Infophy Technologies Private Limited Effective Date: March 28, 2026

1. Our Commitment to Your Privacy

Infophy Technologies Private Limited ("Infophy," "we," "us," or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit infophy.com, contact us, or engage with our services.

By using our website or engaging with our services, you consent to the data practices described in this Privacy Policy. This policy is compliant with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.

2. Information We Collect

Information You Provide Directly:

• Contact Information — Name, email address, phone number, and company name submitted via contact or inquiry forms.
• Project Inquiry Details — Description of your project, service requirements, budget, and business goals.
• Career Applications — Resume, cover letter, education history, work experience, and contact details submitted via our Careers page.
• Communication Records — Emails or messages sent to care@infophy.com or career@infophy.com.

Information Collected Automatically:

• Usage Data — Pages viewed, time spent, links clicked, and navigation patterns.
• Device & Technical Data — IP address, browser type and version, operating system, device type, and referral URL.
• Cookie Data — Session data and preferences as described in Section 4 below.

3. How We Use Your Information

We use the information collected for the following purposes:

• To respond to your inquiries, quote requests, and service-related communications.
• To evaluate and process career applications and recruitment-related activities.
• To deliver, manage, and improve our services, projects, and client engagements.
• To send relevant information about our services, updates, or industry insights (you may opt out at any time).
• To analyze website usage and improve user experience, performance, and content.
• To comply with legal obligations, resolve disputes, and enforce agreements.
• To protect the safety, integrity, and security of our website and business operations.
• To personalize your experience and tailor communications to your needs.

We do not sell your personal data. Infophy Technologies does not sell, rent, or trade your personal information to third parties for commercial purposes.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. We categorize these as:

• Essential Cookies — Necessary for the website to function properly. These cannot be disabled without affecting core functionality.
• Analytics Cookies — Help us understand how visitors interact with the website. Data is aggregated and anonymized.
• Marketing Cookies — Used to deliver personalized advertisements and track the effectiveness of marketing campaigns.

When you first visit our website, you will be presented with a cookie consent banner allowing you to accept all cookies or customize your preferences. You can change your cookie settings at any time through your browser settings or our preferences panel.

We may use third-party analytics tools (such as Google Analytics) that set their own cookies. These third parties have their own privacy policies governing their use of such information.

5. Data Sharing & Disclosure

We may share your information only in the following limited circumstances:

• Service Providers — With trusted third-party vendors who assist in operating our website or delivering services (e.g., cloud hosting, CRM, email services), bound by confidentiality obligations.
• Group Companies & Products — With affiliated platforms including EdyFi, Ssalty Digital, and BillingTap, only where required to deliver agreed services and with appropriate safeguards.
• Legal Compliance — When required by law, court order, or governmental authority under applicable Indian laws.
• Business Transfers — In connection with a merger, acquisition, or sale of assets. You will be notified in such circumstances.
• With Your Consent — For any other purpose with your explicit prior consent.

We do not share your personal data with third parties for their independent marketing purposes.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Inquiry / Contact Data — Retained for up to 3 years from the date of last interaction.
• Career Application Data — Retained for up to 1 year from the date of submission, unless hired.
• Client Project Data — Retained as per the signed service agreement, typically 5–7 years for financial and compliance records.
• Website Analytics Data — Retained in anonymized form for up to 26 months.

After retention periods expire, data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• SSL/TLS encryption for data transmitted through our website.
• Access controls limiting data access to authorized personnel only.
• Secure hosting infrastructure with regular security monitoring.
• Internal data handling policies and employee training on data protection.

While we implement strong security measures, no method of internet transmission or electronic storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required under applicable law.

8. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights:

• Right of Access — Request a summary of personal data we hold about you and how it is being processed.
• Right to Correction — Request correction of inaccurate or incomplete personal data.
• Right to Erasure — Request deletion of your personal data, subject to our legal and contractual obligations.
• Right to Withdraw Consent — Withdraw consent previously given for data processing at any time, without affecting past lawful processing.
• Right to Grievance Redressal — Raise a grievance with our Data Protection Officer regarding the processing of your personal data.
• Right to Nominate — Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact us as detailed in Section 10. We will respond within 30 days.

9. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age without verifiable parental consent.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected data from a minor, please contact us immediately at care@infophy.com.

10. Contact & Grievance Officer

For any privacy-related queries, requests to exercise your rights, or to report a grievance:

Data Protection / Grievance Officer Infophy Technologies Private Limited Jagdeo Path, Patna, Bihar, India – 800014 Email: care@infophy.com Phone: +91 9437722224

We aim to acknowledge all privacy-related requests within 72 hours and resolve them within 30 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India as established under the DPDPA, 2023.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Effective Date" at the top of this document. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy. For material changes that significantly affect your rights, we will make reasonable efforts to notify you directly.

© 2026 Infophy Technologies Private Limited. All Rights Reserved. Registered under the Companies Act, 2013 · Startup India Recognized · MSME Registered