Privacy Policy

1. Who we are and how to contact us

Arclyte Studios Private Limited is an India-based technology company providing software development, websites and applications, SaaS products, AI-enabled tools and automation, CRM/ERP implementations, consulting and digital marketing services.

Registered office: Arclyte Studios Private Limited, Ward no. 34, CBI Road, Near CBI Office, Bangalore - 560032, India.

CIN: U62011KA2026PTC229596

Privacy / grievance contact: ameen@arclytestudios.com

For privacy questions, requests or complaints, contact us using the details above. Please do not send passwords, payment-card details or other unnecessary sensitive information in an email.

2. Scope of this Policy

This Policy applies to personal data processed through our public website and through our business communications and services where we act as the party deciding why and how personal data is processed. Some services may have additional notices or terms. Where Arclyte processes personal data on behalf of a client (for example, as a software developer, SaaS provider or automation vendor), the client may be responsible for determining the purposes of processing and for providing notices to its own users. In those cases, our contract and applicable service-specific terms also govern how we handle that data.

3. Personal data we may collect

Depending on how you interact with us and which services you use, we may collect the following categories:

• –Contact and identity information: name, business name, job title, email address, phone number and other details you choose to provide.
• –Enquiry and communication information: the contents of messages, project briefs, support requests, feedback, meeting notes and correspondence.
• –Business and transaction information: proposal requirements, service selections, billing details, invoice records, payment status and contractual information. We do not intend to collect full payment-card credentials through ordinary website forms.
• –Technical and usage information: IP address, browser and device information, approximate location derived from technical data, referring pages, pages visited, timestamps, diagnostic information and security logs. The exact data collected depends on our hosting and website configuration.
• –Account and service information: login identifiers, account settings, preferences, uploaded files, content and activity needed to provide a product or service you use.
• –Marketing preferences: whether you wish to receive updates and your preferences about receiving them.
• –Other information you provide: any additional information you voluntarily submit to us, provided you have a lawful basis to share it.

4. How we collect personal data

We may collect personal data:

• –directly from you when you fill out a form, email us, request a quotation, book a meeting, sign a contract or contact support;
• –automatically through the website, server logs, cookies or similar technologies, where enabled;
• –from your organisation or authorised representatives when they engage us or administer a service;
• –from service providers that support our operations, such as hosting, communications, analytics, customer relationship management, payment or security providers; and
• –from publicly available professional or business sources where appropriate for legitimate business-to-business outreach and subject to applicable law.

5. Purposes for processing

We may use personal data for the following purposes, as relevant:

• –to respond to enquiries, arrange consultations and prepare proposals or quotations;
• –to provide, configure, maintain, secure and support software, websites, applications, SaaS products, AI tools, automations and other contracted services;
• –to manage customer and supplier relationships, contracts, billing, payments and accounting;
• –to communicate service updates, operational notices, security alerts and support information;
• –to send marketing or company updates where permitted, and to honour opt-out requests;
• –to monitor website performance, troubleshoot errors, prevent fraud, investigate misuse and protect our systems and users;
• –to comply with legal obligations, respond to lawful requests, establish or defend legal claims and enforce our agreements; and
• –to improve our website and services using aggregated or appropriately de-identified information where feasible.

5a. A note on scope

We do not state that every category of data or every purpose listed above is used on the public website today. The actual processing depends on the forms, features, analytics, cookies and integrations enabled.

6. Legal basis and consent

We process personal data only where we have a lawful basis to do so. Depending on the context and applicable law, this may include your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, or another permitted basis. Where consent is required, we will seek it in the relevant manner and explain the purpose. Where applicable law gives you the right to withdraw consent, you may do so using the method described in the relevant notice or by contacting us. Withdrawal does not affect processing already lawfully carried out before withdrawal, and some services may no longer function if essential processing is stopped.

7. Cookies and similar technologies

Our website or embedded third-party services may use cookies, pixels, local storage or similar technologies. These may be used to operate the website, remember preferences, protect forms, understand website traffic or measure marketing performance. The technologies in use depend on the website configuration.

You can manage cookies through your browser settings and, where provided, our cookie banner or preference tool. Blocking certain cookies may affect website functionality. Before publication, Arclyte should verify the actual cookies and third-party scripts deployed on the site and update this section to name them accurately.

8. AI tools and automated processing

Some Arclyte services may use AI models, agents or automated workflows to generate outputs, classify information, summarise content or execute tasks. If you use an AI-enabled service, information you submit may be processed by Arclyte and by the model, hosting or infrastructure providers needed to deliver that service. The relevant product notice or contract should explain any material service-specific processing.

