PrivacyPolicy

Apoliums Automation Pvt. Ltd., trading as Apoliums, is a software development and consulting company registered in India with its office at 3rd Floor, Veda Complex, Bhawarkua Main Rd Square, Indore — 452001, Madhya Pradesh, India. For the personal data described in this policy, we act as the data controller.

This policy covers https://www.apoliums.com, the enquiries you send us by form, email or phone, and the personal data we handle while delivering a client project. It does not cover the websites or applications we build for clients once they are running under the client's own control — those are governed by that client's own privacy policy.

Any question about this policy, or any request to exercise the rights described in section eight, can be sent to info@apoliums.com or to the postal address above.

Information you give us directly, when you contact us or engage us:

• Your name, email address, phone number, company name and role
• The contents of enquiries, briefs, documents and messages you send us
• Contract, invoicing and payment details required to bill a project
• Credentials and access you choose to grant us to your own systems for the duration of a project

Information collected automatically when you use this website:

• Log data such as IP address, browser and device type, pages requested and timestamps
• Referring page and, where present, campaign parameters in the link you arrived on
• Cookie identifiers used to keep the site working and to measure aggregate traffic

We do not ask for, and do not want, sensitive personal data such as government identifiers, health information or financial account credentials in an enquiry. If you send them anyway, we delete them.

We use the information described above only to:

• Reply to your enquiry and hold the conversation that follows it
• Prepare proposals, scopes and estimates, and negotiate a contract
• Deliver, support and maintain the work you have engaged us for
• Issue invoices, collect payment and keep the accounting records the law requires
• Send operational messages about a live project, such as release notes and incident notices
• Keep this website secure, diagnose faults and understand aggregate traffic
• Meet legal, tax and regulatory obligations that apply to us in India

We rely on your consent for enquiry and marketing correspondence, on the performance of a contract for project delivery and billing, on our legitimate interest in running and securing the business for website logs and security, and on legal obligation for tax and statutory records. We do not sell personal data, and we do not use your data to train machine-learning models.

During a project we often need access to systems that contain personal data belonging to your customers or employees. For that data we act as a processor on your instructions, not as a controller, and we handle it only for the purpose of delivering the agreed work.

• Access is scoped to what the work requires and revoked when the engagement ends
• Credentials stay in your own secret store or password manager, never in ours
• Production data is not copied to laptops; where test data is required, it is anonymised or synthetic
• Where a project needs one, we sign a data-processing agreement setting out the same terms in contract

If we become aware of a personal-data breach affecting data we process for you, we notify you without undue delay and in any case within seventy-two hours of becoming aware of it, with what we know at that point and what we are doing about it.

We do not sell, rent or trade personal information. We share it only in these situations:

• Service providers who operate parts of our own business — email and document hosting, analytics, accounting and payment processing — each bound by contract to use the data only as we instruct
• Cloud and infrastructure providers where your project is deployed, which in most cases are accounts held in your own name
• Professional advisers such as accountants and lawyers, where they need it to advise us
• Government or law-enforcement bodies where a valid legal demand requires disclosure
• A successor entity in the event of a merger, acquisition or sale of the business, with notice to you before it takes effect

We do not disclose client names, project details or screenshots to anyone for marketing purposes without written permission from that client.

The measures we apply as standard:

• Traffic to this site and to the services we operate is encrypted in transit using current TLS
• Data at rest in our systems and in our providers' systems is encrypted
• Access to client information is restricted to the people working on that engagement
• Multi-factor authentication is required on the accounts we use to hold client information
• Dependency, secret and vulnerability scanning runs in our build pipelines
• Devices used for client work are disk-encrypted and centrally managed

No system is impenetrable, and we will not claim otherwise. If a breach affects your personal data we will tell you what happened, what data was involved and what to do about it, within seventy-two hours of becoming aware of it.

We keep personal data only as long as it is needed:

• Enquiries that do not become projects: deleted within twenty-four months of the last contact
• Project records, contracts and correspondence: kept for the engagement plus three years, so we can answer questions about work we delivered
• Invoices, tax and statutory accounting records: kept for eight years, as Indian tax law requires
• Access credentials and project system access: revoked at the end of the engagement
• Website server logs: retained for ninety days

You can ask us to delete personal data earlier by writing to info@apoliums.com. We will do so unless a legal obligation or an active contract requires us to keep it, and if that is the case we will tell you which one and for how long.

Subject to the Digital Personal Data Protection Act, 2023 and any other law that applies to you, you have the right to:

• Access — ask for a copy of the personal data we hold about you
• Correction — ask us to correct data that is wrong, incomplete or out of date
• Erasure — ask us to delete data we no longer have a lawful reason to keep
• Portability — receive the data you gave us in a machine-readable format
• Withdraw consent — opt out of marketing or other consent-based processing at any time
• Object or restrict — object to processing based on our legitimate interest, or ask us to pause it while a dispute is resolved
• Grievance redressal — raise a complaint with us and, if unresolved, with the relevant data protection authority

To exercise any of these, write to info@apoliums.com with enough detail for us to identify your records. We respond within thirty days, and we do not charge for a request unless it is repetitive or manifestly excessive.

This site uses a small number of cookies and similar technologies, for these purposes only:

• Keeping the site functioning correctly across a session
• Remembering display preferences you have set
• Measuring aggregate traffic and page performance so we can fix what is slow or broken

We do not use advertising cookies, we do not run cross-site tracking pixels for third-party ad networks, and we do not build behavioural profiles of visitors. You can block or delete cookies in your browser settings; the site will continue to work, though some preferences will not persist between visits.

We are based in India and our own records are held in India. Some of the service providers we use to run the business — email, document hosting, analytics and payment processing — process data on servers outside India.

Where that happens, we use providers who offer contractual data-protection commitments, and we transfer only what the service needs. Where a project has a data-residency requirement, we deploy that project into the region you specify and record the requirement in the contract.

We may update this policy as our services or the law change. When we do, we update the date at the top of this page and, for a material change, we contact clients and active enquiries by email rather than relying on you to notice.

Continued use of this website after a change takes effect means you accept the updated policy. If you do not, you can ask us to delete your data using the rights described above.

Write to info@apoliums.com for any privacy question, data request or complaint, or telephone +91-99770-04451 during Indian business hours.

Post reaches us at Apoliums Automation Pvt. Ltd., 3rd Floor, Veda Complex, Bhawarkua Main Rd Square, Indore — 452001, Madhya Pradesh, India. Please mark privacy correspondence for the attention of the grievance officer.