1. Introduction

Techulas Software Solution Private Limited ("Techulas," "we," "us," or "our") is an AI products company registered in India. We build and operate SaaS products powered by artificial intelligence and machine learning, including our flagship product Casagbic.

This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our website at techulas.com and any of our products and services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

If you have questions about this policy, you can contact us at hello@techulas.com.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password. Passwords are stored in hashed form and are never stored or accessible in plain text.

2.2 Usage Data

We collect information about how you interact with our products — features you use, actions you take, and the frequency and duration of your activities.

2.3 Device and Log Data

We automatically collect technical information including your IP address, browser type and version, operating system, referring URLs, pages visited, timestamps, and diagnostic data.

2.4 Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and understand how our Services are used. You can manage cookie preferences through your browser settings.

2.5 Payment Information

Payment transactions are processed through third-party payment processors. We do not store your credit card numbers or bank account details on our servers. We may retain transaction records, billing addresses, and payment confirmation details for accounting and support purposes.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain our Services, including processing your requests and delivering product functionality
• Send transactional emails such as account verification codes (OTP), password reset links, security alerts, billing receipts, and service notifications
• Improve, personalise, and develop new features for our products based on usage patterns and feedback
• Communicate with you about your account, respond to support inquiries, and provide technical assistance
• Detect, prevent, and address security threats, fraud, abuse, and technical issues
• Comply with applicable legal obligations, enforce our terms, and protect our rights

4. Email Communications

We use Amazon Simple Email Service (Amazon SES) as our email service provider to send emails from our domain.

4.1 Transactional Emails

As a necessary part of using our Services, you will receive transactional emails including:

• Account verification and one-time password (OTP) codes
• Password reset links
• Security alerts (e.g., login from a new device)
• Billing receipts and payment confirmations
• Service notifications (e.g., changes to your account, planned maintenance)

4.2 Marketing Emails

We do not send marketing or promotional emails without your explicit opt-in consent. If you have opted in, you may unsubscribe at any time via your account settings or using the unsubscribe link included in the email.

4.3 Non-Unsubscribable Emails

Certain transactional emails — such as OTP codes, password reset links, and critical security alerts — cannot be unsubscribed from, as they are essential for account security and service functionality. These emails are sent only in direct response to your actions or to protect your account.

5. How We Share Information

We do not sell your personal data. We share information only in the following circumstances:

• Service Providers: We share data with third-party vendors who assist us in operating our Services (e.g., Amazon Web Services for hosting and email delivery, payment processors for billing). These providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.
• Legal Compliance: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law (e.g., tax records, transaction logs). Log and usage data may be retained in aggregated, non-identifiable form for analytics purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

7.1 General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Data Portability: Request your data in a structured, commonly used, machine-readable format
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

7.2 Rights Under India's Digital Personal Data Protection Act, 2023 (DPDPA)

If you are a resident of India, you have rights under the DPDPA including the right to access your data, request correction and erasure, and nominate another person to exercise your rights in the event of your death or incapacity. You also have the right to grievance redressal. To exercise these rights, contact us at hello@techulas.com.

7.3 Rights Under the EU General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights including the right to restrict processing, the right to object to processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is typically the performance of a contract, legitimate interests, or your consent.

7.4 Rights Under the California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt-out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at hello@techulas.com. We will respond to your request within 30 days.

8. Data Security

We take reasonable and appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Hashing of passwords using industry-standard algorithms
• Role-based access controls limiting employee access to personal data
• Regular security reviews and monitoring

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to implementing and maintaining appropriate safeguards.

9. International Data Transfers

Our Services are hosted on Amazon Web Services (AWS) infrastructure. Your data may be processed and stored in AWS data centres located in the United States (us-east-1 region) and other regions as needed for service delivery.

If you are accessing our Services from outside India or the United States, your data will be transferred to and processed in these jurisdictions. We ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

10. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected personal data from a person under 18 without appropriate consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected data from a minor, please contact us at hello@techulas.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification or displaying a notice within our Services.

We encourage you to review this page periodically to stay informed about how we protect your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: