Privacy Policy

1. Introduction

Sysbioz Solutions Pvt. Ltd. ("we", "our", "us", "Sysbioz") respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, process, use, and share your data when you access our website sysbioz.com ("Site") or use our software development and consulting services.

We comply with applicable data protection laws, including:

• Information Technology Act, 2000 (India) and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").
• General Data Protection Regulation (GDPR) (EU 2016/679) for EU/EEA clients.
• California Consumer Privacy Act (CCPA) for California residents.

2. Personal Data We Collect

• Identity & Contact Data: name, email, phone, company details.
• Business & Professional Data: project requirements, job title, technical specifications.
• Payment & Billing Data: invoices, tax details, transaction records.
• Technical & Usage Data: IP address, browser type, device, pages visited, cookies.
• Communications: emails, chat, feedback, support interactions.

We do not intentionally collect sensitive categories of personal data (health, biometric, religious beliefs, etc.), unless explicitly required by law or client agreements.

3. Purpose of Processing

We process your data for:

• Delivering and managing our services.
• Responding to inquiries, proposals, and client communications.
• Invoicing, accounting, tax compliance.
• Improving website functionality and user experience.
• Marketing communications (with opt-out option).
• Legal, regulatory, and compliance purposes.

4. Legal Basis

• Consent – when you voluntarily provide data or opt in for marketing.
• Contractual necessity – to deliver services under an agreement.
• Legal obligations – to comply with Indian IT Act, tax laws, etc.
• Legitimate interests – improving our services, preventing fraud, ensuring security.

5. International Data Transfers

Your information may be transferred and processed outside India (e.g., in the EU, US). We use contractual safeguards such as Standard Contractual Clauses (SCCs) or equivalent frameworks to ensure adequate protection.

6. Security Practices

As required under the Indian IT Act and SPDI Rules, we follow ISO/IEC 27001-aligned security practices including:

• Data encryption at rest and in transit.
• Role-based access controls.
• Regular audits, vulnerability scans, and monitoring.
• Confidentiality agreements with employees and subcontractors.

7. Your Rights

Depending on your location, you may exercise:

• India (SPDI Rules): review, correct, withdraw consent to your personal data.
• EU/EEA (GDPR): right to access, rectification, erasure, restriction, data portability, and objection.
• California (CCPA): right to know, right to delete, right to opt-out of sale (we do not sell personal data).

To exercise rights, contact us at privacy@sysbioz.com

9. Data Retention

We retain personal data only for as long as necessary for service delivery, contractual obligations, or legal compliance. For inactive accounts, data may be anonymized or deleted after 2–5 years.

10. Grievance Officer (India Requirement)

In compliance with the IT Act, 2000, Sysbioz has appointed a Grievance Officer:

11. Updates to Policy

We may revise this Policy periodically. Updates will be posted on this Site with a revised "Effective Date."