Privacy Policy

AGK Leads ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our platform.

1. Data Controller

The data controller responsible for your personal data is:

• Entity: AGK Leads, operated by Mr. Ganesh Aruna Linganna Mukkera
• Contact: privacy@ganeshasaas.com
• Location: Hyderabad, Telangana, India

2. Information We Collect

2.1 Information You Provide

• Account data: Name, email address, phone number, company name, password (hashed)
• Profile data: Role, company details, billing preferences
• Event data: Event details, participant lists, lead information
• Communications: In-platform messages, support requests, feedback
• Payment data: Billing information processed through secure third-party payment gateways (Razorpay). We do not store credit card numbers.

2.2 Information Collected Automatically

• Device data: Browser type, operating system, device identifiers
• Usage data: Pages visited, features used, timestamps, session duration
• Log data: IP addresses, login timestamps, error logs
• Cookies: As described in our Cookie Policy

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide the Service you requested (account management, event services, billing).
• Consent: Where you have given specific consent (marketing emails, analytics cookies, optional data sharing).
• Legitimate interest: For security monitoring, fraud prevention, service improvement, and system analytics — provided these do not override your rights.
• Legal obligation: Where processing is required by law (tax records, regulatory compliance, law enforcement requests).

4. How We Use Your Information

• To provide, maintain, and improve the Service
• To create and manage your account and company profile
• To process events, leads, participants, and related business operations
• To process billing and payments
• To send service notifications (account status, SLA alerts, security warnings)
• To send marketing communications only with your explicit consent
• To detect and prevent fraud, security threats, and unauthorized access
• To generate anonymized analytics and insights for business intelligence
• To comply with legal obligations

5. Data Sharing & Disclosure

We do not sell your personal data. We may share data only in these circumstances:

• Service providers: Third-party vendors who assist in operating our service (hosting, payment processing, email delivery) — bound by data processing agreements.
• Within your organization: Company administrators and employees within the same company account can access shared business data as configured by your organization.
• Legal requests: When required by law, court order, or governmental authority.
• Business transfer: In connection with any merger, acquisition, or sale of assets — you will be notified in advance.
• With your consent: Any other sharing requires your explicit prior consent.

6. Data Retention

• Active accounts: Data is retained for the duration of your account.
• After account closure: Personal data is deleted or anonymized within 90 days, unless required by law.
• Billing records: Retained for up to 7 years to comply with financial and tax regulations.
• Audit logs: Security and access logs are retained for 1 year.
• Lead history: Automatically cleaned up after 365 days (configurable by administrators).
• Anonymized analytics: May be retained indefinitely as they cannot be linked to individuals.

7. Your Rights (GDPR & Data Protection)

You have the following rights regarding your personal data, which you can exercise through your Privacy & Data dashboard within the platform:

• Right of Access: Request a copy of all personal data we hold about you (Data Export).
• Right to Rectification: Update or correct inaccurate personal data through your profile settings.
• Right to Erasure: Request deletion of your account and associated data (Right to be Forgotten).
• Right to Data Portability: Export your data in a machine-readable format (JSON/CSV).
• Right to Restrict Processing: Request that we limit how we process your data.
• Right to Object: Object to processing based on legitimate interest or for direct marketing.
• Right to Withdraw Consent: Withdraw previously given consent at any time without affecting lawful processing before withdrawal.

To exercise these rights, navigate to Privacy & Data in your account dashboard, or email us at privacy@ganeshasaas.com. We will respond within 30 days.

8. Data Security

We implement robust security measures to protect your data:

• All data transmitted over HTTPS/TLS encryption
• Passwords stored using industry-standard bcrypt hashing
• Two-factor authentication (2FA) available for all accounts
• Rate limiting on authentication endpoints
• Security headers (CSP, HSTS, X-Frame-Options, etc.)
• Regular security monitoring and audit logging
• Role-based access control (RBAC) with capability-level permissions
• Session management with automatic timeout

9. International Data Transfers

Our primary servers are located in India. If your data is transferred outside India, we ensure adequate protection through:

• Standard contractual clauses with service providers
• Adequacy decisions where applicable
• Technical measures such as encryption in transit and at rest

10. Children's Privacy

Our Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete that information promptly. If you believe we have inadvertently collected such data, contact us immediately.

11. Marketing Communications

• We will only send marketing emails if you have explicitly opted in.
• Every marketing email includes a clear unsubscribe link.
• You can manage your email preferences through your Privacy Settings at any time.
• Service-related notifications (security alerts, account updates, SLA warnings) are not considered marketing and may be sent regardless of marketing consent.

12. Cookies

We use cookies and similar technologies for essential platform functionality, security, and optional analytics. For detailed information, see our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-platform notification at least 14 days before taking effect. The "last updated" date at the top reflects the most recent revision.

14. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

• Our internal privacy team: privacy@ganeshasaas.com
• Your local data protection authority (supervisory authority)

15. Contact Us

For privacy-related inquiries:

• Email: privacy@ganeshasaas.com
• Data Protection Officer: Mr. Ganesh Aruna Linganna Mukkera
• In-Platform: Privacy & Data section or messaging