Privacy Policy

eeaso ("Platform", "Service", "Application", or "Software") is a Software-as-a-Service (SaaS) platform owned and operated by ELANTRA TECHNOLOGIES PRIVATE LIMITED ("Company", "Elantra", "we", "our", or "us"), a company incorporated under the Companies Act, 2013, bearing Corporate Identification Number U62012KA2026PTC218933 and having its registered office at Girija Nivasa, Valmiki Nagar, Challakere, Chitradurga – 577522, Karnataka, India.

This Privacy Policy describes how the Company collects, receives, stores, uses, processes, transfers, retains, protects, and discloses Personal Data and other information in connection with the use of eeaso and related services.

The Company is committed to protecting user privacy and handling information in a transparent, secure, and lawful manner.

By accessing, registering for, connecting third-party services to, subscribing to, or otherwise using eeaso, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

This Privacy Policy applies to:

• Visitors to the Website;
• Registered Users;
• Free Plan Users;
• Trial Users;
• Paid Subscribers;
• Agencies;
• Business Customers;
• Enterprise Customers;
• Workspace Members;
• Individuals interacting with services integrated into eeaso.

This Privacy Policy applies to information collected through:

• www.eeaso.com
• Web applications;
• APIs;
• Dashboards;
• Third-party integrations;
• Customer support communications;
• Related products and services operated by the Company.

This Privacy Policy has been prepared in accordance with:

• The Digital Personal Data Protection Act, 2023;
• The Information Technology Act, 2000;
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• Applicable governmental notifications, regulations, and directions;
• Contractual obligations applicable to authorized third-party integrations.

Where required by law, the Company shall act as a Data Fiduciary and process information in accordance with applicable legal requirements.

The Company may collect and process the following categories of information.

4.1 Account Information

• Full Name;
• Business Name;
• Agency Name;
• Organization Information;
• Email Address;
• Mobile Number;
• Account Credentials;
• Subscription Information.

4.2 Technical Information

• IP Addresses;
• Browser Information;
• Device Information;
• Operating System Information;
• Authentication Information;
• Session Information;
• Platform Usage Information;
• Security Logs.

4.3 Workspace Information

• Team Information;
• User Roles;
• Permissions;
• Workspace Configuration Data;
• Collaboration Information.

4.4 Content Information (where uploaded by users)

• Images;
• Videos;
• Documents;
• Files;
• Scheduling Data;
• Workflow Information;
• Customer-generated Content.

4.5 Integration Information

Where authorized by the user, eeaso may access information from connected services and integrations.

eeaso may integrate with services provided by Meta Platforms, Inc., including:

• Facebook Pages;
• Instagram Business Accounts;
• WhatsApp Business Accounts;
• Meta APIs;
• Other Meta-authorized services.

Where authorized by the user, eeaso may access, process, store, and display information made available through Meta APIs, including:

• Account Information;
• Page Information;
• Platform Identifiers;
• Usernames;
• Scheduling Information;
• Publishing Information;
• Reach Analytics;
• Engagement Analytics;
• Comments on posts published through eeaso;
• Performance Metrics;
• Access Credentials;
• Authentication Tokens;
• Other information necessary to provide the Services.

Meta Platform Data is processed solely for:

• Content scheduling;
• Analytics and reporting;
• Workspace management;
• Platform functionality;
• Customer-requested features;
• Service administration;
• Security;
• Customer support.

Comments on posts published through eeaso may be analysed using artificial intelligence (Google Gemini) to identify customer questions, feedback, and enquiries for the agency. This analysis is used only to provide this feature to the connected account.

eeaso does not sell Meta Platform Data.

Users may revoke Meta permissions through Meta account settings at any time.

The Company may process information for:

• Account creation and administration;
• User authentication;
• Service delivery;
• Workspace management;
• Analytics and reporting;
• Scheduling functionality;
• Customer support;
• Platform administration;
• Service improvement;
• Security monitoring;
• Fraud prevention;
• Compliance with legal obligations;
• Enforcement of contractual rights.

The Company shall not process Personal Data for purposes materially inconsistent with this Privacy Policy except where required or permitted by law.

Certain features of eeaso may utilize artificial intelligence technologies supplied by the Company and authorized third-party providers.

AI functionality may be used for:

• Productivity assistance;
• Content analysis;
• Workflow assistance;
• Recommendations;
• Reporting enhancements;
• Operational automation.

Customer Data remains the property of the Customer.

The Company does not intentionally use Customer Data to train publicly available artificial intelligence models without appropriate authorization.

AI-generated outputs may contain inaccuracies and should be reviewed by users before reliance.

