Privacy Policy

1. Who We Are

AjileByte Private Limited ("AjileByte", "we", "us", or "our") is a health intelligence and enterprise technology company based in India. Together with our affiliate partner AgileDone Tech LLC, we deliver intelligent workflow platforms, AI agent architectures, and enterprise AI Governance, Risk, and Compliance (GRC) solutions, including the AegisDatastra platform.

2. What Information We Collect

We collect information solely to provide our services, respond to inquiries, and manage business relationships:

• Contact & Professional Information: Name, work email address, company name, job title, and company size submitted through our contact and assessment request forms.
• Assessment & Trial Preferences: Areas of interest (e.g., DPDP Readiness Assessment, AegisDatastra Consent Management Platform trial), specific governance concerns, and optional marketing preferences.
• Technical & Telemetry Data: IP address, browser type, device information, and interaction timestamps collected automatically to secure our services and ensure reliable delivery.

3. Purpose & Legal Basis of Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP) and international privacy frameworks, we process personal data under lawful bases:

• Service Delivery: To review and schedule complimentary DPDP Readiness Assessments and provision AegisDatastra trials.
• Explicit Consent: Where you provide explicit opt-in consent to receive insights, product updates, or marketing communications. You can withdraw consent at any time.
• Legitimate Business Interests & Security: To prevent fraud, protect infrastructure, and maintain an auditable compliance trail.

4. We Never Sell Your Data

Information is shared only with authorized personnel, affiliated companies (including AgileDone Tech LLC for AegisDatastra delivery), and vetted cloud infrastructure providers (such as AWS) bound by confidentiality and data processing agreements.

5. Data Security & ISO 27001:2022 Controls

Our Information Security Management System (ISMS) operates under independently audited ISO/IEC 27001:2022 standards. We enforce zero-trust network principles, multi-factor authentication (MFA), end-to-end data encryption in transit (TLS 1.3) and at rest (AES-256), and continuous audit logging.

6. Your Rights as a Data Principal

You have statutory rights under the DPDP Act and GDPR regarding your personal data:

• Right to Access: Request a summary of the personal data held about you and processing activities undertaken.
• Right to Correction & Erasure: Request the correction of misleading or outdated data, or the deletion of data when no longer required.
• Right to Withdraw Consent: Revoke consent previously granted for communications or processing.
• Right of Grievance Redressal: Submit inquiries or grievances to our designated Grievance Officer.

7. Grievance Officer & Contact Information

For any questions, requests regarding your rights, or to contact our Grievance Redressal Officer, please reach out to: