Guardians of the Enterprise — Insights from leading cyber experts.

Listen Now →
Legal

Privacy Policy

Last updated: May 14, 2026. View the prior version of this Privacy Notice.

GDPR Compliant UK DPA 2018 support@indusface.com

Indusface Pvt Ltd. and its wholly owned affiliates (together "Indusface") respect your privacy and are committed to complying with privacy laws and legislation in the countries in which it operates.

This privacy statement explains what personal data Indusface collects or otherwise processes about you through our direct interactions — whether you are a representative of a customer, a prospective customer, a partner, a website visitor, or a job applicant.

A. What Information Is Collected and Processed?

1

Information You Give Us

You may give us information about yourself by using online forms on the Website or by contacting us by phone, email, or other means — for example, by filling in our 'Contact Us' form or when you provide your information to receive our services.

The information you give us may include: email address, name, mailing address, telephone number, company name, company address, credit card information, job title, account information, and any updates to information previously provided to us.

We need certain types of information to provide services to you. If you do not provide it, or ask us to delete it, you may no longer be able to access our services.

2

Information We May Collect About You

Each time you visit the Website we may automatically collect:

  • Technical information, including IP address, domain name, browser type and version, browser plug-in types, operating system and platform.
  • Information about your visit, including the full URL clickstream to, through and from our site (including date and time), length of visits to certain pages, and page interaction information (scrolling, clicks, mouse-overs).
3

Information We May Receive From Other Sources

We will receive information about you if you obtain our services through one of our resellers or partners, or if you use any of the other websites we operate or services we provide. We also work closely with third parties (including advertising networks, analytics and search information providers) and may receive information about you from them.

4

Data Collected Through Direct Interactions

Indusface may collect personal data from you if you inquire about or obtain a service, visit our website, use one of our mobile applications, apply for a job, or otherwise directly engage with Indusface ("Direct Interaction Personal Data"). Categories of data collected include:

  • Contact Information: First and last name, email address, postal address, telephone number, company name, job title.
  • Login Information and Credentials: If you use any of our online portals, you may be asked to create an account and provide a login name, password, and similar security information.
  • Employment & Applicant Data: Resume, job history, educational history, and related information used to evaluate candidates for employment.
  • Device and Usage Data: IP address, domain name of your ISP, device type and identifiers, browser type, operating system, pages viewed, time spent on site, and similar usage data.
5

End User Personal Data (Processed for Customers)

By using one of Indusface's customer's websites or applications, personal data about you may be included in content sent across Indusface's infrastructure ("End User Personal Data"). This may include login credentials, subscriber name and contact information, financial or transaction information, or any other information relating to you through use of the customer's web services.

We do not collect this information for our own purposes — we act as a "processor" or "service provider" on behalf of our customer. The customer determines what End User Personal Data is collected and is responsible for compliance with applicable laws for such processing.

6

Network Traffic Data Captured in Indusface Logs

Indusface collects network traffic data, including IP addresses and other technical data which Indusface servers log relating to the delivery of information over the Indusface platform ("Logged Data"). We do not consider this information to be Personal Data, as we do not maintain it in an identified or identifiable way.

Logged Data may be processed for purposes of billing customers, service issue resolution and service improvement, troubleshooting, and aggregate reporting.

B. Why the Information Is Collected and Processed?

7

Operation of Our Business

Direct Interaction Personal Data, End User Personal Data, and Logged Data are used to perform essential business operations and provide our products and services. Specific purposes include:

  • Fulfillment of Transactions / Contractual Obligations: Responding to requests from current and prospective customers, completing business transactions, and complying with contractual requirements.
  • Personalization: Providing a personalized experience on our websites, communities, and portals.
  • Providing Support: Technical support, troubleshooting errors, and "Live Chat" sessions.
  • Product Development: Using Logged Data to develop new products and improve existing features and capabilities.
  • Security: Using Logged Data to detect and prevent potential fraud and security risks to our platform, visitors, and customers.
  • Recruitment: Considering you for employment purposes in connection with a job application or inquiry.
8

Managing and Supporting Customer Relationships

We use Direct Interaction Personal Data collected about individuals representing our customers to manage and support our customer relationships. This includes providing support for our services, providing access to customer service portals and communities, providing service training, communicating with customers, and troubleshooting issues.

9

Managing and Supporting Vendor Relationships

We use Direct Interaction Personal Data about individuals representing our third-party service providers to manage and support our vendor relationships. This includes communication with vendors, purchasing and negotiating new offerings, requesting support and maintenance services, and completing necessary transactions.

