Includes Cookie Policy
Privacy Policy
How we collect, process, and protect your data. Compliant with India DPDP Act, UAE PDPL, and GDPR.
Table of Contents
- 1. Introduction
- 2. Data Controller and Processor Roles
- 3. Data We Collect
- 4. How We Use Your Data
- 5. AI Processing and Automated Decision-Making
- 6. Data Sharing
- 7. Data Security
- 8. Data Retention
- 9. Your Rights
- 10. International Data Transfers
- 11. Children's Privacy
- 12. Cookies and Tracking Technologies
- 13. Changes to This Policy
- 14. Contact and Data Protection Officer
Introduction
TechAlmas LLP, operating as emblit.ai (“we,” “us,” or “emblit”), is committed to protecting the privacy of our customers, their leads, and all individuals whose data is processed through our platform. This Privacy Policy explains how we collect, use, store, share, and protect personal data.
This policy applies to: (a) visitors to emblit.ai; (b) customers who use our platform; and (c) individuals whose data is processed by our customers through the Service (lead contacts).
Data Controller and Processor Roles
| Context | Your Role | emblit's Role |
|---|---|---|
| Processing lead data through the Service | Data Controller | Data Processor |
| Website visitors and prospective customers | — | Data Controller |
Data We Collect
3.1 -Data You Provide Directly
- Account registration: name, email, company name, WhatsApp number, team size, monthly lead volume, primary portal
- Communications: emails, support tickets, and chat messages you send us
- Payment information: processed by our third-party payment provider (we do not store card details)
3.2 -Data Processed Through the Service (Customer Data)
- Lead contact information: names, phone numbers, email addresses
- Conversation content: WhatsApp messages between your team and leads (processed by Ember™ for data extraction)
- Extracted structured data: budget, timeline, intent, location, property preferences
- LCP™ scores: Lead Closing Probability scores and associated signal data
- Meeting and calendar data: scheduled viewings, appointments, outcomes
- Agent activity data: response times, timestamps, SLA compliance
3.3 -Data Collected Automatically
- Website analytics: IP address (anonymised), browser type, device type, pages visited, referral source
- Cookies: as described in Section 12 of this policy
- Platform usage: feature usage, login timestamps, API call logs
How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide the Service (lead qualification, LCP™ scoring, AI analysis) | Customer Data, conversation content | Contract performance |
| AI conversation analysis via Ember™ | WhatsApp messages, extracted data | Contract performance |
| Calculate and update LCP™ scores | Lead signals, behavioral data | Contract performance |
| Improve AI accuracy (anonymised only) | Anonymised, aggregated patterns | Legitimate interest |
| Account management and support | Registration data, communications | Contract performance |
| Website analytics | Anonymised browsing data | Legitimate interest |
| Legal compliance and security | All data as required | Legal obligation |
AI Processing and Automated Decision-Making
- emblit uses AI (Ember™) to analyse WhatsApp conversations, extract structured data, and calculate Lead Closing Probability™ (LCP) scores.
- LCP™ scores are used to prioritise leads. No automated decisions with legal or similarly significant effects are made solely on the basis of LCP™ scores. All final decisions are made by your human team members.
- AI-drafted messages are suggestions only. All outbound communications require human approval.
- We do not use your Customer Data to train general-purpose AI models. AI processing is performed solely to deliver the Service to you.
Data Sharing
We do not sell your personal data.
We share data only with:
- Meta Platforms (WhatsApp Business API): Message delivery. Subject to Meta's privacy policy.
- Cloud infrastructure providers: Hosting and storage (encrypted).
- CRM integrations: When you configure sync (Zoho, HubSpot), data is pushed to your CRM.
- Analytics providers: Anonymised website analytics only.
- Legal requirements: When required by law, court order, or regulatory authority.
All third-party processors are bound by data processing agreements.
Data Security
- All Customer Data is tenant-isolated. No data is shared across customer accounts.
- Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
- Access is restricted to authorised personnel with audit logging.
- Regular security assessments and incident response procedures are maintained.
Data Retention
| Data Type | Retention Period |
|---|---|
| Active accounts | Duration of your account |
| Terminated accounts | Available for export for 30 days, then permanently deleted within 90 days |
| Website visitor data | Anonymised analytics retained for 26 months |
| Early access form submissions | 12 months or until the applicant becomes a customer |
| LCP™ score history | Duration of the account |
Your Rights
| Right | Description | Jurisdictions |
|---|---|---|
| Access | Request a copy of your personal data | India DPDP, UAE PDPL, GDPR |
| Correction | Request correction of inaccurate data | India DPDP, UAE PDPL, GDPR |
| Erasure | Request deletion of your data | India DPDP, UAE PDPL, GDPR |
| Portability | Receive data in a structured format | GDPR |
| Objection | Object to processing based on legitimate interest | GDPR |
| Withdraw Consent | Withdraw previously given consent | India DPDP, UAE PDPL, GDPR |
| Grievance Redressal | File a complaint with our DPO | India DPDP |
| Nominate | Nominate another person to exercise rights | India DPDP |
To exercise any of these rights, contact our Data Protection Officer at privacy@emblit.ai. We will respond within 30 days.
International Data Transfers
If you are in India, your data is processed in compliance with the DPDP Act, 2023. If you are in the UAE, in compliance with Federal Decree-Law No. 45 of 2021 (PDPL). For international transfers, we ensure appropriate safeguards including standard contractual clauses.
Children's Privacy
The Service is for business use and not intended for individuals under 18. We do not knowingly collect data from minors. Contact privacy@emblit.aiif you believe a minor's data has been submitted.
Cookies and Tracking Technologies
12.1 -What Are Cookies
Cookies are small text files stored on your device when you visit our website. They help the site remember preferences and improve your experience.
12.2 -Cookies We Use
| Cookie | Type | Duration | Purpose |
|---|---|---|---|
| session_id | Essential | Session | Maintains your login session. Required. |
| csrf_token | Essential | Session | Prevents cross-site request forgery. |
| cookie_consent | Essential | 12 months | Stores your cookie preferences. |
| _ga, _gid | Analytics | 24 mo / 24 hr | Google Analytics. Anonymised stats. |
| _fbp | Marketing | 90 days | Meta Pixel. Ad conversion tracking. |
| user_prefs | Functional | 12 months | Stores UI preferences. |
12.3 -Managing Cookies
Essential cookies cannot be disabled. Analytics and marketing cookies are only set with your consent. Manage preferences via the cookie banner on first visit, or the “Cookie Settings” link in the footer.
Changes to This Policy
Material changes will be communicated via email at least 30 days before taking effect.
Contact and Data Protection Officer
Data Protection Officer
Company
TechAlmas LLP, Ahmedabad, Gujarat, India