Privacy policy

SmartX Technologies ("SmartX", "we", "us") respects your privacy. This policy explains what personal data we collect through smartxtech.co (the "website"), our enquiry forms and related communications, how we use and share it, how long we keep it, and the choices and rights you have.

This policy covers the website and the enquiries you send us. Personal data we process while delivering services to a client is governed by our agreement with that client.

Who we are

SmartX Technologies is a software and AI engineering company with its registered office at SY 130P 115/1P, WeWork Rajapushpa Summit, Hyderabad, Telangana 500032, India, its main office at No 1&2, 2nd Floor, 235/A, Hosur Road, Bommasandra Industrial Area, Bommasandra, Bengaluru, Karnataka 560099, India, and an office in Georgia, United States.

For the personal data described in this policy, we decide why and how it is processed. This makes us the "data fiduciary" under India's Digital Personal Data Protection Act, 2023 and the "controller" under the EU and UK General Data Protection Regulation (GDPR).

You can contact us about privacy at contact@smartxtech.co, or using the details under "Contact and grievance officer" below.

Information we collect

Information you give us

When you fill in a form on the website, for example to contact us, book a discovery call or try a demo, we collect:

• your name and work email address;
• your company name, if you provide it;
• the service you are interested in and your message; and
• anything else you choose to tell us when you contact us by email, phone or video call.

Information collected automatically

When you send a form, we also record the page you sent it from, the website that referred you to us, and any campaign tags in the link you followed (such as "utm_source" or "utm_campaign"). This tells us which content and campaigns lead people to contact us.

Like most websites, our servers keep technical logs that include your IP address, browser type, the pages requested and the date and time. We use them to run, secure and troubleshoot the website. To protect our forms from spam, we use your IP address for a short time to limit repeated submissions.

Information from others

If a partner introduces you to us, or you contact us through a platform such as LinkedIn, we may receive your name, contact details and the context of the introduction.

How we use your information

We use your personal data to:

• reply to your enquiry and arrange the call or demo you asked for;
• understand your needs, discuss how we could help your organisation and prepare proposals;
• keep a record of our conversations in our customer relationship management (CRM) system;
• send you information about our services, events and insights, where you have agreed to this or the law otherwise allows it, always with an easy way to opt out;
• understand which pages and campaigns are useful and improve the website; and
• protect the website and our business against spam, fraud and misuse, and meet our legal obligations.

Our legal basis

Where the GDPR applies, we rely on:

• taking steps at your request before a contract, when we respond to your enquiry about our services;
• our legitimate interests in running and improving our business and website, keeping records of business communications and protecting our systems, balanced against your rights;
• your consent, for marketing where consent is required, which you can withdraw at any time; and
• legal obligations, where the law requires us to keep or disclose information.

Under India's Digital Personal Data Protection Act, 2023, we process the personal data you choose to send us in order to respond to you, and otherwise with your consent or for the legitimate uses the Act permits.

Who we share it with

We do not sell your personal data. We share it only with:

• our service providers, who process it for us under contract, including HubSpot, Inc. (our CRM system), our hosting and infrastructure providers and our email providers;
• our own systems, including SmartX's internal sales and marketing platform, which our team uses to follow up on enquiries and manage our communications;
• professional advisers, such as lawyers, auditors and insurers, where necessary; and
• authorities or other parties, where the law requires it, to protect our rights, or as part of a merger, acquisition or sale of all or part of our business, in which case this policy continues to apply.

The website loads its fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.

International transfers

We are based in India, and our service providers may process personal data in other countries, including the United States. When we transfer personal data from the European Economic Area, the United Kingdom or Australia to a country that does not offer equivalent protection, we use appropriate safeguards, such as the European Commission's standard contractual clauses or our providers' equivalent commitments.

How long we keep it

We keep enquiry and CRM records while we are in contact with you and for 24 months after our last interaction. If you become a client, we keep records for the length of our relationship and afterwards for as long as we need them for legal, accounting or contractual reasons. Server logs are kept for up to 90 days. After that, we delete or anonymise the data.

Cookies and similar technologies

During your visit, the website keeps a small amount of information in your browser's session storage, such as the campaign tags of the link you arrived from, so that it can be included with an enquiry you send during the same visit. This is cleared when you close the browser tab. It also remembers your cookie choice in your browser.

With your consent, and only after you select "Accept" on the cookie banner, the website loads analytics and advertising measurement tools that set cookies and collect information about your visit, such as the pages you view, how you move through them, your device and browser, and the approximate location derived from your IP address:

• Google Tag Manager and Google Analytics (Google LLC), to measure how the website is used;
• Microsoft Clarity (Microsoft Corporation), which records how visitors move through pages, such as clicks and scrolling, to show us where pages are hard to use. Form fields are masked; and
• Meta Pixel (Meta Platforms, Inc.), to measure the results of our advertising on Facebook and Instagram and to show relevant ads.

These providers may process this information in other countries, including the United States, under their own terms and privacy policies. If you select "Reject", none of these tools load. You can change your choice at any time with "Cookie settings" at the bottom of every page, and you can also block or delete cookies in your browser settings.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy of it;
• correct data that is inaccurate or incomplete;
• have your data erased;
• restrict or object to our processing, including objecting at any time to direct marketing;
• receive your data in a portable format;
• withdraw any consent you have given, without affecting processing that took place before you withdrew it;
• nominate another person to exercise your rights if you die or become unable to do so (in India); and
• complain to a data protection authority, such as the Data Protection Board of India, the supervisory authority in your EU country or the UK, or the Office of the Australian Information Commissioner.

Residents of some US states, including California, have similar rights to know about, correct and delete their personal information, and to opt out of its sale or of sharing for targeted advertising. We do not sell personal information or share it for targeted advertising.

To use any of these rights, email contact@smartxtech.co. We may need to confirm your identity before we act on your request. We will respond within one month, or sooner where the law requires it.

Security

We protect personal data with measures that include encrypted connections to the website, access controls, and access for our staff and providers only where they need it. No method of transmission or storage is completely secure, but we work to protect your information, and we will notify you and the relevant authorities of a personal data breach where the law requires it.

Children

The website and our services are intended for businesses. We do not knowingly collect personal data from children (anyone under 18 in India, or under 13 elsewhere). If you believe a child has sent us personal data, please contact us and we will delete it.

Links to other websites

The website links to other websites, such as aptpath.in and our partners' websites. We are not responsible for their privacy practices, so please read their privacy policies.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed. If we make significant changes, we will tell you on the website or, where appropriate, by email.

Contact and grievance officer

For any question, request or complaint about this policy or your personal data, contact our Grievance Officer:

Name of the Grievance Officer, Grievance Officer, SmartX Technologies, SY 130P 115/1P, WeWork Rajapushpa Summit, Hyderabad, Telangana 500032, India. Email: contact@smartxtech.co. Phone: +91 98802 50905.

We will acknowledge your complaint promptly and aim to resolve it within 30 days.