PRIVACY POLICY

1. Introduction

Anethix Labs Private Limited ("Anethix Labs," "we," "us," or "our") is a technology company dedicated to designing, building, and operating digital products, software solutions, SaaS platforms, applications, websites, APIs, and related technology services (collectively, our "Products and Services"). Trust is central to how we build and operate our Products and Services, and this Privacy Policy sets out, in clear terms, how we collect, use, process, share, store, and safeguard personal data in connection with our Products and Services.

We take the privacy, confidentiality, and security of personal data seriously, and we design our internal practices, systems, and processes with the protection of user information as a foundational priority. This Privacy Policy is drafted in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, and, to the extent applicable, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Scope of the Privacy Policy

This Privacy Policy applies across our products, platforms, applications, websites, software, SaaS solutions, APIs, and digital services, wherever operated or provided by Anethix Labs, unless a specific product or service is governed by a separate privacy policy or notice. Where a conflict arises between this Privacy Policy and a product-specific policy, the product-specific policy shall govern to the extent of the conflict.

This Privacy Policy applies to individuals who visit our websites, use our applications or platforms, register for accounts, communicate with us, or otherwise interact with our Products and Services ("users," "you," or "your").

3. Information About Anethix Labs

Anethix Labs Private Limited is a private limited company incorporated in India, with its headquarters located at Guwahati, Assam 781026, India. For any queries regarding this Privacy Policy or our data protection practices, you may contact us at team@anethixlabs.com.

4. Information We Collect

We collect only the categories of personal data that are reasonably necessary to deliver, secure, and improve our Products and Services. This includes information you provide to us directly, information collected automatically through your use of our Products and Services, and information we may receive from trusted third parties, as described below.

5. Information Provided Directly by Users

We may collect information that you voluntarily and knowingly provide to us, including but not limited to:

• Name, email address, phone number, and other contact details
• Account credentials and profile information
• Business or organisational information, where relevant
• Communications, feedback, support requests, and correspondence
• Information submitted through forms, surveys, or registration processes
• Any other information you choose to share with us

6. Automatically Collected Information

When you interact with our products, platforms, applications, or websites, we may automatically collect certain information to help us operate, secure, and continually improve our Products and Services, including:

• Usage data, such as pages visited, features used, and time spent
• Log data, including access times, error logs, and referring URLs
• Approximate location data derived from IP address, where applicable
• Interaction data related to how you use our software and services

7. Device and Technical Information

We may collect technical information about the devices used to access our Products and Services, including device type, operating system, browser type and version, unique device identifiers, network information, and similar technical data. This information supports the secure functioning, performance monitoring, and ongoing enhancement of our Products and Services.

8. Cookies and Similar Technologies

We may use cookies, web beacons, local storage, and similar tracking technologies to operate our websites and platforms reliably, remember your preferences, understand usage patterns, and enhance the security and performance of our Products and Services. Further detail regarding our use of cookies is set out in Section 30 below.

9. How We Use Personal Data

We use personal data responsibly and for clearly defined purposes, including:

• Providing, operating, maintaining, and improving our Products and Services
• Creating, managing, and securing user accounts
• Responding to inquiries, requests, and support needs
• Personalising user experience across our products and platforms
• Communicating with users about updates, features, or service-related matters
• Safeguarding our Products and Services, including detecting, preventing, and investigating fraud, abuse, and security incidents
• Complying with applicable legal and regulatory obligations
• Conducting analytics to understand, secure, and improve our Products and Services

10. Lawful Purposes and Legal Basis for Processing

We process personal data only on lawful grounds, including where you have provided consent, where processing is necessary to perform a contract with you, where processing is necessary to comply with a legal obligation, and for other legitimate purposes permitted under applicable law, including the Digital Personal Data Protection Act, 2023.

11. Consent

Where consent is the basis for processing, we will seek your consent through clear, informed, and affirmative action before collecting or processing your personal data, except where processing is permitted without consent under applicable law (for example, for certain legitimate uses recognised under the Digital Personal Data Protection Act, 2023). You may withdraw consent at any time as described in Section 24.

12. Communications and Marketing

We may send you service-related communications, important updates, and, where permitted, promotional or marketing communications relating to our products and services. You may opt out of marketing communications at any time by following the unsubscribe instructions provided or by contacting us directly at team@anethixlabs.com. Service-related and transactional communications necessary for the operation, security, or administration of our Products and Services may continue notwithstanding such opt-out.

13. Data Sharing and Disclosure

We do not sell personal data, and we disclose personal data only where reasonably necessary and appropriate safeguards are in place. We may share personal data in the following circumstances:

• With carefully selected third-party service providers who assist us in operating and securing our Products and Services
• With affiliates and group entities, where applicable
• To comply with legal obligations or valid governmental or regulatory requests
• In connection with a corporate transaction, as described in Section 19
• With your consent or at your direction

14. Third-Party Service Providers

We may engage reputable third-party service providers to perform functions on our behalf, such as hosting, infrastructure, analytics, communications, customer support, and security services. We take reasonable steps to work with service providers who maintain appropriate security and confidentiality standards, and such providers are permitted to access personal data only to the extent necessary to perform their designated functions and are contractually bound to protect such data and use it solely for the purposes for which it was shared.

