Privacy Policy

Woltbot Pvt. Ltd. ("Woltbot", "we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our platform, website, and any of our AI-powered products and services (collectively, "Services"). This Privacy Policy is published in accordance with Rule 3(1) of the Information Technology (Intermediaries Guidelines) Rules, 2011 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under the Information Technology Act, 2000 of India. By accessing or using our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services immediately.

We collect the following types of information: A. Information You Provide Directly — Account information: name, email address, phone number, company name, designation — Billing information: payment details processed securely through our payment partners (we do not store raw card data) — Content and data you upload or create through our products (invoices, contacts, projects, campaigns, etc.) — Communications: messages, support tickets, or feedback you send us B. Information Collected Automatically — Device and browser information: IP address, browser type, operating system, device identifiers — Usage data: pages visited, features used, time spent, clicks, and interactions on the platform — Log data: server logs, error reports, and activity timestamps — Cookies and similar tracking technologies (see Section 7) C. Information from Third Parties — OAuth data when you sign in using Google or other third-party providers — Payment verification data from payment processors — Analytics data from tools we use to understand platform usage

We use the information we collect for the following purposes: — To provide, operate, maintain, and improve our Services — To create and manage your account and authenticate your identity — To process payments and manage subscriptions and billing — To send transactional communications such as invoices, receipts, and account notifications — To provide customer support and respond to your inquiries — To send product updates, feature announcements, and marketing communications (you may opt out at any time) — To detect, investigate, and prevent fraudulent transactions, abuse, or other illegal activities — To comply with legal obligations under applicable Indian law — To analyze usage trends and improve user experience — To enforce our Terms of Use and other legal agreements

Under the IT (SPDI) Rules, 2011, certain categories of information are classified as Sensitive Personal Data or Information. These include passwords, financial information (bank account details, card information), health data, and biometric data. We collect and process the following SPDI: — Passwords: stored in encrypted form using industry-standard hashing. We never store plain-text passwords. — Financial information: collected only to the extent necessary for payment processing, handled through PCI-DSS compliant payment gateways. We do not store raw payment card details. We collect SPDI only with your explicit consent, use it only for the stated purpose, and do not share it with third parties except as required by law or as necessary to provide the Service.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances: A. Service Providers We engage trusted third-party service providers to assist in operating our Services, including cloud hosting, payment processing, email delivery, customer support tools, and analytics. These providers are contractually bound to handle data securely and only for the purposes we specify. B. Business Transfers In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. C. Legal Requirements We may disclose your information if required to do so by law, court order, or government authority, including under the IT Act, 2000 or any other applicable Indian law or regulation. D. Protection of Rights We may disclose information to protect the rights, property, or safety of Woltbot, our users, or the public, in connection with fraud prevention, security, or legal proceedings.

All data collected through the Woltbot platform is stored on secure servers hosted in India. We implement the following security measures: — 256-bit SSL/TLS encryption for all data in transit — AES-256 encryption for sensitive data at rest — Role-based access controls limiting employee access to personal data — Regular security audits and vulnerability assessments — Secure backup systems with disaster recovery protocols While we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you as required by applicable law.

We use cookies and similar technologies (web beacons, pixels, local storage) to operate and improve our Services. Cookies are small text files stored on your device by your browser. We use the following types of cookies: — Essential Cookies: Required for the platform to function. These cannot be disabled. — Preference Cookies: Remember your settings and preferences across sessions. — Analytics Cookies: Help us understand how users interact with our platform. — Marketing Cookies: Used to deliver relevant content and track the effectiveness of communications. You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Services. For more details, see our Cookie Policy.

We retain your personal information for as long as your account is active or as needed to provide you with our Services. Specifically: — Account data is retained for the duration of your subscription and for up to 2 years after account termination, unless you request earlier deletion. — Transaction and billing records are retained for 7 years as required under Indian financial and tax laws (GST Act, Income Tax Act). — Support and communication records are retained for 3 years. — Usage logs are retained for 12 months. After the applicable retention period, your data will be securely deleted or anonymized.

You have the following rights with respect to your personal information: — Right to Access: You may request a copy of the personal data we hold about you. — Right to Correction: You may update or correct inaccurate personal information through your account settings or by contacting us. — Right to Deletion: You may request deletion of your personal data, subject to our legal retention obligations. — Right to Data Portability: You may request an export of your data in a machine-readable format. — Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. — Right to Opt Out of Marketing: You may unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting support@woltbot.com. To exercise any of these rights, please contact us at privacy@woltbot.com. We will respond within 30 days.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@woltbot.com and we will delete such information promptly.

Our platform may contain links to third-party websites or integrate with third-party tools and services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before sharing any personal information with them.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or through a prominent notice on our platform at least 15 days before the new policy takes effect. Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

In accordance with the Information Technology Act, 2000 and the IT (Intermediaries Guidelines) Rules, 2011, Woltbot Pvt. Ltd. has appointed a Grievance Officer. If you have any complaints or concerns regarding the processing of your personal data, you may contact our Grievance Officer at: Grievance Officer — Woltbot Pvt. Ltd. Email: grievance@woltbot.com Response Time: We will acknowledge your complaint within 24 hours and resolve it within 30 days.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: Woltbot Pvt. Ltd. Email: privacy@woltbot.com Support: support@woltbot.com We are committed to resolving any privacy-related concerns promptly and transparently.