Privacy Policy

Santan Infotech Inc. ("we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website (santaninfotech.com) or use our product (DTOP) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

1. Information Collection

We collect several types of information from and about users of our Website and Enterprise Products, including information:

• Personal Identification Information: By which you may be personally identified, such as name, postal address, e-mail address, telephone number, or any other identifier by which you may be contacted online or offline ("personal information").
• Organizational Information: Company name, role/title, and enterprise requirements provided during demos and enterprise onboarding for DTOP.
• Technical Information: About your internet connection, the equipment you use to access our Website, and usage details.

2. How We Use Information

We use information that we collect about you or that you provide to us, including any personal information:

• To present our Website and its contents to you.
• To provide you with information, products, or services that you request from us, including multi-tenant access and role-based provisioning for DTOP.
• To fulfill any other purpose for which you provide it.
• To provide you with notices about your account and enterprise subscription, including expiration and renewal notices.
• To carry out our obligations and enforce our rights arising from any contracts entered into between your organization and us, including for billing and continuous support.

3. Data Sharing & Disclosure

We do not sell, trade, or rent your personal identification information to others. We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them (e.g. secure cloud hosting nodes).
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information with your consent.

4. Security of Your Data

We have implemented world-class measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Security is the core functional requirement of our enterprise platforms:

• Encryption: All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256 standards.
• Access Controls: We utilize strict Role-Based Access Control (RBAC) and zero-trust architecture parameters across DTOP.
• Data Isolation: For enterprise tenants on our platforms, we ensure logical separation and robust tenant isolation protocols.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website or Product portals, you are responsible for keeping this password confidential.

5. Cookies and Analytics

Our Website may use "cookies" to enhance User experience. User's web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Site or our enterprise platforms may not function properly.

6. Your Data Rights

Depending on your location, you may have specific rights regarding your personal information, including the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your personal data under certain circumstances.
• Object to processing of your personal data.
• Request data portability to another service provider.

To exercise any of these rights, please contact us at the email provided in the Contact section below. As part of our commitment to GDPR and global compliance, we aim to respond to all legitimate requests within 30 days.

7. Contact Us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with our enterprise ecosystem, please contact our Data Protection Officer at: