Privacy Policy
Effective Date: 1st July 2018 | Last Updated: 23rd December 2025

We collect various types of personal data, which may include:
• Contact information (name, email address, phone number, etc.)
• Job title and company details
• Communication preferences
• Information submitted through contact forms or customer support channels
• Website usage data (e.g., IP address, browser type, pages viewed, etc.) collected through cookies and similar technologies.

We use your personal data for the following purposes:
• Providing and improving our website and its functionality
• Responding to inquiries, support requests, and customer service needs
• Communicating with you about our products, services, and updates
• Analyzing website usage trends and statistics
• Ensuring compliance with legal obligations

We process your personal data based on one or more of the following legal grounds:
• Performance of a contract: Processing necessary to fulfill our contractual obligations or take pre-contractual steps at your request.
• Legitimate interests: Processing necessary for our legitimate interests, such as improving our website and services, conducting marketing activities, and protecting against fraud or security risks.
• Consent: Processing based on your explicit consent, which you can withdraw at any time.

We may share your personal data with third parties under the following circumstances:
• Service Providers: We may engage trusted third-party service providers to assist in website operations, customer support, analytics, and other business-related services. These providers are contractually bound to protect your personal data.
• Business Partners: We may share personal data with business partners who collaborate with us to provide integrated services. These providers are contractually bound to protect your personal data.
• Legal Compliance: We may disclose personal data when required to comply with applicable laws, regulations, legal processes, or governmental requests. If we transfer personal data outside of your jurisdiction, we will take appropriate measures to ensure an adequate level of protection, such as utilizing standard contractual clauses or other lawful mechanisms.

We implement technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We regularly assess and enhance our security practices to maintain the confidentiality and integrity of your personal data.

Aurochs provides cloud-based sales incentive compensation platforms to enterprise Clients. The personal data processed within these platforms belongs to our Clients’ personnel such as employees, contractors, distributors, or sales representatives and typically includes identifiers such as name, employee ID, role, organization hierarchy, work email, login information, and performance or sales data used solely for incentive calculation and reporting.
For this processing, Aurochs acts strictly as a Data Processor and our Clients act as the Controllers. We process such personal data only on our Clients’ documented instructions under legally valid agreements, including data protection terms (e.g., a Data Processing Agreement). We do not determine the purposes of processing and do not use this data for any purpose other than the contracted deliverables. As Processor, Aurochs does not maintain a direct relationship with these data subjects; responsibility for providing them with collection or just-in-time privacy notices rests with the Client as Controller.
Requests from data subjects (access, correction, deletion, withdrawal of consent, etc.) that we receive directly are routed to the relevant Client for validation and execution. Personal data in Client environments is protected through controls including encryption at rest and in transit, access restrictions, audit logging, and periodic security assessments. Retention and secure deletion are carried out in accordance with the Client contract, including upon termination or instruction. Where we engage sub-processors to support this processing, we do so under written contracts that impose data protection obligations equivalent to those set out here, and we maintain a record of such sub-processors that is made available to the relevant Client on request.

We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. We will securely dispose of personal data once the retention period expires. The criteria used to determine retention periods include the nature and purpose of the processing, whether an active client or contractual relationship is in place, and applicable legal, tax, or regulatory requirements. Personal data processed within our Cloud Platforms is retained and securely deleted in accordance with the relevant Client contract

You have certain rights regarding your personal data. Subject to applicable law, you may
• Right to access: You can request access to the personal data we hold about you.
• Right to rectification: You can request correction or update of your inaccurate or incomplete personal data.
• Right to erasure: You can request deletion of your personal data under certain circumstances.
• Right to restrict processing: You can request the restriction of processing your personal data in certain situations.
• Right to object: You can object to the processing of your personal data for direct marketing purposes.
• Right to data portability: Where processing is based on consent or a contract and is carried out by automated means, you can request to receive the personal data you provided to us in a structured, commonly used, machine-readable format, or to have it transmitted to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
To exercise your rights or if you have any questions or concerns regarding your personal data, please contact us using the information provided at the bottom of this privacy notice.

We use cookies and similar technologies on our website to enhance user experience, analyze usage patterns, and deliver personalized content. Please review our Cookie Policy for more information on how we use cookies and your choices regarding their use.

Our website and services are intended for business use and are not directed to children. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take reasonable steps to delete it.

We may update this Privacy Notice from time to time. Any changes will be effective when we post the revised notice on our website. We encourage you to review this notice periodically for any updates.

If you have any questions, concerns, requests, or complaints regarding this Privacy Notice or our data practices, please contact our Privacy Officer at:
Aurochs Software Private Limited
Address: Office No.201B, 2nd Floor, Beta-1, Giga Space IT Park, Viman Nagar, Pune - 411014, Maharashtra, India
Email Address: dataprotection@aurochssoftware.com
Phone: +91 9359783260
We will address your inquiries and concerns promptly and in accordance with applicable data protection laws.