15. Cloud, Hosting, Infrastructure and Technology Providers

Our products, platforms, and services may be hosted on, or supported by, established third-party cloud, hosting, and infrastructure providers that maintain their own robust security frameworks. Such providers process data on our behalf under appropriate contractual safeguards, and we take reasonable care in selecting infrastructure partners that align with our commitment to data protection.

16. Payment and Transaction Service Providers, Where Applicable

Where our Products and Services involve payments or transactions, such payments may be processed by established third-party payment service providers that maintain their own industry-standard security measures. We do not store complete payment card details on our own systems; payment processing is handled in accordance with the applicable payment provider's security standards and protocols.

17. Analytics and Security Providers

We may use trusted third-party analytics and security tools to monitor system performance, detect and prevent fraud, misuse, or unauthorised activity, and continually strengthen the security posture of our Products and Services. These providers may process limited technical and usage data on our behalf, strictly for these purposes.

18. Government, Regulatory and Law-Enforcement Requests

We may disclose personal data where required to do so by law, regulation, legal process, or valid governmental or regulatory request, or where we believe in good faith that disclosure is reasonably necessary to protect our rights, the safety and security of our users, or the public. Any such disclosure is handled with appropriate care and limited to what is legally required.

19. Corporate Transactions, Mergers, Acquisitions and Restructuring

In the event of a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, personal data may be transferred as part of that transaction. We will take reasonable steps to ensure that any successor entity continues to honour the commitments set out in this Privacy Policy, to the extent required under applicable law.

20. Data Security

The security of personal data is a core priority for Anethix Labs, and we take this responsibility seriously across every product, platform, application, and service we operate. We implement and maintain robust technical, organisational, and administrative safeguards that are designed to protect personal data against unauthorised access, use, alteration, disclosure, loss, or destruction.

These safeguards include, where appropriate and applicable, measures such as access controls and role-based permissions, encryption of data in transit and at rest, secure infrastructure and network architecture, ongoing monitoring for suspicious or unauthorised activity, regular review and hardening of our systems and processes, and internal policies governing the confidential handling of personal data by authorised personnel. We continually assess and enhance our security practices in line with evolving industry standards, technological developments, and applicable legal requirements.

While we take great care to protect personal data and are committed to maintaining strong, reasonable, and industry-appropriate security measures, no system of data transmission or storage can be guaranteed to be entirely free of risk. We encourage users to also take reasonable precautions to protect their own account credentials and personal information.

21. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. Once these purposes have been fulfilled, personal data is securely deleted or anonymised in accordance with applicable law and our internal data-retention practices.

22. Data Deletion

You may request deletion of your personal data at any time, subject to applicable legal and contractual retention requirements. We will process such requests in a timely and secure manner. To request deletion, please contact us at team@anethixlabs.com.

23. User Rights

Subject to applicable law, you may have rights to access, correct, update, or request deletion of your personal data, to withdraw consent, to seek grievance redressal, and to nominate another individual to exercise your rights in the event of death or incapacity, in accordance with the Digital Personal Data Protection Act, 2023. We are committed to honouring these rights promptly and transparently.

24. Withdrawal of Consent

Where processing is based on consent, you may withdraw such consent at any time by contacting us at team@anethixlabs.com. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal and may affect our ability to continue providing certain products or services to you.

25. Correction and Updating of Information

You may request correction or updating of inaccurate or incomplete personal data held by us by contacting us at team@anethixlabs.com. We are committed to keeping the personal data we hold accurate and current.

26. Grievance Redressal

We are committed to addressing any concerns you may have regarding the processing of your personal data promptly and transparently. If you have any grievance, please contact us at team@anethixlabs.com. Details of our designated Grievance Officer, where required under applicable law, are set out below:

27. Children's Privacy

Our Products and Services are not directed to children, and we do not knowingly collect personal data from children except as permitted under applicable law and with appropriate verifiable parental or guardian consent, where required. If we become aware that we have collected personal data from a child without appropriate consent, we will take prompt steps to securely delete such data.

28. International Data Transfers

Personal data may be stored or processed in locations outside India, including through third-party service providers that maintain appropriate security and confidentiality safeguards. Where such transfers occur, we take reasonable steps to ensure that personal data continues to be protected to a standard consistent with this Privacy Policy and applicable law.

29. Third-Party Websites and Services

Our products, platforms, and websites may contain links to third-party websites or services. We are not responsible for the privacy or security practices or content of such third parties, and we encourage users to review the privacy policies of any third-party service they access.

30. Cookies

We use cookies and similar technologies to enable core functionality, remember user preferences, support security features, analyse usage, and improve our Products and Services. You can manage or disable cookies through your browser settings; however, disabling certain cookies may affect the functionality, performance, or security features of our products and platforms.

31. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. The updated version will be indicated by an updated "Last Updated" date, and we encourage users to review this Privacy Policy periodically. Continued use of our Products and Services after such changes constitutes acceptance of the revised Privacy Policy.

32. Contact Information

For questions, requests, or concerns regarding this Privacy Policy or our data protection and security practices, please contact us at:

33. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, and any disputes arising in connection with this Privacy Policy shall be subject to the jurisdiction of the courts at Guwahati, Assam, India.