truCSR - Privacy Policy

Green Scarf Management Consultants Private Limited (CIN: U74999MH2019PTC329820) ("Company," "we," "us," or "our") offers a comprehensive suite of cloud-based CSR Compliance software through its website, compliance.trucsr.in ("Portal"). This software, referred to as "Services," assists organizations in controlling, tracking and managing their Corporate Social Responsibility (CSR) related Compliances, and Secretarial duties.

We are committed to protecting your privacy and ensuring compliance with this Privacy Policy ("Policy"). This Policy details how we collect, use, and, in certain circumstances, share your personal information. We encourage you to read it carefully to understand our practices.

1. This Policy sets out:

The types of personal information we may collect when you access or use the Portal, including information shared when you inquire about our Services or request a demo.
Our practices for collecting, using, maintaining, protecting, and disclosing personal information.

This Policy applies only to personal information collected during your use of the Portal, through email, and other electronic communications provided through the Portal.

By accessing or using the Portal and/or registering an account, you agree to this Policy and consent to the collection, use, retention, and disclosure of your personal information as described herein.

If you do not provide the required personal information, we may be unable to provide you with full access to the Portal or the Services. While you may access the Portal and share your personal information on behalf of your employer, the corporate entity receiving our Services ("Customer"), the information pertaining to the Customer that is entered, accessed, or stored on the Portal is governed by the confidentiality obligations outlined in our terms of engagement with that Customer and is therefore outside the scope of this Policy.

2. Information We Collect

We are committed to protecting your privacy from unlawful disclosure. To facilitate your use of the Portal, we collect several types of personal information from and about you, including:

Information about your internet connection.
Information that can be used to identify you, such as your name, email address, mobile number, designation, department, and employer. We collect this information to contact you regarding your use of the Services, inquiries, or customer support, which we provide through various channels, including the Portal, email, and telephone.

Information that is publicly available or provided to a public authority without any breach on our part will not be considered personal information.

We collect personal information directly from you or your employer, and automatically when you log in to your User Account on our Portal, as follows:

Information you provide:

When a user login is created, your personal information is added either by us, at the Customer's instruction, or directly by the Customer's designated administrator.

If you inquire about a demo or information, we collect your name, employer, email address, and mobile number.

When you register your User Account, we collect your full name, email address, mobile number, password, department, designation, location, and any other personal information you or the administrator provides.

Information we collect automatically:

We may automatically collect information about your Portal usage, including session variables to monitor active usage time. Your session will automatically time out after 30 minutes of inactivity.

We track your Internet Protocol (IP) address to ensure you are accessing the Portal and Services through authorized IP addresses.

Cookies:

Currently, we do not use cookies, flash cookies, pixel tags, or mobile IDs to track your Portal usage or customize your experience. If we implement cookies in the future, we will update this Policy accordingly. We use session variables to automatically log out inactive sessions after thirty minutes. These variables are maintained for 30 minutes or the duration of your browsing session, whichever is shorter.

Anonymous Data:

We may anonymize personal information collected from you through the Portal or other means, including third-party web analytics tools. Our use and disclosure of aggregated, anonymized data is not restricted by this Policy.

3. How We Store Your Information

Your personal information is securely stored on Google Cloud Platform (GCP) infrastructure. Our database is encrypted and processed on GCP servers, with access strictly limited and password-protected. You can find more information about GCP security practices athttps://cloud.google.com/security/best-practices. However, no security system is impenetrable. We cannot guarantee the security of our database or that your information will not be intercepted during transmission over the Internet, which is inherently insecure.

We are not liable for the disclosure of your personal information due to transmission errors, unauthorized third-party access, or other events beyond our control. You are responsible for maintaining the security of your login credentials and other User Account security information.

