Exato Technologies Limited and its affiliates and subsidiaries (“Exato”, “we”, “us” or “our”) operate www.exato.ai (the “Website”). This Privacy Notice explains how we collect, use, disclose, retain and protect personal data when you visit our Website, contact us, enquire about our services, interact with our communications, apply for a role, or otherwise engage with us. The entity responsible for your data may depend on the service and applicable law.
02Personal Data We Collect
Depending on your interaction with us, we may collect:
- Contact and business details, such as name, work email, telephone number, job title, employer, business address and areas of professional interest.
- Information you submit through website forms, chat, demo or callback requests, email, phone, WhatsApp, events, surveys or social media.
- Recruitment information, such as CV/resume, employment history, education and information you provide during recruitment.
- Investor, customer, partner or supplier enquiry details and related communications.
- Website and device information, such as IP address, browser/device details, cookie identifiers, pages viewed and interaction data, where collected through cookies or similar technologies.
- Business contact information obtained from third-party business-data, professional-networking, research or lead-generation sources, as well as publicly available professional or company sources.
Please do not submit sensitive personal data through the Website unless it is specifically requested and there is a lawful basis to collect it.
03How We Use Personal Data
We use personal data, as permitted by applicable law, to:
- Respond to enquiries, provide requested information, arrange demos and deliver or support our services.
- Manage customer, prospect, partner, supplier, recruitment and investor relationships.
- Use personal information for marketing, relationship management and related communications, in accordance with applicable laws.
- Operate, secure, troubleshoot, analyse and improve our Website, services, campaigns and business processes.
- Administer events, newsletters, recruitment, records, legal claims, regulatory obligations and legitimate business operations.
Where required by law, we will obtain consent before processing personal data or sending particular types of marketing communications. Where applicable law permits another lawful basis, we will rely on that basis and respect any right to object or opt out.
04Third-Party Business Data and AI-Assisted Outreach
In connection with our business development and marketing activities, Exato may use professional contact and business information to identify organisations and individuals who may have an interest in our offerings. Such information may be obtained from information you provide to us, publicly available professional or business sources, business directories, and service providers that support our business operations.
We may use this information to maintain business contact records, assess potential business relevance, respond to enquiries and conduct business-to-business communications, including email, telephone and other outreach methods, as permitted by applicable law.
We take reasonable steps to use business contact information for relevant professional purposes, limit access to it, assess service providers where appropriate, and honour applicable objections and opt-out requests.
Where Exato or a service provider records, transcribes or analyses communications, we will provide notices and obtain consent where required by applicable law.
05Cookies and Similar Technologies
We and our service providers may use cookies, pixels, tags, scripts and similar technologies to operate the Website, remember preferences, understand traffic and improve performance. You can manage cookies through available Website controls and your browser settings. Some features may not work as intended if cookies are disabled. Where required, non-essential cookies will be used only with the appropriate consent.
06When We Share Personal Data
We may share personal data, as necessary and subject to appropriate safeguards, with:
- Our affiliates and group companies for the purposes described in this Notice.
- Service providers and processors supporting hosting, CRM, sales and marketing, business-data services, communications, analytics, recruitment, security and customer support.
- Professional advisers, auditors, insurers, prospective investors or transaction counterparties in connection with a corporate transaction, subject to appropriate safeguards.
- Public authorities, regulators, courts or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, systems or legal interests.
We do not sell personal data for money. Certain advertising, analytics or technology disclosures may be treated as “sharing”, “sale” or targeted advertising under some jurisdictions’ laws; where such laws apply, we will provide required choices and rights. We do not authorise service providers to use personal data for their own unrelated purposes unless permitted by law and appropriately disclosed.
07International Transfers
Exato and its service providers may process or store personal data in countries other than the country where it was collected. Where applicable law requires it, we will use an appropriate transfer mechanism and safeguards for cross-border transfers.
We retain personal data only for as long as reasonably necessary for the purposes described in this Notice, including managing relationships, complying with legal obligations, resolving disputes and enforcing agreements. Retention periods vary by data type and purpose. We use reasonable technical, organisational and access-control measures designed to protect personal data, but no method of transmission or storage can be guaranteed to be completely secure.
09Your Choices and Privacy Rights
Depending on your location and applicable law, you may have rights to request access to, correction or deletion of personal data; withdraw consent. You may opt out of marketing emails using the unsubscribe link or instructions in the message. We will record and respect applicable opt-out and do-not-contact requests, subject to lawful retention of limited information needed to honour your request.
We may need to verify your identity and the scope of your request before acting. Certain information may be retained where permitted or required by law.
The Website and our business services are not directed to children. We do not knowingly collect children’s personal data except where permitted by applicable law and with any legally required authorisation. If you believe a child has provided personal data to us, please contact us.
The Website may link to third-party websites or services. Their privacy practices are governed by their own notices, and Exato is not responsible for their practices. Please review those notices before providing personal data.
We may update this Notice from time to time. The updated version will be posted on this page with a revised “Last updated” date. Where required by law, we will provide additional notice or seek consent for material changes.
For privacy questions, rights requests, marketing opt-outs or complaints, contact: cx@exato.ai.
Governing law and dispute resolution: This Privacy Notice shall be construed and governed by the laws of India. You agree that the courts in New Delhi, India shall have exclusive jurisdiction over such disputes.