Your data, handled with care.

Entrifie is operated by ENTRIFIE TECHNOLOGIES LLP, a limited liability partnership incorporated in India under the Limited Liability Partnership Act 2008. For the purposes of the Digital Personal Data Protection Act 2023, we are the Data Fiduciary for the personal data described in this policy.

Our full registered-office address as recorded with the Registrar of Companies is available on the public MCA register at mca.gov.in against LLPIN ADA-8634.

In this policy, “we”, “us” and “our” mean ENTRIFIE TECHNOLOGIES LLP. “You” means the person visiting this website.

This policy covers this website – what happens when you browse our pages, join our waiting list, or send us a message through our contact form.

It does notcover the Entrifie product. Entrifie is not open for new accounts, and no customer organisation is using it. When we begin serving customers, the personal data a customer organisation puts into its account will be governed by a separate written agreement with that organisation, together with a product privacy notice. In that arrangement the customer organisation will generally be the Data Fiduciary for its employees’, visitors’ and contractors’ data and we will act as its Data Processor – while remaining a Data Fiduciary in our own right for things like account administration, billing contacts and security records.

We collect only what you give us. We do not buy personal data, and we do not track you across other websites.

If you join the waiting list

We will use your email address for that one purpose only. We will not add you to a newsletter, sell it, or give it to anyone else for marketing.

If you use the contact form

Automatically, when you visit

We do not use advertising cookies, and we do not use analytics that build a profile of you. Our cookie banner lets you decline anything that is not strictly necessary.

Automated decisions. We do not make any decision about you by automated means that produces a legal or similarly significant effect.

We process the personal data you submit through our forms on the basis of your consent, given by a clear affirmative action when you submit the form. Before you submit, the form itself tells you what we will collect, what we will use it for, and how long we will keep it.

We record what you agreed to. When you give consent we store the exact wording you were shown and the language you were shown it in, so that if you ever ask, we can tell you precisely what you agreed to and when.

You may withdraw your consent at any time, and withdrawing is as easy as giving: send one email to support@entrifie.com saying so. You need not give a reason, and it costs you nothing.

On withdrawal we will erase your personal data unless retention is required or permitted by law or is otherwise necessary for a lawful purpose – for example, where we must keep a record to comply with a statutory obligation or to establish or defend a legal claim. We will confirm to you what action we have taken and, if anything is retained, why.

If you choose not to give consent, you simply do not use that form. Nothing else on this site is affected.

Where we process a pseudonymised IP identifier to prevent abuse of our own systems, we rely on the ground of legitimate use permitted for maintaining the security and integrity of our service.

The personal data you submit through this website is stored in our database in Google Cloud’s Mumbai region (asia-south1), and our backups of it are held in the same region.

Some of the operational systems that support the website handle data outside India, and we cannot restrict them to India:

• Authentication records are held by Google in a service that has no region setting.
• System logs are held by Google globally, under a retention period we cannot shorten.
• Outbound email delivery and server error diagnostics are handled by providers in the United States – see section 6.

We state this precisely rather than rounding it up into a blanket claim of Indian residency, which would not be true.

Separately, the Entrifie product stores uploaded files – photographs and documents – in Google Cloud’s Asia multi-region while we complete a move of those files to Mumbai. That storage is not used by this website, and it is described here only so that our position is stated in one place rather than implied.

We use a small number of service providers who process personal data on our behalf, under written terms that restrict them to the purposes we set. We do not sell your personal data, and we do not share it with anyone for their own purposes.

The current list of these providers, what each one receives and where each one processes it, is published at /legal/sub-processors. That page is generated from our own configuration rather than maintained by hand, so it cannot drift out of date with what we actually use. We keep one list, not several.

Two things worth stating here because people ask:

• Outbound email. When we send you an email, our email delivery provider receives your address, your name and the content of that message, and processes it in the United States.
• Error diagnostics. Our error-reporting provider receives diagnostics from our server functions only – a stack trace, the name of the operation that failed, and a small sample of performance traces – processed in the United States. Email addresses, phone numbers and IP addresses are removed before anything is sent, and your browser sends nothing to it.

We may disclose personal data where we are legally required to – for example under a valid order of a court or of a government authority with jurisdiction over us. Where we are permitted to tell you that we have done so, we will.

Under the Digital Personal Data Protection Act 2023 you have the right to:

• Access a summary of the personal data of yours we are processing, and what we are doing with it
• Correct, complete or update it if it is wrong, incomplete or out of date
• Erase it, where the purpose you gave it for is no longer being served
• Withdraw your consent at any time, as described in section 4
• Nominate another person to exercise your rights on your behalf in the event of your death or incapacity
• Have your grievance redressed by us

How to make a request. Email support@entrifie.com with the word request in the subject line, telling us what you want and giving us enough detail to find your data – normally the email address you used. You may also use the form at /privacy/dsr.

How quickly we respond. These are our own service commitments, not statutory periods: we aim to acknowledge your request within 7 days and to complete it within 30 days. Where applicable law requires us to act sooner, or sets a different period, that period prevails over the commitments in this section. If a request is complex and we need longer than 30 days, we will tell you before that point, explain why, and give you a date.

If you are unhappy with how we have handled your personal data, write to support@entrifie.com with the word grievance in the subject line. This mailbox is monitored, and a partner of the LLP is responsible for answering it.

We aim to acknowledge your grievance within 7 days and to give you a substantive response within 30 days. As in section 7, these are our own service commitments; where applicable law sets a different period for responding to a grievance, that period prevails.

Please raise your grievance with us first. Under the Act you are expected to exhaust the redress we offer before approaching the Data Protection Board of India. If we do not resolve it to your satisfaction, you are then free to complain to the Board.

If a personal data breach affects your data, we will inform you without delay and notify the Data Protection Board of India within the period and in the form the law requires.

Our notification to you will describe, in plain language, what happened, what data was affected, what we have done about it, what you can do to protect yourself, and how to reach us with questions.

We protect personal data with access controls, encryption in transit, server-side validation of everything submitted to us, rate limiting on our public endpoints, and audit logging. No system is perfectly secure, and we do not claim ours is.

Entrifie is a business product and this website is intended for adults acting in the course of a business. We do not knowingly collect personal data from anyone under 18 through this website, and we do not direct any advertising at children. If you believe a child has given us personal data through this site, tell us and we will erase it.

This policy is published in English. If you would prefer it in Hindi or another language specified in the Eighth Schedule to the Constitution of India, write to support@entrifie.com and we will provide it.

• Terms of Use
• Refund and Cancellation Policy
• Sub-processors
• Data Processing Agreement – the terms that will apply to a customer organisation when Entrifie opens for accounts
• Data Protection Impact Assessment
• Standard Contractual Clauses

If we change this policy we will update the date at the top. Where a change materially affects how we use personal data you have already given us, we will tell you before it takes effect and, where the law requires, ask for your consent again.

Our full registered-office address as recorded with the Registrar of Companies is available on the public MCA register at mca.gov.in against LLPIN ADA-8634.