating with friends, we may — with your permission — collect information from your device's phonebook.

vi. Camera and photos: Many of our services require us to collect images and other information from your device’s camera and photos. For example, you won’t be able to upload photos from your camera roll unless we can access your camera or photos.

vii. Location information: When you use our services, we may collect information about your location. With your permission, we may also collect information about your precise location using methods that include GPS, wireless networks, mobile towers, Wi-Fi access points and other sensors, such as gyroscopes, accelerometers and compasses.

Purposes for using information

In addition to the purposes mentioned above, we may use your information for the following purposes:

• To keep you posted on new products and services, upcoming events, offers, promotions and other information that we think will be of interest to you;
• To ask you to participate in surveys, or to solicit feedback on our products and services;
• To maintain your account.
• To understand how users use our products and services, to monitor and prevent problems, and to improve our products and services;
• To provide customer support, and to analyse and improve our interactions with customers.
• To detect and prevent fraudulent transactions and other illegal activities, to report spam, and to protect the rights and interests of Samishti, Samishti’s users, third parties and the public;
• To update, expand and analyse our records, identify new customers, and provide products and services that may be of interest to you.
• To analyse trends, administer our websites, and track visitor navigations on our websites to understand what visitors are looking for and to better help them;
• To monitor and improve marketing campaigns and make suggestions relevant to the user.

Legal bases for collecting and using information

Legal processing bases applicable to Samishti : If you are an individual from the European Economic Area (EEA), our legal basis for information collection and use depends on the personal information concerned and the context in which we collect it. Most of our information collection and processing activities are typically based on (i) contractual necessity, (ii) one or more legitimate interests of Samishti or a third party that are not overridden by your data protection interests, or (iii) your consent. Sometimes, we may be legally required to collect your information, or may need your personal information to protect your vital interests or those of another person.

Withdrawal of consent : Where we rely on your consent as the legal basis, you have the right to withdraw your consent at any time, but this will not affect any processing that has already taken place.

Legitimate interests notice : Where we rely on legitimate interests as the legal basis and those legitimate interests are not specified above, we will clearly explain to you what those legitimate interests are at the time that we collect your information.

Your choice in information use

Disable cookies : You can disable browser cookies before visiting our websites. However, if you do so, you may not be able to use certain features of the websites properly.

Optional information : You can delete or change your optional profile information. You can always choose not to fill in non-mandatory fields when you submit any form linked to our websites.

Who we share your information with

All Samishti group entities listed above have access to the information covered in Part I. We do not sell any personal information. We share your information only in the ways that are described in this Privacy Policy, and only with parties who adopt appropriate confidentiality and security measures.

Employees and independent contractors : Employees and independent contractors of all Samishti group entities have access to the information covered in Part I on a need-to-know basis. We require all employees and independent contractors of Samishti group entities to follow this Privacy Policy for personal information that we share with them.

Marketplace application developers : When you install or purchase any application developed using Samishti's APIs that is posted on Samishti’s online marketplace, your name and email address will be shared with the developer of the application, so they may engage with you directly as the provider of that application or service. Samishti does not control the use of your personal information by the developers, which will be based on their own privacy policies.

Other cases : Other scenarios in which we may share the same information covered under Parts I and II are described in Part III.

Your rights with respect to information we hold about you as a controller

If you are in the European Economic Area (EEA), you have the following rights with respect to information that Samishti holds about you. Samishti undertakes to provide you the same rights no matter where you choose to live.

Right to access : You have the right to access (and obtain a copy of, if required) the categories of personal information that we hold about you, including the information's source, purpose and period of processing, and the persons to whom the information is shared

Right to rectification : You have the right to update the information we hold about you or to rectify any inaccuracies. Based on the purpose for which we use your information, you can instruct us to add supplemental information about you in our database.

Right to erasure : You have the right to request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purpose for which it was originally collected.

Right to restriction of processing : You may also have the right to request to restrict the use of your information in certain circumstances, such as when you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Right to data portability : You have the right to transfer your information to a third party in a structured, commonly used and machine-readable format, in circumstances where the information is processed with your consent or by automated means.

Right to object : You have the right to object to the use of your information in certain circumstances, such as the use of your personal information for direct marketing.

Right to complain : You have the right to complain to the appropriate supervisory authority if you have any grievance against the way we collect, use or share your information. This right may not be available to you if there is no supervisory authority dealing with data protection in your country.

Retention of information

We retain your personal information for as long as it is required for the purposes stated in this Privacy Policy. Sometimes, we may retain your information for longer periods as permitted or required by law, such as to maintain suppression lists, prevent abuse, if required in connection with a legal claim or proceeding, to enforce our agreements, for tax, accounting, or to comply with other legal obligations. When we no longer have a legitimate need to process your information, we will delete or anonymize your information from our active databases. We will also securely store the information and isolate it from further processing on backup discs until deletion is possible.

Part II – Information that Samishti processes on your behalf

Information entrusted to Samishti and purpose

Information provided in connection with services : You may entrust information that you or your organization (“you”) control, to Samishti in connection with use of our services or for requesting technical support for our products. This includes information regarding your customers and your employees (if you are a controller) or data that you hold and use on behalf of another person for a specific purpose, such as a customer to whom you provide services (if you are a processor). The data may either be stored on our servers when you use our services, or transferred or shared to us as part of a request for technical support or other services.