Do not submit confidential, regulated or sensitive information to an AI feature unless you are authorised to do so and have reviewed the applicable service terms. AI-generated outputs can be inaccurate and should be reviewed by a qualified person before being relied on for important decisions. We do not use personal data to train a general-purpose AI model unless this is disclosed and permitted by the applicable terms and law.

9. When we disclose personal data

We may disclose personal data, limited to what is reasonably necessary, to:

• –hosting, cloud infrastructure, database, security, analytics and website service providers;
• –email, messaging, customer support, CRM, project management and productivity providers;
• –AI model or API providers where an AI-enabled feature requires them;
• –payment processors, banks, accountants, auditors, insurers, legal advisers and other professional advisers;
• –our clients or your organisation where needed to deliver a requested project or service;
• –government authorities, regulators, courts, law-enforcement agencies or other parties where disclosure is required or permitted by law; and
• –a successor, investor or transaction counterparty in connection with a merger, restructuring, financing, acquisition or sale of assets, subject to appropriate safeguards.

9a. We do not sell personal data

We do not sell personal data for money. If we use advertising, analytics or other technologies that may be treated as “sharing” or targeted advertising under a particular jurisdiction's law, we will provide any required notice and choice mechanisms.

10. Third-party services and links

Our website and services may link to or integrate with third-party websites, APIs, platforms or tools. Those third parties may collect information under their own privacy policies and terms. Arclyte does not control third-party privacy practices, and you should review their policies before using their services. The presence of a link or integration does not by itself mean Arclyte endorses every practice of that provider.

11. International data transfers

Our service providers or customers may process or access personal data in countries other than the country where you reside. Where cross-border transfers occur, we will take steps required by applicable law and use appropriate contractual, organisational or technical safeguards where required. The countries involved depend on the providers and services actually used.

12. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining business records, resolving disputes, enforcing agreements, meeting legal or tax requirements and protecting our systems. Retention periods vary by data type and context. When data is no longer required, we will delete it, anonymise it or securely dispose of it, unless retention is required or permitted by law.

Before publishing, Arclyte should document actual retention periods for enquiries, customer records, support tickets, website logs, analytics data, backups and product data. Applicable security or legal requirements may require certain records to be retained for a specified period.

13. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, authentication, encryption where appropriate, backups, monitoring and vendor review. No website, transmission method or storage system can be guaranteed to be completely secure. If a personal data breach occurs, we will take steps required by applicable law, which may include investigation, containment, remediation and notifications.

14. Your choices and privacy rights

Depending on where you live and the law that applies, you may have rights to request access to personal data, correction or updating, erasure, withdrawal of consent, information about processing, a copy of data, or to raise a grievance. Some rights are subject to exceptions, verification and other legal conditions.

To make a request, contact us using the privacy contact details in Section 1 and describe the request and the service concerned. We may need to verify your identity or authority before acting. We will respond within the timeframe required by applicable law. You may also have the right to complain to a relevant regulator or data-protection authority.

If you receive marketing emails from us, you can opt out using the unsubscribe link where available or by contacting us. We may still send non-promotional messages necessary to provide a service or comply with legal obligations.

15. Children's privacy

Our public website and general business services are not intentionally directed to children. We do not knowingly collect children's personal data through the public website without the authorisation or consent required by applicable law. If you believe a child has provided personal data to us inappropriately, contact us so that we can assess and take suitable steps. If a particular product is designed for children or educational institutions, a product-specific notice and any required parental or guardian consent process must be implemented before launch.

16. Business-to-business and client data

When we provide development, hosting, SaaS, CRM/ERP, marketing or automation services to a client, the client may upload or make available information about its employees, customers, suppliers or other individuals. The client is responsible for ensuring that it has the authority and lawful basis to provide that information and for giving any required notices. Arclyte will handle such information according to the relevant contract, instructions and applicable law. Where appropriate, the parties should enter into a data-processing agreement addressing roles, permitted uses, security, subprocessors, retention, deletion and incident handling.

17. Changes to this Policy

We may update this Policy from time to time to reflect changes in our services, technology, legal obligations or business practices. We will post the updated version on this page and revise the “Last updated” date. Where required by law, we will provide additional notice or seek consent for material changes.

18. Governing law

This Policy is intended to be interpreted consistently with applicable laws of India, including applicable data-protection and information-technology laws. Mandatory rights and protections under the laws of your place of residence, where applicable, are not excluded by this statement. Any specific dispute-resolution or jurisdiction clause should be reviewed against the company's contracts and applicable law before publication.

19. Contact us

For privacy questions, requests or complaints, contact:

Arclyte Studios Private Limited

Registered office: Ward no. 34, CBI Road, Near CBI Office, Bangalore - 560032, India.

Email: ameen@arclytestudios.com