Privacy Policy

eeaso ("Platform", "Service", "Application", or "Software") is a Software-as-a-Service (SaaS) platform owned and operated by ELANTRA TECHNOLOGIES PRIVATE LIMITED ("Company", "Elantra", "we", "our", or "us"), a company incorporated under the Companies Act, 2013, bearing Corporate Identification Number U62012KA2026PTC218933 and having its registered office at Girija Nivasa, Valmiki Nagar, Challakere, Chitradurga – 577522, Karnataka, India.

This Privacy Policy describes how the Company collects, receives, stores, uses, processes, transfers, retains, protects, and discloses Personal Data and other information in connection with the use of eeaso and related services.

The Company is committed to protecting user privacy and handling information in a transparent, secure, and lawful manner.

By accessing, registering for, connecting third-party services to, subscribing to, or otherwise using eeaso, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

This Privacy Policy applies to:

• Visitors to the Website;
• Registered Users;
• Free Plan Users;
• Trial Users;
• Paid Subscribers;
• Agencies;
• Business Customers;
• Enterprise Customers;
• Workspace Members;
• Individuals interacting with services integrated into eeaso.

This Privacy Policy applies to information collected through:

• www.eeaso.com
• Web applications;
• APIs;
• Dashboards;
• Third-party integrations;
• Customer support communications;
• Related products and services operated by the Company.

This Privacy Policy has been prepared in accordance with:

• The Digital Personal Data Protection Act, 2023;
• The Information Technology Act, 2000;
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• Applicable governmental notifications, regulations, and directions;
• Contractual obligations applicable to authorized third-party integrations.

Where required by law, the Company shall act as a Data Fiduciary and process information in accordance with applicable legal requirements.

The Company may collect and process the following categories of information.

4.1 Account Information

• Full Name;
• Business Name;
• Agency Name;
• Organization Information;
• Email Address;
• Mobile Number;
• Account Credentials;
• Subscription Information.

4.2 Technical Information

• IP Addresses;
• Browser Information;
• Device Information;
• Operating System Information;
• Authentication Information;
• Session Information;
• Platform Usage Information;
• Security Logs.

4.3 Workspace Information

• Team Information;
• User Roles;
• Permissions;
• Workspace Configuration Data;
• Collaboration Information.

4.4 Content Information (where uploaded by users)

• Images;
• Videos;
• Documents;
• Files;
• Scheduling Data;
• Workflow Information;
• Customer-generated Content.

4.5 Integration Information

Where authorized by the user, eeaso may access information from connected services and integrations.

eeaso may integrate with services provided by Meta Platforms, Inc., including:

• Facebook Pages;
• Instagram Business Accounts;
• WhatsApp Business Accounts;
• Meta APIs;
• Other Meta-authorized services.

Where authorized by the user, eeaso may access, process, store, and display information made available through Meta APIs, including:

• Account Information;
• Page Information;
• Platform Identifiers;
• Usernames;
• Scheduling Information;
• Publishing Information;
• Reach Analytics;
• Engagement Analytics;
• Comments on posts published through eeaso;
• Performance Metrics;
• Access Credentials;
• Authentication Tokens;
• Other information necessary to provide the Services.

Meta Platform Data is processed solely for:

• Content scheduling;
• Analytics and reporting;
• Workspace management;
• Platform functionality;
• Customer-requested features;
• Service administration;
• Security;
• Customer support.

Comments on posts published through eeaso may be analysed using artificial intelligence (Google Gemini) to identify customer questions, feedback, and enquiries for the agency. This analysis is used only to provide this feature to the connected account.

eeaso does not sell Meta Platform Data.

Users may revoke Meta permissions through Meta account settings at any time.

When you choose to connect a Google account, eeaso accesses Google user data through Google APIs only with your explicit consent, and only for the products you select:

• Google Sign-In (openid, email, profile): your name, email address and profile picture, used to create and secure your eeaso account;
• Google Business Profile (business.manage): the business accounts and locations you manage, business information, local posts, reviews, review replies and performance metrics, used to show them in your workspace, to publish posts and reply to reviews when you instruct us to, and to report on performance;
• Google Analytics (analytics.readonly): read-only reports for the properties you connect, such as sessions, users and traffic sources, used to display reports and include them in analytics reports you export;
• Google Search Console (webmasters.readonly): read-only search performance data for the sites you connect, such as queries, clicks, impressions and position, used to display and report on search performance.

