Data Protection Policy

Last Modified: December, 2024

This Data Protection Policy (“Policy”) governs the collection, use, processing, and protection of personal data by PRICE-WATCH.AI (“Nidhyana Price Watch Analytics Private Limited”) in compliance with applicable data protection legislation, including but not limited to the General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), Digital Personal Data Protection Act, India, 2023 (DPDP Act) and other relevant laws. This Policy forms an integral part of the agreement between PRICE-WATCH.AI and its Users, and any violation of this Policy may result in termination of services.

1. Purpose and Scope

1.1 PRICE-WATCH.AI is committed to ensuring the protection and lawful processing of personal data in compliance with applicable data protection laws.

1.2 This Policy applies to all Users, employees, contractors, and third parties who interact with PRICE-WATCH.AI’s software-as-a-service platform (“Platform”).

1.3 All processing of personal data carried out by PRICE-WATCH.AI shall comply with the principles outlined in this Policy.

2. Definitions

2.1 Applicable Laws: All applicable laws and regulations governing the processing of personal data, including the GDPR, CCPA, DPDP ACT and equivalent legislation.

2.2 Personal Data: Any information relating to an identified or identifiable natural person.

2.3 Data Subject: The individual to whom the Personal Data relates.

2.4 Processing: Any operation performed on Personal Data, including but not limited to collection, recording, storage, alteration, or destruction.

2.5 Controller: The entity determining the purposes and means of processing Personal Data.

2.6 Processor: The entity processing Personal Data on behalf of the Controller.

2.7 Sub-Processor: A third party appointed to process Personal Data on behalf of the Processor.

3. Principles of Data Protection

PRICE-WATCH.AI adheres to the following principles when processing Personal Data:

3.1 Lawfulness, Fairness, and Transparency: Personal Data shall be processed lawfully, fairly, and transparently.

3.2 Purpose Limitation: Personal Data shall be collected for specified, explicit, and legitimate purposes.

3.3 Data Minimization: Personal Data shall be limited to what is necessary for the purposes of processing.

3.4 Accuracy: Personal Data shall be accurate and kept up to date.

3.5 Storage Limitation: Personal Data shall not be retained for longer than necessary.

3.6 Integrity and Confidentiality: Personal Data shall be processed securely to prevent unauthorized access or data breaches.

3.7 Accountability: PRICE-WATCH.AI shall be responsible for demonstrating compliance with these principles.

4. Categories of Data Collected

4.1 PRICE-WATCH.AI may collect the following categories of Personal Data:

• User Information: Name, contact details, billing information, and organization details.
• Usage Data: IP address, device information, login activity, and browsing patterns.
• Support Communications: Records of User inquiries and support requests.

4.2 Sensitive personal data (e.g., financial information) shall only be collected with explicit consent where legally required.

5. Legal Basis for Processing

5.1 PRICE-WATCH.AI shall process Personal Data only where a lawful basis exists, including:

• Performance of a Contract: To provide the services requested by the User.
• Legitimate Interests: To improve the Platform and ensure its security.
• Compliance with Legal Obligations: To meet statutory or regulatory requirements.
• Consent: Where explicit User consent has been obtained.

6. Data Sharing and Sub-Processing

6.1 Personal Data shall not be shared with third parties except as follows:

• Service Providers: Authorized Sub-Processors providing essential services (e.g., hosting, payment processing).
• Legal Compliance: To comply with legal obligations, court orders, or law enforcement requests.
• Corporate Transactions: In the event of a merger, acquisition, or sale of PRICE-WATCH.AI’s assets.

6.2 Sub-Processors engaged by PRICE-WATCH.AI shall be bound by written agreements imposing data protection obligations equivalent to those set out in this Policy.

7. International Data Transfers

7.1 Where Personal Data is transferred outside the jurisdiction of the Data Subject, PRICE-WATCH.AI shall ensure that adequate safeguards are implemented, including but not limited to:

• Standard Contractual Clauses (SCCs).
• Binding Corporate Rules (BCRs).
• Adequacy decisions issued by relevant authorities.

8. Data Subject Rights

8.1 Data Subjects have the following rights under applicable laws:

• Right of Access: To obtain confirmation of whether their Personal Data is being processed and access to such data.
• Right to Rectification: To request correction of inaccurate or incomplete Personal Data.
• Right to Erasure: To request deletion of Personal Data under certain conditions.
• Right to Restriction of Processing: To request a limitation on processing activities.
• Right to Data Portability: To receive their Personal Data in a structured, commonly used format.
• Right to Object: To object to processing based on legitimate interests or direct marketing.

8.2 Data Subjects may exercise their rights by submitting a written request to policy@price-watch.ai.

9. Security Measures

9.1 PRICE-WATCH.AI shall implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of Personal Data, including:

• Data encryption at rest and in transit.
• Access controls and authentication protocols.
• Regular security audits and vulnerability assessments.

10. Breach Notification

10.1 PRICE-WATCH.AI shall notify the relevant supervisory authority and affected Data Subjects of any Personal Data Breach without undue delay, in accordance with applicable laws.

11. Data Retention

11.1 Personal Data shall be retained only for as long as necessary to fulfill the purposes for which it was collected, unless longer retention is required by law.

11.2 Upon expiration of the retention period, Personal Data shall be securely deleted or anonymized.

12. Accountability and Audits

12.1 PRICE-WATCH.AI shall maintain records of all processing activities in compliance with applicable laws.

12.2 PRICE-WATCH.AI shall provide documentation and access to independent audits to demonstrate compliance with this Policy.

13. Governing Law and Dispute Resolution

13.1 This Policy shall be governed by and construed in accordance with the laws of Madras Court, India.

13.2 Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts in Madras Court, India.

14. Amendments

14.1 PRICE-WATCH.AI reserves the right to amend this Policy at any time. Notice of material changes shall be provided through the Platform or via email.

15. Contact Information

For inquiries, complaints, or requests related to this Policy, please contact:

Nidhyana Price Watch Analytics Pvt. Ltd.
Attention: Privacy Team
Futura Tech Park, C-Block, 8th Floor, 334
Old Mahabalipuram Road, Sholinganallur,
Chennai – 600119.

Email: policy@price-watch.ai

This Policy is designed to comply with the GDPR, CCPA, DPDP Act and other applicable data protection regulations.