Privacy Policy

1. Information We Collect

Account Information: Name, email address, phone number, organisation name, designation, and other details provided during registration. Business and Compliance Data: Documents, registers, returns, certificates, employee data, and other business information you upload or create on the Platform. Payment Information: Billing details, invoices, and transaction records. We do not store full payment card details — payment processing is handled by third-party gateways. Usage Data: Log data including IP address, browser type, pages visited, time spent on the Platform, and diagnostic data used for Platform maintenance and improvement.

2. How We Use Your Information

We use the information we collect to: provide, maintain, and improve the Platform and its features; authenticate users and manage account security; send compliance deadline alerts, account notifications, and service updates; process payments and manage billing; respond to support queries; comply with applicable legal requirements; and detect and prevent fraud, security incidents, and misuse of the Platform. We do not use your business or compliance data for any purpose other than providing the services you have subscribed to.

3. Sensitive Personal Data or Information (SPDI)

To the extent that any information uploaded to the Platform qualifies as Sensitive Personal Data or Information (SPDI) as defined under the IT (SPDI) Rules, 2011 — such as financial information or health-related employee data — we handle such information with additional care and in accordance with those Rules. We collect such information only where necessary for the provision of our services and with your consent.

4. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information with: service providers who assist in operating the Platform (cloud hosting, payment gateways, email delivery), subject to appropriate confidentiality agreements; regulatory authorities where disclosure is required by law; and any successor entity in the event of a merger or acquisition, subject to the acquiring entity being bound by terms no less protective than this Policy.

5. Data Retention

We retain your account and compliance data for as long as your account is active or as required to provide services to you. Upon account termination, you may request deletion of your data. We will process such requests within a reasonable time, subject to our legal obligation to retain certain records.

6. Data Security

We implement reasonable technical and organisational security measures to protect your information from unauthorised access, disclosure, alteration, or destruction. We use AWS infrastructure with industry-standard encryption. However, no method of electronic storage is completely secure. You are responsible for maintaining the security of your login credentials.

7. Your Rights

Subject to applicable law, you may have the right to: access the personal information we hold about you; request correction of inaccurate personal information; request deletion of your personal information, subject to our legal retention obligations; and withdraw consent for processing of personal information, where consent is the basis for processing. To exercise any of these rights, contact us at support@iztty.com.

8. Cookies

The Platform uses cookies and similar tracking technologies to maintain session information, analyse usage, and improve user experience. You may disable cookies through your browser settings, but doing so may affect the functionality of the Platform.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and applicable rules: Grievance Officer, IZTTY · Email: support@iztty.com · Address: Futurex Management Solutions Limited, C/56/35, C Block, Phase 2, Sector 62, Noida – 201309. Grievances will be addressed within one month of receipt.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on the Platform with a revised Last Updated date. Continued use of the Platform after such changes constitutes acceptance of the revised Policy.