Privacy Policy

Who This Policy Covers

This policy applies to personal data collected through pragyasuite.com, our products (PragyaCRM, PragyaLead, PragyaAI), and our direct communications with you (email, phone, WhatsApp). It's written to align with India's Digital Personal Data Protection Act, 2023 (DPDP Act), under which Pragyasuite Technologies acts as a Data Fiduciary for the personal data described below.

Personal Data We Collect

• Contact details you give us directly — name, email, phone number, company name, and project details submitted through our contact form or by email/phone/WhatsApp.
• Account and usage data if you use one of our products (PragyaCRM, PragyaLead, PragyaAI), scoped to what that specific product needs to function for you or your organization.
• Website usage data collected via analytics cookies — pages visited, approximate location (city/country level), device and browser type — described in full in our Cookie Policy.
• Communications you send us, including messages through the on-site chat assistant and WhatsApp.

Why We Process Your Data (Purpose Limitation)

We only process personal data for the specific purpose it was collected for: responding to your enquiry, delivering and supporting the product or service you've engaged us for, improving our website and products, and legal or compliance obligations. We don't repurpose data collected for one reason (e.g. a contact form enquiry) for an unrelated one (e.g. unsolicited marketing) without separately asking for your consent.

Consent

Where we rely on your consent to process personal data — such as non-essential analytics cookies, or being added to an email list — that consent is specific, informed, and given through a clear affirmative action, not assumed from silence or a pre-checked box. You can withdraw consent at any time, as easily as you gave it, by emailing info@pragyasuite.com or adjusting your cookie preferences. Withdrawing consent doesn't affect the lawfulness of processing carried out before the withdrawal.

Data Sharing

We do not sell personal data. We share it only in these situations: with service providers who help us operate our website, products, or communications (e.g. hosting, email, analytics) and are bound by confidentiality obligations; when required by law, court order, or a lawful request from a government authority; or with your explicit consent for a specific purpose. Any processor we use is required to handle data only per our instructions and for the purpose we specify.

Cross-Border Data Transfer

Some of our service providers (such as cloud hosting or analytics platforms) may process data outside India. Where this happens, we use providers that maintain appropriate safeguards, consistent with the DPDP Act's provisions on transferring personal data outside India. We do not transfer data to jurisdictions restricted by the Central Government under the Act.

Data Retention (Storage Limitation)

We retain personal data only as long as needed for the purpose it was collected for, or as required by applicable law (e.g. tax and accounting records). Once neither applies — for example, a contact-form enquiry that didn't lead to an engagement — we delete or anonymize the data rather than keeping it indefinitely.

Data Security

We use reasonable security safeguards appropriate to the sensitivity of the data involved, including encryption in transit (HTTPS), access controls limiting who on our team can see what data, and hosting infrastructure with standard security practices. No system is perfectly secure, but we take concrete, ongoing steps to reduce the risk of unauthorized access, disclosure, alteration, or loss.

Personal Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act, including what happened, what data was involved, and what we're doing about it.

Children's Data

Our website and products are intended for businesses and professional use, not for children. We do not knowingly collect personal data from individuals under 18, and we do not process children's data for tracking, behavioral monitoring, or targeted advertising. If you believe a child's data has reached us, contact us and we'll delete it.

Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it's being processed.
• Correct inaccurate or incomplete personal data, and update data that's out of date.
• Request erasure of your personal data once it's no longer needed for the purpose it was collected for, subject to any legal retention requirements.
• Withdraw consent at any time, for any processing that relies on it.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Register a grievance with us, and if unresolved, escalate it to the Data Protection Board of India.

Grievance Officer

For any privacy-related question, complaint, or to exercise any of the rights above, contact our Grievance Officer at info@pragyasuite.com or +91 99703 79767. We aim to acknowledge and address grievances promptly. If you're not satisfied with our response, you have the right to approach the Data Protection Board of India.

Changes to This Policy

We may update this policy as our products, practices, or applicable law change. Material changes will be reflected by updating the date at the top of this page.

Contact Us

Pragyasuite Technologies, Patil Arcade, 71-72, above Old Hotel Kalinga, Erandwana Gaothan, Erandwane, Pune, Maharashtra 411004, India. Email: info@pragyasuite.com. Phone: +91 99703 79767 / +91 78208 77176.