We request only the access needed for these features. Google user data is shown only within the agency workspace that connected it.

eeaso's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In line with the Limited Use requirements: we use Google user data only to provide and improve the user-facing features described above; we do not sell Google user data; we do not transfer it to others except as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you; we do not use it for serving advertisements, including retargeting or personalized or interest-based advertising; we do not use it to develop, improve or train generalized artificial intelligence or machine learning models; and our staff do not read Google user data unless you give consent for specific data, it is necessary for security purposes or to investigate abuse, or it is required by law.

Google OAuth tokens are stored encrypted. You can disconnect a Google account in eeaso at any time, which also revokes eeaso’s access token with Google, or revoke access directly at https://myaccount.google.com/permissions. To request deletion of your data, follow the Data Deletion Instructions.

eeaso uses YouTube API Services. By connecting YouTube in eeaso you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google handles data under the Google Privacy Policy (https://policies.google.com/privacy).

When you connect YouTube, and only with your explicit consent, eeaso may access:

• Your channel details (channel ID, name, picture, subscriber, video and view counts) and your recent videos with their titles, publish dates, privacy status and view, like and comment counts (youtube.readonly);
• YouTube Analytics reports for your channel, such as views, watch time, likes, comments and subscribers gained (yt-analytics.readonly);
• The ability to upload a video to your channel when you choose to upload one in eeaso (youtube.upload).

We use this data only to show your channel and its results in your workspace and to upload videos you choose to upload. For every upload you choose the title, the description and who can watch the video, and eeaso never changes the privacy of an existing video. The video file you upload is also kept in your eeaso media library.

eeaso stores your channel ID and name until you disconnect YouTube. Other YouTube data shown to you is held in a temporary cache for up to one hour and then fetched again from YouTube. We refresh or delete any stored YouTube data at least every 30 days. Disconnecting YouTube in eeaso deletes the stored channel details and revokes eeaso's access token with Google.

Video files you upload are kept in private storage only to publish them, and are deleted 7 days after publishing or when you delete the post. Your post details and performance data are kept as part of your account.

You can revoke eeaso's access to your YouTube data at any time in Google's security settings at https://myaccount.google.com/permissions. To ask for deletion of other data, follow the Data Deletion Instructions.

YouTube data is covered by the same Limited Use commitments as other Google user data (section 5A). eeaso does not sell it, does not use it for advertising and does not use it to train artificial intelligence models.

The Company may process information for:

• Account creation and administration;
• User authentication;
• Service delivery;
• Workspace management;
• Analytics and reporting;
• Scheduling functionality;
• Customer support;
• Platform administration;
• Service improvement;
• Security monitoring;
• Fraud prevention;
• Compliance with legal obligations;
• Enforcement of contractual rights.

The Company shall not process Personal Data for purposes materially inconsistent with this Privacy Policy except where required or permitted by law.

Certain features of eeaso may utilize artificial intelligence technologies supplied by the Company and authorized third-party providers.

AI functionality may be used for:

• Productivity assistance;
• Content analysis;
• Workflow assistance;
• Recommendations;
• Reporting enhancements;
• Operational automation.

Customer Data remains the property of the Customer.

The Company does not intentionally use Customer Data to train publicly available artificial intelligence models without appropriate authorization.

AI-generated outputs may contain inaccuracies and should be reviewed by users before reliance.

The Company may use:

• Cookies;
• Session Storage;
• Local Storage;
• Authentication Tokens;
• Analytics Technologies;
• Security Technologies.

Such technologies may be used for authentication, security, performance monitoring, user preferences, service optimization, and operational functionality.

Users may manage cookie preferences through browser settings. See our Cookie Policy for further detail.

The Company does not sell Personal Data.

