Privacy Policy

1. Who we are

Cellystial Technologies ("we", "us") is a sole proprietorship registered in India (GSTIN 29CSKPK7097K1ZS), at C-103, Insight Nandana, Sri Venkateshpura Layout, Sampigehalli, Bengaluru, Karnataka 560064, India. We decide how and why your personal data is processed for the services this policy covers. Under India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary, and under the EU and UK GDPR we are the controller.

2. What this policy covers

• This website, cellystialtechnologies.com. This policy applies in full.
• Swayama, our service that helps businesses manage their presence on Google, Maps, AI assistants and social media, including its apps, emails and free reports. This policy applies in full.
• Cellystial, our PDF generation service. It has its own privacy policy at cellystial.com/privacy, which applies when you use Cellystial.
• Client projects, the software we build for clients. When we handle a client's data while building or running their software, we do so on the client's instructions, under the contract and data processing terms agreed with that client. This policy covers the contact details of the people we work with on those projects.

If you use Swayama on behalf of a business, the business's own customers' data that passes through Swayama (for example, a review left on its Google profile) is handled under this policy too.

3. Data we collect

Data you give us

• Account details: your name, email address, phone number (if you give it) and password or sign-in method.
• Business details: business name, address, category, website, opening hours, services, photos and the other information you add about your business.
• Billing details: billing name, billing address, GSTIN (if you have one) and your invoice history. Card, UPI and bank details are entered on our payment processor's page and never reach our servers.
• Messages: what you send us by email or through the app, including support requests.
• Free report requests: your email address, business name and the search words you give us.

Data collected as you use Swayama

• Usage data: the pages and features you use, actions you approve, and timestamps.
• Technical data: IP address, browser and device type, and logs needed to keep the service secure and working.

Public data about businesses

To show rankings and compare a business with others nearby, Swayama reads publicly available information: Google Maps listings, search results, public reviews, business websites and online directories. This is information businesses publish about themselves.

4. Accounts you connect

Swayama works by connecting to accounts you control. You choose which ones to connect, you can disconnect them at any time in Swayama's settings or in the provider's own settings, and we access only what the features you use need.

5. Google user data

Swayama's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the features you see in Swayama.
• We don't sell it, use it for advertising, or use it to build profiles for anyone else.
• We don't use it to train general-purpose AI models.
• People at Cellystial Technologies read it only with your permission, to fix a problem you report, for security, or where the law requires it.

6. How we use data

• To provide the service you signed up for, which is our contract with you.
• To bill you and keep tax records, as the law requires.
• To send service emails: sign-in links, reports, alerts, receipts and invoices. We send marketing emails only if you agree, and every one has an unsubscribe link.
• To keep the service safe: preventing fraud, abuse and attacks, which is our legitimate interest.
• To improve Swayama: working out which features help and fixing what doesn't, using usage data.
• To meet legal duties and respond to lawful requests.

7. AI features

Some features use AI: drafting review replies, posts and website fixes, answering questions about your business, and checking whether AI assistants mention it. To do this, the relevant business information is processed by AI models, some run on our own servers and some provided by third parties (see section 8). We use providers whose terms don't allow them to train their models on the data we send.

AI output can be wrong. That is why anything Swayama publishes for your business waits for your approval first.

8. Who we share data with

We share personal data only with service providers that help us run Swayama, under contracts that limit them to processing it for us, or when the law requires it. We never sell personal data.

If we change providers we will update this list. We may also disclose data to comply with law or a court order, to protect our rights or users' safety, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.

9. International transfers

We are based in India and some of our providers process data in other countries, including the United States. When data leaves your country, we rely on the provider's contractual safeguards, such as the European Commission's Standard Contractual Clauses, and we transfer data only to countries Indian law allows.

10. How long we keep data

• Account and business data: while your account is active.
• When you ask us to delete it: it is hidden at once and permanently erased after 30 days. You can withdraw the request during those 30 days.
• Invoices and payment records: for as long as Indian tax law requires, even after an account is deleted, with your name removed where the law allows.
• Security logs: up to 12 months.
• Free report requests: up to 24 months, unless you ask us to delete them sooner.

11. Security

We encrypt data in transit with TLS, keep access tokens for connected accounts encrypted, limit staff access to what each job needs, and keep backups. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

12. Your rights

Depending on where you live, you have the right to:

• know what personal data we hold about you and get a copy;
• correct or complete it;
• have it erased;
• withdraw consent where we rely on it, without affecting what was done before;
• object to or restrict some processing, and move your data to another provider (EU and UK);
• nominate someone to exercise your rights if you die or can't act yourself (India);
• complain to us, and then to a regulator: in India, the Data Protection Board of India; in the EU or UK, your local data protection authority.

Email [email protected] from the address on your account. We may ask you to confirm your identity. We don't charge for requests.

Facebook and Instagram data: to delete data Swayama received from Meta, remove Swayama in your Facebook or Instagram settings under Apps and Websites, or email us. We then delete it as described in section 10.

13. Cookies

This website asks before setting any analytics cookie. If you click "Accept", we use Google Analytics 4 to count visits and see which pages are read; it sets cookies named _ga and _ga_*, kept for up to 2 years. If you click "Decline", no request is made to Google and no analytics cookie is set. Either way we store one cookie, ct_consent, for 180 days to remember your answer. You can change your choice at any time from "Cookie settings" at the bottom of every page; withdrawing deletes the Google Analytics cookies. Google Analytics is set with advertising features turned off.

The Swayama app uses only the cookies it needs to keep you signed in and remember your settings, such as which business you have open and your display theme.

We don't use advertising cookies.

14. Children

Our services are for businesses and are not meant for anyone under 18. We don't knowingly collect children's personal data; if you believe we have, contact us and we will delete it.

15. Changes to this policy

We will post any change here and update the date at the top. If a change is significant, we will also email account holders before it takes effect.

16. Contact and grievances

For any question or complaint about your personal data, contact our Grievance Officer:

Grievance Officer, Cellystial Technologies
Email: [email protected]
Post: C-103, Insight Nandana, Sri Venkateshpura Layout, Sampigehalli,
Bengaluru, Karnataka 560064, India

We acknowledge complaints within 2 working days and resolve them within 30 days.