This Privacy Policy explains how Ektasi Technology Private Limited (the "Data Fiduciary"/"Controller") collects, uses, and protects personal data when you use CoreLayerEngine. We are committed to the India Digital Personal Data Protection Act, 2023 (DPDP), the EU/UK GDPR, and other applicable laws.
To provide and secure the Service, generate content you request, process payments, provide support, comply with law, and improve the product. Our legal bases are your consent, performance of our contract, and our legitimate interests (where permitted); under DPDP, processing is primarily consent‑based.
We do not sell your personal data. We share data with vetted sub‑processors who help us run the Service — see our Sub‑processor list. We may disclose data where required by law.
Where data is transferred across borders, we use appropriate safeguards (such as Standard Contractual Clauses) and process in accordance with applicable law.
We retain personal data while your account is active and as needed to provide the Service, then delete or anonymise it, subject to legal retention obligations. You can configure retention and erase customer records in‑app.
We use encryption in transit (TLS/HSTS), hashed passwords (scrypt), access controls, audit logging, upload validation, and rate limiting. No system is perfectly secure, but we work to protect your data.
You may access, correct, erase, or port your personal data, and withdraw consent, subject to law. Use the in‑app Privacy & data tools, or email us. You may also lodge a complaint with the Data Protection Board of India or your local authority.
As required under the DPDP Act, our Grievance Officer can be reached at [email protected], Ektasi Technology Private Limited, Varanasi, Uttar Pradesh, India. We aim to respond within the timelines prescribed by law.
The Service is not directed to individuals under 18, and we do not knowingly collect their data.
We may update this Policy; material changes will be notified. Contact [email protected].