Information may be disclosed only:

• To authorized service providers;
• To cloud infrastructure providers;
• To analytics providers;
• To authentication providers;
• To artificial intelligence providers where functionality requires;
• To payment processors;
• To regulators, courts, and law enforcement authorities where legally required;
• In connection with mergers, acquisitions, restructuring, financing transactions, or sale of business assets.

All authorized recipients are required to maintain appropriate confidentiality and security measures.

The Company may engage trusted third-party service providers including:

• Amazon Web Services (AWS) — hosting, storage, infrastructure, database, caching, and background processing services.
• Cloudinary — media management and storage.
• Meta Platforms, Inc. — Meta platform integrations and API functionality.
• Google LLC — authentication services, the Google APIs you choose to connect, and artificial intelligence services (Google Gemini on Vertex AI).
• Amazon SES (part of AWS) — transactional emails and notifications.

The Company may modify or replace sub-processors where reasonably necessary to provide the Services.

The Platform may be used by individuals and organizations located in India and other jurisdictions.

Information may be processed by authorized service providers located outside India where necessary to provide the Services.

By using the Services, users acknowledge and consent to such processing to the extent permitted by applicable law.

The Company implements commercially reasonable technical, organizational, and administrative safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Security measures may include:

• Access controls;
• Authentication mechanisms;
• Password hashing;
• Secure communications;
• Monitoring and logging;
• Infrastructure security controls;
• Incident response procedures.

While reasonable safeguards are maintained, no system can be guaranteed to be completely secure.

The Company shall retain Personal Data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, prevent fraud, maintain security, and enforce contractual rights.

Unless otherwise required by law:

• Account Information may be retained for up to three (3) years following account closure.
• Customer support records may be retained for up to three (3) years.
• Analytics, operational records, audit logs, and integration-related information may be retained for up to three (3) years.
• Security records may be retained for up to three (3) years.

Upon expiration of applicable retention periods, information may be deleted, anonymized, or aggregated in accordance with operational and legal requirements.

Users may request deletion of information associated with their account at any time.

Deletion requests may be submitted to: elantra@elantratechnologies.co.in.

Valid requests are generally processed within thirty (30) days, subject to legal, security, contractual, and regulatory requirements.

Additional information regarding deletion requests may be found at: https://eeaso.com/data-deletion.

Subject to applicable law, users may request:

• Access to Personal Data;
• Correction of inaccurate information;
• Deletion of Personal Data;
• Withdrawal of consent;
• Account closure;
• Grievance redressal.

Requests may be submitted using the contact information provided below.

The Services are intended for individuals who are at least thirteen (13) years of age.

The Company does not knowingly collect Personal Data from children under thirteen (13) years of age in violation of applicable law.

If the Company becomes aware that information has been collected from a child below the applicable age threshold, the Company may take reasonable steps to remove such information.

Users may submit privacy-related concerns, complaints, or requests to:

Privacy & Grievance Contact, ELANTRA TECHNOLOGIES PRIVATE LIMITED — Email: elantra@elantratechnologies.co.in.

The Company shall take reasonable steps to address requests within applicable legal timelines.

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Any dispute arising out of or relating to this Privacy Policy shall first be attempted to be resolved through good-faith negotiations.

If unresolved within thirty (30) days, the dispute shall be referred to arbitration under the Arbitration and Conciliation Act, 1996.

The seat and venue of arbitration shall be Bengaluru, Karnataka, India. The arbitration proceedings shall be conducted in English.

Subject to the foregoing arbitration provisions, courts located in Bengaluru, Karnataka shall have exclusive jurisdiction over matters not capable of arbitration.

The Company reserves the right to amend, modify, replace, update, or revise this Privacy Policy at any time.

Updated versions shall become effective upon publication on the Platform unless otherwise required by law.

Continued use of the Platform following publication constitutes acceptance of the revised Privacy Policy.

eeaso, operated by ELANTRA TECHNOLOGIES PRIVATE LIMITED (CIN: U62012KA2026PTC218933).

Registered Office: Girija Nivasa, Valmiki Nagar, Challakere, Chitradurga – 577522, Karnataka, India.

Email: elantra@elantratechnologies.co.in. Website: www.eeaso.com.