4. How We Use Your Information

We use your information for the following purposes:

To provide and maintain the Service.
To process your subscription payments.
To communicate with you about the Service, including updates, support, and promotional materials (where permitted).
To arrange service demonstrations.
To share service updates and content.
To track software usage.
To respond to your inquiries, complaints, and bug reports.
Sending compliance reminders.
To provide customer support.
To fulfill our contractual obligations, including billing and collection.
To assist with password retrieval and policy changes.
To preserve records as required by law or policy.
To send confirmations, invoices, technical notices, updates, security alerts, and administrative messages.
To comply with applicable laws, regulations, and legal processes.
To responding to requests from law enforcement or other government authorities.
To enforce our Terms and Conditions, including investigating potential violations.
To detect, preventing, and addressing fraud, security, or technical issues.
To protect our rights, property, and safety, and the rights, property, and safety of our users or the public, as required or permitted by law.
To disclose information for audits or investigations related to complaints or security threats.
Any other purpose for which we have obtained your consent.
To personalize your experience.
To analyze how the Service is used and improve its functionality.

5. How We Share Your Information

We do not share your personal information with third parties, except when required by law. We may share your information with third parties for the following purposes:

Legal Purposes: We may share your personal information when we believe it is necessary to investigate, prevent, or address potential illegal activities or legal processes. We may also share your information to address threats to the physical safety of any person, violations of this Privacy Policy or our Terms and Conditions, violations of third-party rights, and/or to protect the rights, property, and safety of the Company, our employees, users, or the public. This may involve sharing your information with law enforcement agencies, government bodies, courts, and other organizations in response to legal requests.
Contractual Rights: We may disclose your personal information to enforce our Terms and Conditions and other agreements.
Customer Testimonials/Comments/Reviews: We may post customer testimonials on the Portal, which may contain personal information, such as your name and designation. We will always obtain your consent before posting such information.

Service Providers: We may share your information with third-party service providers who assist us with payment processing, hosting, data storage, analytics, and other services.
Business Partners: We may share your information with business partners to offer you related products or services.
Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
With Your Consent: We may share your personal information in any other way you have consented to.

6. Data Security

We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. We implement appropriate security measures to protect against unauthorized access, alteration, modification, disclosure, or destruction of data. These measures include internal reviews of our data collection, storage, and processing practices, and security measures, such as encryption, to prevent unauthorized access to our systems. We also employ electronic and managerial procedures to safeguard your personal information and maintain data security, considering the sensitivity of the information and current technological standards. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and upon receipt.

7. Data Retention

We will retain your personal information for as long as necessary to provide you with the Service and as required by applicable law. You may request deletion of your data, subject to our legal obligations.

8. Correcting Your Information

We will take reasonable steps to ensure the accuracy of your personal information and any subsequent updates. You may review, update, correct, or delete inaccurate or incomplete personal information by contacting our Privacy Officer (see details below).

Subject to applicable law, your right to review, update, correct, and delete your information may be limited:

When it would infringe on the rights or safety of another person.
If the information pertains to pending or threatened legal proceedings between you and the Company.

Your ability to review, update, correct, and delete your information is subject to our records retention policies and applicable laws, including statutory retention requirements.

9. Your Rights

You may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict the processing of your information. To exercise these rights, please contact us at [Your Company Email Address].

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws that are different from the laws of your country. We will take steps to ensure that your information is protected in accordance with this Privacy Policy.

11. Account Termination

Upon termination of your User Account, as instructed by the Customer, or upon the termination or expiration of our engagement with the Customer, we will delete your personal information or de-identify it so that it is anonymous and not attributable to you. We may retain your information for legally authorized purposes, such as preventing, investigating, or identifying wrongdoing related to the Portal or complying with legal obligations.

12. Contacting Our Privacy Officer

If you have any questions about this Privacy Policy, or if you have any inquiries or complaints about how we handle your personal information, or if you wish to exercise your privacy rights, please contact our Privacy Officer:

By Email: isha.tripathi@trucsr.in

By Mail:46, Bajaj Bhavan, 4th Floor
Jamnalal Bajaj Marg, Nariman Point
Mumbai - 400021, Maharashtra, India

We will attempt to resolve complaints quickly and informally. If you wish to file a formal privacy complaint, please submit it in writing to our Privacy Officer via mail or email.

13. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in the law, our data collection and use practices, our Services' features, or technological advancements. We will use your information in accordance with the current Privacy Policy. If we make material changes to this Policy, we will provide you with reasonable notice of any material changes. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.