Information from mobile devices : When you elect to allow it, some of our mobile applications have access to the photo library, camera features and geo -location tracking on your mobile device. Our applications require such access to provide their services and mandatory functionalities as part of the application.

(All the information entrusted to Samishti is collectively termed “service data”)

Ownership and control of your service data

We recognize that you own your service data. We provide you complete control of your service data by providing you the ability to (i) access your service data, (ii) share your service data through supported third-party integrations, and (iii) request export or deletion of your service data.

How we use service data

We process your service data when you provide us instructions through the various modules of our services.

Who we share service data with

Employees and independent contractors : We may provide access to your service data to our employees and individuals who are independent contractors of the Samishti group entities involved in providing the services (collectively our “employees”) so that they can (i) identify, analyse and resolve errors, (ii) manually verify emails reported as spam to improve spam detection, or (iii) manually verify scanned images that you submit to us to verify the accuracy of optical character recognition. We ensure that access by our employees to your service data is restricted to specific individuals, and is logged and audited. Our employees will also have access to data that you knowingly share with us for technical support or to import data into our products or services. We communicate our privacy and security guidelines to our employees and strictly enforce privacy safeguards within the Samishti group.

Third-party integrations you have enabled : If you choose to enable any third-party integrations, you may be allowing the third party to access your service information and personal information about you. We encourage you to review the privacy practices of the third-party services and products before you enable integrations with them.

Other cases : Other scenarios in which we may share information that are common to information covered under Parts I and II are described in Part III.

Retention of information

We hold the data in your account as long as you choose to use Samishti Services. Once you terminate your Samishti user account, your data will eventually get deleted from active database during the next clean-up that occurs once in 6 months. The data deleted from active database will be deleted from backups after 3 months.

Data subject requests

If you are from the European Economic Area and you believe that we store, use or process your information on behalf of one of our customers, please contact the customer if you would like to access, rectify, erase, restrict or object to processing, or export your personal data. We will extend our support to our customer in responding to your request within a reasonable timeframe.

Part III – General

Children’s personal information

Our products and services are not directed to individuals under 16. Samishti does not knowingly collect personal information from children who are under 16 years of age. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe that a child under 16 years has provided personal information to us, please write to us with the details, and we will take the necessary steps to delete the information we hold about that child.

How secure is your information

At Samishti, we take data security very seriously. That's why we have gotten certified for industry standards such as ISO27001:2013 and SOC 2 Type II. We have taken steps to implement appropriate administrative, technical & physical safeguards to prevent unauthorized access, use, modification, disclosure or destruction of the information you entrust to us.

Do Not Track (DNT) requests

Some internet browsers have enabled 'Do Not Track' (DNT) features, which send out a signal (called the DNT signal) to the websites that you visit indicating that you don't wish to be tracked. Currently, there is no standard that governs what websites can or should do when they receive these signals. For now, we do not take action in response to these signals.

Blogs and forums

We offer publicly accessible blogs and forums on our websites. Please be aware that any information you provide on these blogs and forums may be used to contact you with unsolicited messages. We urge you to be cautious in disclosing personal information in our blogs and forums. Samishti is not responsible for the personal information you elect to disclose publicly. Your posts and certain profile information may remain even after you terminate your account with Samishti. To request the removal of your information from our blogs and forums, you can contact us

Disclosures in compliance with legal obligations

We may be required by law to preserve or disclose your personal information and service data to comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements.

Enforcement of our rights

We may disclose personal information and service data to a third party if we believe that such disclosure is necessary for preventing fraud, investigating any suspected illegal activity, enforcing our agreements or policies, or protecting the safety of our users.

Business Transfers

We do not intend to sell our business. However, in the unlikely event that we sell our business or get acquired or merged, we will ensure that the acquiring entity is legally bound to honour our commitments to you. We will notify you via email or through a prominent notice on our website of any change in ownership or in the uses of your personal information and service data. We will also notify you about any choices you may have regarding your personal information and service data.

Compliance with this Privacy Policy

We make every effort, including periodic reviews, to ensure that personal information you provide is used in conformity with this Privacy Policy. If you have any concerns about our adherence to this Privacy Policy or the manner in which your personal information is used, kindly write to us. We'll contact you, and if required, coordinate with the appropriate regulatory authorities to effectively address your concerns.

Notification of changes

We may modify the Privacy Policy at any time, upon notifying you through a service announcement or by sending an email to your primary email address. If we make significant changes to the Privacy Policy that affect your rights, you will be provided with at least 30 days' advance notice of the changes by email to your primary email address. If you think that the updated Privacy Policy affects your rights with respect to your use of our products or services, you may terminate your use by sending us an email within 30 days. Your continued use after the effective date of changes to the Privacy Policy will be deemed to be your agreement to the modified Privacy Policy. You will not receive email notification of minor changes to the Privacy Policy. If you are concerned about how your personal information is used, you should check back at https://www.samishti.com/privacy.html periodically.