Privacy Policy

Anaptyss Inc. ("Anaptyss," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit www.anaptyss.com and our related pages, interact with our marketing, request information about our products and services, apply for a role with us, or otherwise communicate with us.

Anaptyss is a banking, financial services, and insurance (BFSI) focused provider of AI platforms and managed services, headquartered in the United States with delivery operations in India and clients across North America, EMEA, Latin America, and Asia. Because our audience is global, this policy is designed to align with applicable data protection laws, including the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Scope, and what this policy does not cover

This policy covers personal information we handle as a controller (or "data fiduciary") through our website, marketing, sales, recruitment, and business communications.

This policy does not govern personal or business data that clients submit to, or that is processed within, our products and managed services (for example ANA, CovenAce, Index AI, ALFA, Fluent, and related engagements). When we process such data on behalf of a client, we act as a processor (or "data processor"), and that processing is governed by the applicable services agreement and data processing addendum between Anaptyss and the client, not by this Privacy Policy.

2. Information we collect

Information you provide to us

• Identity and contact details such as your name, business email, phone number, company, job title, and country.
• Content of enquiries, demo or contact-form submissions, whitepaper and resource download requests, event and webinar registrations, and newsletter subscriptions.
• Recruitment information if you apply for a role, including your CV, work history, and any details you choose to share.
• Correspondence and records of your communications with us.

Information collected automatically

• Device and technical data such as IP address, browser type, operating system, and device identifiers.
• Usage data such as pages viewed, referring URLs, time on site, and interactions, collected through cookies and similar technologies.
• Approximate location derived from your IP address.

Information from third parties

• Business contact and firmographic data from marketing, analytics, and lead-intelligence providers.
• Data from social and advertising platforms (for example LinkedIn) when you engage with our content or ads.
• Referrals and information from our partners and affiliates.

3. Cookies and tracking technologies

We and our providers use cookies, tags, and similar technologies to operate the site, remember preferences, measure performance, and support marketing. You can manage non-essential cookies through our cookie banner (where available) and your browser settings. The categories we use include:

Our providers may set their own cookies subject to their privacy policies. Where required by law, we obtain consent before setting non-essential cookies.

4. How we use your information

We use personal information to:

• Respond to your enquiries and provide requested materials or demos.
• Operate, maintain, secure, and improve our website and marketing.
• Send you communications about our products, services, events, and insights where permitted (see "Marketing communications" below).
• Analyze usage and measure the effectiveness of our content and campaigns.
• Manage recruitment and evaluate candidates.
• Comply with legal, regulatory, and contractual obligations, and to establish, exercise, or defend legal claims.

Legal bases (EEA / UK)

Where GDPR applies, we rely on: your consent (for example marketing and non-essential cookies); our legitimate interests in operating and promoting our business (balanced against your rights); performance of a contract or steps taken at your request; and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

5. Marketing communications

We may send you marketing about offerings we believe are relevant to your role, where permitted by law. You can opt out at any time using the unsubscribe link in our emails or by contacting us at the address below. Opting out of marketing does not affect service or transactional communications.

6. How we share information

We do not sell your personal information for money. We may share it with:

• Affiliates and group companies of Anaptyss for the purposes described in this policy.
• Service providers and processors that support our website, hosting, analytics, marketing automation, CRM, email, and recruitment, under contracts that require them to protect your data.
• Professional advisors such as auditors, lawyers, and accountants.
• Authorities and third parties where necessary to comply with law, enforce our terms, or protect our rights, safety, or property.
• Successors in the event of a merger, acquisition, financing, or sale of assets.

Note on "sharing" and "sale" under US state laws: our use of advertising and analytics cookies may be considered a "sale" or "sharing" of personal information under certain US state privacy laws. See "Your privacy rights" for how to opt out.

7. International data transfers

Anaptyss operates in the United States and India and works with providers in multiple countries, so your information may be transferred to and processed outside your home country, including jurisdictions that may not offer the same level of protection. Where required, we put appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses (and the UK Addendum) for transfers from the EEA and UK.

8. Data retention

We keep personal information only as long as necessary for the purposes described in this policy, to comply with legal, tax, and regulatory obligations, to resolve disputes, and to enforce our agreements. Retention periods vary by data type and context [confirm standard periods with Legal]. When no longer needed, we delete or anonymize it.

9. Security

We maintain administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal information. We will not discriminate against you for exercising them.

General rights

• Access a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Opt out of marketing communications.

EEA / UK (GDPR)

You also have rights to restrict or object to processing, to data portability, and to withdraw consent. You may lodge a complaint with your local supervisory authority.

California (CCPA / CPRA)

You may request to know, access, correct, and delete your personal information, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising. You may use an authorized agent, and you have the right not to receive discriminatory treatment for exercising these rights.

India (DPDP Act)

You may access and correct your personal data, request erasure, nominate another person to exercise your rights, and seek grievance redressal. You may withdraw consent as easily as it was given, and you may escalate unresolved grievances to the Data Protection Board of India.

How to exercise your rights

Contact us using the details in "Contact us" below. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.

11. Children's privacy

Our website and offerings are intended for business users and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

12. Third-party links

Our site may link to third-party websites and services that we do not control. This policy does not apply to those sites, and we encourage you to review their privacy notices.

13. Changes to this Privacy Policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be highlighted on this page or communicated as required by law.

14. Contact us

For privacy questions or to exercise your rights, contact:

Anaptyss Inc.
221 Roswell Street, Suite 200, Alpharetta, GA 30009, USA
Email: privacy@anaptyss.com [set up, or use info@anaptyss.com]
Toll-free: +1-844-239-3580

India grievance contact (DPDP Act): [Name / title], Anaptyss, [India registered address], email [•]@anaptyss.com [confirm designated contact].