Privacy Policy

Elhence Technologies Private Limited ("Elhence", "Elhence Technologies", "ETPL", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have over it.

This policy applies to visitors of elhencetech.com, users of SmartPursuit, individuals associated with customer organizations, and anyone who contacts us for sales, support, partnerships, or careers.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India) as our primary regime, and extend additional rights to users in the EEA/UK (GDPR) and California (CCPA/CPRA) where applicable.

Personal data: any information about an identified or identifiable individual.

Data principal: an individual to whom personal data relates (DPDP Act, 2023).

Data fiduciary: the entity determining the purpose and means of processing personal data. Elhence is a Data Fiduciary for the data described in Sections 3.1 and 3.2.

SmartPursuit: Elhence's AI-powered end-to-end bid management platform.

3.1 Information you provide. Account information (name, work email, company, job title, phone); demo and contact form data; career applications (name, contact details, resume/CV); and anything you share with us directly.

We do not accept online payments through our website and do not collect or store payment card details.

3.2 Information collected automatically. Usage data (pages visited, features used, time on site); device and technical data (browser, OS, device type, IP address, approximate location from IP); and cookies (see our Cookie Policy).

3.3 Customer-submitted data. When a business customer uses SmartPursuit, it may upload tender documents, bid content, and related business information. We process this data on behalf of that customer, who is the controller (Data Fiduciary) of it, under our agreement with them.

To provide, operate, and improve our website and SmartPursuit; create and manage accounts; respond to inquiries and support requests; deliver product information; send service notices and, with consent where required, marketing communications; maintain security and prevent fraud; analyze usage to improve our products; and evaluate job applications.

India (DPDP Act, 2023): where required, we obtain your free, specific, informed, unconditional, and unambiguous consent after notice, or rely on other lawful grounds such as fulfilling your request or complying with legal obligations.

EEA/UK (GDPR): we rely on contract performance, legitimate interests, consent, and legal obligation as applicable.

California (CCPA/CPRA): we process personal information as described here and honor the rights in Section 12.3.

We use essential cookies to operate the website, and may use analytics or marketing cookies in the future with your consent where required. See our Cookie Policy for details on what we use today.

We do not sell personal data. We share it only with service providers (hosting, analytics, email delivery, CRM) under contracts protecting your data; in connection with a business transfer such as a merger or acquisition; where required by law or to protect our rights and safety; or with your consent.

Your personal data is primarily stored and processed in India, and may be processed in other regions used by our infrastructure providers. Where personal data is transferred across borders, we apply appropriate safeguards, including standard contractual clauses or equivalent mechanisms recognized under applicable law.

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law: account data for as long as your account is active, plus up to 30 days after closure; marketing data until you withdraw consent; customer-submitted data per our agreement with that customer; and records subject to legal obligations for the period required by law.

We implement technical and organizational measures including encryption of data in transit and at rest, role-based access controls, audit trails and activity logging, and least-privilege access management. We are working toward industry-standard security certifications and will list them here once achieved.

India: we will notify the Data Protection Board of India and each affected data principal without delay, per the DPDP Act and its rules. EEA/UK: we will notify the relevant supervisory authority within 72 hours where feasible, and affected individuals where the breach creates high risk. California: we will comply with applicable notification requirements.

12.1 India (DPDP Act, 2023): you may access a summary of your personal data and our processing of it; request correction, completion, updating, or erasure; raise a grievance with us and, if unresolved, with the Data Protection Board of India; and nominate someone to exercise your rights on your behalf.

12.2 EEA/UK (GDPR): you have the right to access, rectify, erase, restrict processing of, and port your personal data, object to processing, and withdraw consent at any time.

12.3 California (CCPA/CPRA): you have the right to know, delete, and correct your personal information, opt out of sale or sharing (we do not sell personal data), and be free from discrimination for exercising these rights.

12.4 How to exercise your rights: contact us using the details in Section 16. We may need to verify your identity first. We aim to respond within 30 days.

Our website and products are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.

In accordance with the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer:

Name: Siddharth Elhence
Email: grievance@elhencetech.com
Address: M3M Woodshire, Tower B 14, Flat No. 203, Sector 107, Gurgaon – 122006, Haryana, India

You may contact our Grievance Officer with complaints about the processing of your personal data. We acknowledge grievances promptly and resolve them within the timelines prescribed by law. If unresolved to your satisfaction, you may approach the Data Protection Board of India.

We may update this Privacy Policy from time to time. Material changes will be notified on this page and, where appropriate, by email. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

Email: privacy@elhencetech.com

Registered office: M3M Woodshire, Tower B 14, Flat No. 203, Sector 107, Gurgaon – 122006, Haryana, India