The Company may use:

• Cookies;
• Session Storage;
• Local Storage;
• Authentication Tokens;
• Analytics Technologies;
• Security Technologies.

Such technologies may be used for authentication, security, performance monitoring, user preferences, service optimization, and operational functionality.

Users may manage cookie preferences through browser settings. See our Cookie Policy for further detail.

The Company does not sell Personal Data.

Information may be disclosed only:

• To authorized service providers;
• To cloud infrastructure providers;
• To analytics providers;
• To authentication providers;
• To artificial intelligence providers where functionality requires;
• To payment processors;
• To regulators, courts, and law enforcement authorities where legally required;
• In connection with mergers, acquisitions, restructuring, financing transactions, or sale of business assets.

All authorized recipients are required to maintain appropriate confidentiality and security measures.

The Company may engage trusted third-party service providers including:

• Amazon Web Services (AWS) — hosting, storage, infrastructure, database, caching, and background processing services.
• Cloudinary — media management and storage.
• Meta Platforms, Inc. — Meta platform integrations and API functionality.
• Google LLC — authentication services, and artificial intelligence services (Google Gemini) as our primary AI provider.
• OpenAI, LLC — artificial intelligence services, used as a backup AI provider.
• SMTP service providers — transactional communications and notifications.

The Company may modify or replace sub-processors where reasonably necessary to provide the Services.

The Platform may be used by individuals and organizations located in India and other jurisdictions.

Information may be processed by authorized service providers located outside India where necessary to provide the Services.

By using the Services, users acknowledge and consent to such processing to the extent permitted by applicable law.

The Company implements commercially reasonable technical, organizational, and administrative safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Security measures may include:

• Access controls;
• Authentication mechanisms;
• Password hashing;
• Secure communications;
• Monitoring and logging;
• Infrastructure security controls;
• Incident response procedures.

While reasonable safeguards are maintained, no system can be guaranteed to be completely secure.

The Company shall retain Personal Data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, prevent fraud, maintain security, and enforce contractual rights.

Unless otherwise required by law:

• Account Information may be retained for up to three (3) years following account closure.
• Customer support records may be retained for up to three (3) years.
• Analytics, operational records, audit logs, and integration-related information may be retained for up to three (3) years.
• Security records may be retained for up to three (3) years.

Upon expiration of applicable retention periods, information may be deleted, anonymized, or aggregated in accordance with operational and legal requirements.

Users may request deletion of information associated with their account at any time.

Deletion requests may be submitted to: elantra@elantratechnologies.co.in.

Valid requests are generally processed within thirty (30) days, subject to legal, security, contractual, and regulatory requirements.

Additional information regarding deletion requests may be found at: https://eeaso.com/data-deletion.

Subject to applicable law, users may request:

• Access to Personal Data;
• Correction of inaccurate information;
• Deletion of Personal Data;
• Withdrawal of consent;
• Account closure;
• Grievance redressal.

Requests may be submitted using the contact information provided below.

The Services are intended for individuals who are at least thirteen (13) years of age.

The Company does not knowingly collect Personal Data from children under thirteen (13) years of age in violation of applicable law.

If the Company becomes aware that information has been collected from a child below the applicable age threshold, the Company may take reasonable steps to remove such information.

Users may submit privacy-related concerns, complaints, or requests to:

Privacy & Grievance Contact, ELANTRA TECHNOLOGIES PRIVATE LIMITED — Email: elantra@elantratechnologies.co.in.

The Company shall take reasonable steps to address requests within applicable legal timelines.

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Any dispute arising out of or relating to this Privacy Policy shall first be attempted to be resolved through good-faith negotiations.

If unresolved within thirty (30) days, the dispute shall be referred to arbitration under the Arbitration and Conciliation Act, 1996.

The seat and venue of arbitration shall be Bengaluru, Karnataka, India. The arbitration proceedings shall be conducted in English.

Subject to the foregoing arbitration provisions, courts located in Bengaluru, Karnataka shall have exclusive jurisdiction over matters not capable of arbitration.

The Company reserves the right to amend, modify, replace, update, or revise this Privacy Policy at any time.

Updated versions shall become effective upon publication on the Platform unless otherwise required by law.

Continued use of the Platform following publication constitutes acceptance of the revised Privacy Policy.

eeaso, operated by ELANTRA TECHNOLOGIES PRIVATE LIMITED (CIN: U62012KA2026PTC218933).

Registered Office: Girija Nivasa, Valmiki Nagar, Challakere, Chitradurga – 577522, Karnataka, India.

Email: elantra@elantratechnologies.co.in. Website: www.eeaso.com.