Privacy Policy

01 Scope

This Policy covers information processed through the CrypsisX website. It does not cover any commercial product, platform or service, which is not yet generally available; when such offerings launch, they will have their own terms and privacy documentation. For website matters, CrypsisX is the data controller / Data Fiduciary.

02 Information We Collect

Information you provide

When you use the contact form or email us, we collect the details you submit — such as your name, organisation, work email and message. You choose what to share.

Technical information

When you visit the site, standard technical data is generated — IP address, browser and device type, referring pages, timestamps and diagnostic logs. This is used to serve the site securely and reliably.

Cookies & similar technologies

The site uses a limited set of cookies and similar technologies. See Section 05 and our Cookie Policy.

03 How We Use Information

• To respond to your enquiries and communicate with you;
• To operate, secure, maintain and improve the website;
• To understand aggregated, de-identified site usage;
• To detect and prevent abuse, fraud and security incidents;
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

04 Lawful Basis

We process personal data on the basis of your consent (for example, when you submit the contact form), our legitimate interests in operating and securing the website, and to meet legal obligations. Under the DPDP Act, we process personal data for lawful purposes with consent or as otherwise permitted.

05 Cookies & Analytics

We use strictly necessary and security cookies to run the site, and may use limited, privacy-respecting analytics to understand aggregated usage. You can control non-essential cookies through your browser and any consent controls presented. Full detail is in our Cookie Policy.

06 Sharing & Service Providers

We share information only with trusted service providers that help us run the website, under agreements that require confidentiality and appropriate protection. These currently include:

• Hosting / deployment — our website host, which processes technical logs to serve the site;
• Form handling — the provider that delivers contact-form submissions to us;
• Email — our email provider, when you correspond with us.

We may also disclose information where required by valid legal process or to protect our rights, users or the public. We do not sell personal data.

07 Retention

We keep personal data only as long as necessary for the purposes above and to meet legal obligations. Contact-form messages are retained for as long as needed to handle your enquiry and our records; technical logs are retained for a limited period. When no longer required, data is securely deleted or de-identified.

08 Security

We use reasonable technical and organisational measures to protect information handled through the site, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and continually improve our safeguards.

09 Your Rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request erasure of data no longer required;
• Withdraw consent, without affecting prior lawful processing;
• Nominate another person to exercise your rights in case of death or incapacity (DPDP Act);
• Object to or restrict certain processing, and request portability (GDPR);
• Complain to the Data Protection Board of India or your local supervisory authority.

To exercise a right, contact our Grievance Officer.

10 International Transfers

Our service providers may process limited technical data outside your country. Where that happens, we rely on appropriate safeguards recognised under applicable law. CrypsisX is India-native and prioritises responsible, minimal data handling.

11 Children

The website is intended for a professional audience and is not directed to children. We do not knowingly collect personal data of children through the site.

12 Changes

We may update this Policy as our practices or the law evolve. Material changes will be posted here with a revised effective date.

13 Contact

For any privacy question, or to exercise your rights, contact our Grievance Officer. This Policy is issued by the governing legal entity below.