Privacy Policy

This Privacy Policy describes how Imaginatrix Technologies Pvt. Ltd. (doing business as "Imaginatrix", "we", "us", or "our") collects, uses, discloses, and protects personal data when you visit https://imaginatrix.app (the "Website"), request a demo, or use any of our software-as-a-service products (the "Services"). By using the Website or Services, you agree to this policy. It should be read together with our Terms & Conditions and Cookie Policy.

Who We Are & Our Roles

For personal data we collect about visitors, prospects, and account holders (for example, contact and billing details), we act as a data controller / data fiduciary. For the business data our customers load into the Services about their own members, students, employees, or customers, we act as a data processor / data processor on behalf of the customer, processing it only on the customer's documented instructions as set out in the Terms and any Data Processing Addendum (DPA).

Information We Collect

Information you provide

• Contact & enquiry details — name, email, phone, company, and message when you request a demo, submit a form, or reach us by email or WhatsApp.
• Account & billing details — company name, billing address, GSTIN/tax identifiers, and invoice records. We do not store full card numbers or banking credentials; payments are handled by PCI-DSS-compliant payment processors.
• Customer content — the data you upload into the Services to run your business (e.g. members, students, stock, ledgers, employees). We process this strictly as your processor.

Information collected automatically

• Usage & device data — pages visited, actions taken, browser and device type, and approximate location derived from your IP address.
• Cookies & similar technologies — as described in our Cookie Policy.
• Logs — application and security logs (timestamps, IP, request metadata) kept for security, debugging, and audit.

How We Use Your Information

• To respond to enquiries, schedule demos, and provide quotes.
• To provision, operate, maintain, secure, and improve the Services.
• To issue invoices, process payments, and keep tax and accounting records.
• To send service, security, and administrative communications.
• To provide support and onboarding, including via WhatsApp and email.
• To detect, prevent, and investigate fraud, abuse, and security incidents.
• To comply with legal, tax, and regulatory obligations under applicable law.

We do not sell, rent, or trade your personal data, and we do not use customer content to train AI models.

Legal Bases for Processing

Where the GDPR applies, we rely on: performance of a contract (to deliver the Services); legitimate interests (to secure and improve the Services and for B2B marketing); consent (for optional cookies and marketing where required); and legal obligation (tax, accounting, and lawful requests). Where the DPDP Act, 2023 applies, we process personal data on the basis of your consent or other legitimate uses permitted by the Act.

Sharing & Sub-processors

We share personal data only as needed and under appropriate safeguards:

• Sub-processors & service providers — cloud hosting, email, analytics, communication (e.g. WhatsApp/SMS), and payment processors who process data on our behalf under contractual confidentiality and security obligations.
• Legal & safety — when required by law, court order, or a lawful government request, or to protect rights, safety, and property.
• Business transfers — in a merger, acquisition, or asset sale, subject to this policy and notice to you.

A current list of sub-processors is available on request at hello@imaginatrix.in.

International Data Transfers

We are based in India and serve customers globally. Personal data may be processed in India or in other countries where we or our sub-processors operate. Where we transfer personal data across borders, we use appropriate safeguards — such as Standard Contractual Clauses or equivalent mechanisms — and transfer data only to jurisdictions permitted by applicable law, including any restrictions notified under the DPDP Act, 2023.

Data Security

We apply industry-standard technical and organisational measures, including HTTPS/TLS encryption in transit, access controls and the principle of least privilege, role-based permissions, OTP-secured sensitive actions, daily encrypted backups, and monitoring. No method of transmission or storage is completely secure, but we work continuously to protect your data and will notify affected users and authorities of a reportable personal data breach as required by law.

Data Retention

We retain personal data only as long as necessary for the purposes described here — for the duration of your relationship with us and any period required by Indian tax and corporate law. On termination of the Services, we provide a data export and then delete or irreversibly anonymise customer content within a reasonable period, save where retention is legally required. Enquiry data that does not lead to an engagement is deleted or anonymised within a reasonable period.

Your Rights

Subject to applicable law (the DPDP Act, 2023, the GDPR, and others), you may:

• Access the personal data we hold about you and request a copy.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, subject to legal retention requirements.
• Withdraw consent at any time, where processing is based on consent.
• Object to or restrict certain processing, and request data portability (GDPR).
• Nominate another person to exercise your rights in the event of death or incapacity (DPDP Act).
• Raise a grievance and, if unsatisfied, complain to the Data Protection Board of India or your local supervisory authority.

To exercise any right, email hello@imaginatrix.in. We aim to respond within 30 days. If you are a customer's end user, please contact that customer (the controller); we will assist them in responding.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, you can reach our Grievance Officer for any data-protection concern:

• Grievance Officer — Imaginatrix Technologies Pvt. Ltd.
• Astra Towers, Action Area IIC, Newtown, New Town, West Bengal 700135
• Email: hello@imaginatrix.in
• Phone: +91 973533 8865

Children's Privacy

Our Website and Services are directed at businesses and are not intended for children. Where our customers use our education products, any processing of student data (including minors) is carried out on the customer's instructions and under their responsibility as controller, with parental/guardian consent obtained by the customer as required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted here with a revised "last updated" date. Material changes will be highlighted on the Website or communicated to active customers.

Contact Us

For any question about this policy or your personal data:

• Imaginatrix Technologies Pvt. Ltd.
• Astra Towers, Action Area IIC, Newtown, New Town, West Bengal 700135
• Email: hello@imaginatrix.in
• Phone: +91 973533 8865
• CIN: U62013WB2023PTC266668