Privacy Policy

Effective date: 23 September 2026 · Last updated: 23 September 2026

1. Who we are

This website and related online services are operated by:

EXITOSYS AI TECHNOLOGIES PRIVATE LIMITED
B-5, Ujwal Park, Narhe Road, Vadgaon Budruk,
Pune, Maharashtra 411041, India
GSTIN: 27AAJCE4294N1ZY
WhatsApp / mobile: +91 92702 87994
Website: https://exitosys.com/

2. Scope

This policy applies to personal data processed when you:

• Browse or submit forms on exitosys.com (including contact and lead forms)
• Create or use a customer account (register / login, dashboard, tickets, invoices)
• Purchase or enquire about our services (software development, mobile and web applications, website design & redesign, API integration, GIS, ERP, AMC / maintenance, cloud deployment, cybersecurity implementation, and related consulting)
• Enquire about or license our products / solutions (including AI HIMS, Real Estate ERP / CRM, Education ERP, white-label / partner offerings, and industry solutions)
• Pay online via Razorpay or receive GST invoices / billing communications

Enterprise delivery contracts, NDAs, government tender documents, and product-specific agreements may add further terms for project data. Where those conflict with this policy for a signed engagement, the signed documents prevail for that engagement.

3. What we collect

3.1 Information you provide

• Identity & contact: name, email, phone / WhatsApp, company name, role
• Enquiry details: industry, project type, budget range, timeline, message content
• Customer account: login credentials (stored hashed), profile details
• Billing / GST: billing name, address, GSTIN, place of supply, invoice history
• Support: ticket subject, category, priority, message threads and attachments you upload
• Purchase context: selected service / plan, amounts, payment status references

3.2 Information collected automatically

• Technical logs such as IP address, browser type, device / OS hints, approximate location derived from IP, referring URL, pages viewed, and timestamps
• Cookie or local-storage values used for session, security (for example CSRF), theme preference, and similar site functions
• If analytics tools (for example Google Analytics) are enabled on the site, aggregated usage metrics as configured by those tools

3.3 Payment processors

Card / UPI / net-banking details are collected and processed by Razorpay (or another payment gateway we may configure). We do not store full card numbers on EXITOSYS servers. We may store order IDs, payment IDs, amounts, currency, and status returned by the gateway for reconciliation, invoices, and support.

4. How we use data

• Respond to enquiries and propose suitable services, products, or packages
• Create and operate customer accounts, plans, tickets, and invoices
• Process payments, prevent fraud, and issue GST-compliant invoices
• Deliver contracted software, websites, integrations, AMC, cloud, and security work
• Improve our website, offerings, and support quality
• Comply with Indian law (including tax, accounting, and lawful requests)
• Send transactional messages (order / payment / ticket updates). Marketing messages, if any, are sent only where permitted and you can opt out

5. Payments & billing

Online checkout for published plans (including Website Design packages and other service plans) uses Razorpay. Payment confirmation, failure reasons, and refunds follow the gateway’s rules plus any written commercial terms for your order. GST invoices may show CGST/SGST or IGST based on place of supply and registration details you provide. Please keep your GST / billing profile accurate in the customer console.

6. Services, products & project data

When we build or support systems for you (custom software, mobile / web apps, ERP, GIS, API integrations, healthcare / real-estate / education platforms, website design, white-label deployments, AMC, cloud, or cybersecurity work), we may process business data you supply (credentials to staging systems, content, user lists, logs, or configuration). We use that data only to deliver the engagement, protect the systems we operate for you, and meet legal duties. Production credentials and confidential project materials are handled under need-to-know access and any NDA / MSA in force.

We do not sell personal data. We do not use your project content to publicly market case studies without permission.

7. Sharing

We may share personal data with:

• Processors who help us run the business (hosting / cloud, email, analytics, payment gateway, SMS / WhatsApp tooling), under appropriate controls
• Professional advisers (legal, accounting) where needed
• Authorities when required by law or to protect rights, safety, and security
• Successors in a merger, acquisition, or restructuring, with notice where required

We do not sell personal information to third-party advertisers.

8. Retention

• Enquiry / lead / contact records: kept while useful for follow-up and as needed for legitimate business records
• Customer accounts, purchases, tickets, and invoices: retained for the life of the account and for statutory tax / accounting periods in India
• Server and security logs: retained for a limited operational period unless needed for investigations

You may request deletion of account data subject to legal retention requirements (for example invoices already issued).

9. Security

We use reasonable technical and organisational measures (access control, HTTPS, hashed passwords, environment separation, and monitoring practices appropriate to our size). No method of transmission or storage is perfectly secure; please use strong unique passwords for the customer portal and notify us promptly of suspected unauthorised access.

10. Your choices & rights

Subject to applicable Indian law, you may request access, correction, or deletion of personal data we hold about you, or raise a privacy concern, by contacting us using the details below. We may need to verify your identity before acting on a request.

11. Cookies & similar technologies

We use essential cookies / storage for login sessions, CSRF protection, and preferences (for example light / dark theme). Analytics cookies, if enabled, help us understand aggregate traffic. You can control cookies through your browser settings; disabling essential cookies may break login or checkout.

12. Children

Our services are directed to businesses and professionals. We do not knowingly collect personal data from children under 18 for marketing or account registration.

13. Changes

We may update this policy from time to time. The “Last updated” date above will change when we do. Continued use of the site after an update means you accept the revised policy, except where consent is required by law.

14. Contact

For privacy questions or requests:

• Contact form: exitosys.com/contact
• WhatsApp: +91 92702 87994
• Postal: B-5, Ujwal Park, Narhe Road, Vadgaon Budruk, Pune, Maharashtra 411041