10

Communications, Including Promotional Communications

We use Direct Interaction Personal Data to communicate with you, deliver marketing communications, special offers, or advertisements that may be of interest to you. As part of any communications, we offer you the opportunity to unsubscribe at any time. You may also contact us at marketing@indusface.com to opt out.

We also conduct satisfaction surveys and market research surveys to improve our service offering and business operations.

C. How Is the Data Collected and Processed?

11

How Does Indusface Share the Personal Data?

Indusface shares Direct Interaction Personal Data, Logged Data, and End User Personal Data among our wholly owned and controlled affiliates and subsidiaries globally, and with vendors or agents working on our behalf. These companies must abide by our data privacy, confidentiality and security requirements and are prohibited from using the data for any other purposes.

We may also share data in connection with:

  • Co-Branded Promotions: Shared with business partners to offer co-branded products and services.
  • Protection of Rights and Property: To protect the rights or property of Indusface, business partners, third-party service providers, customers, or others.
  • Compliance with Applicable Law: As required to comply with applicable law or regulation, respond to law enforcement requests, or comply with government reporting obligations.
  • Corporate Transactions: In cases of merger, acquisition, sale, or other corporate transaction.
12

Where Does Indusface Process the Personal Data?

Indusface is a global organization with business processes, management structures and technical systems that cross borders. As such, we may transfer your personal data to countries in the world where we do business. All transfers will meet the requirements prescribed under the data protection law of the relevant jurisdiction.

13

Information for EU Data Subjects

For any transfer of personal data outside the European Economic Area to a country deemed by the EU to not have an "adequate" level of data protection, Indusface has put in place the necessary safeguards and mechanisms to ensure compliance with applicable data protection laws.

Indusface processes personal data for a number of reasons, each justified by varying legal bases under the GDPR and UK DPA 2018. We retain Personal Information for as long as you use our services and then as required to comply with applicable laws.

Depending on your jurisdiction, you may have the right to request access to and rectification or erasure of personal data, restriction of processing, the right to object to processing, and the right to data portability. You also have the right to withdraw any consent at any time. Please contact support@indusface.com for any such request.

14

How Do We Protect Visitor Information?

Indusface is committed to taking steps to protect the information you provide to us, including administrative, technical, and physical measures — to safeguard information against loss, theft, and misuse, as well as against unauthorized access, disclosure, alteration, and destruction.

Information is accessed only by authorized staff instructed to handle it with confidentiality. It is protected by firewalls and standard industry security measures. We may transmit sensitive information and transactional data using secure socket layer (SSL) encryption.

While we take every precaution, the transmission of information via the internet is not completely secure. Any transmission is at your own risk. You are responsible for keeping your password confidential — please do not share it with anyone.

15

Cookies, Web Beacons and Other Technologies

We collect information from your visits to our sites through the processing of transaction logs and various technologies, including scripts, tags, Local Shared Objects (Flash cookies), Local Storage (HTML5) beacons, and cookies. Cookies are typically categorized as "session" cookies or "persistent" cookies.

We use Google Analytics for our sites, a web analysis service of Google Inc. Google Analytics uses cookies and the information generated is usually transferred to a Google server in the USA. IP anonymization is activated on the site where required under applicable law.

We also use third-party social media widgets (e.g. Facebook's "Share" or "Like" button) which may log certain information such as your IP address and browser type. We do not control these third-party tracking technologies.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however if you do this you may not be able to use the full functionality of our websites.

16

Children and Minors

We do not knowingly collect personal information directly from individuals under 17 years of age. Our services are not intended for individuals under 17 years of age. No one under 17 years of age should submit or post personal information through our services.

17

Links to Third-Party Web Sites and Applications

To allow you to interact with other websites on which you may have accounts, we may provide links or embed third-party applications. Your use of these links and applications is subject to the third parties' privacy policies, and you should become familiar with those policies before using the links or applications.

When you make purchases through the Services, we process your payments through Stripe (stripe.com). Stripe may collect certain financial information from you to process a payment on behalf of Indusface.

Indusface is not responsible for the privacy practices or the content of third-party web sites.

18

In Case of Breach

Indusface adopts appropriate safety and technical precautions to protect the data. However, in cases where a breach extends beyond the capacity of Indusface, we take all necessary steps to mitigate the loss. Indusface makes the Data Subject aware of the breach in question within a reasonable time frame.

19

What Are Your Rights?

You may contact us at support@indusface.com at any time, to request that we:

  • Update any Personal Information which is out of date or incorrect
  • Delete any Personal Information which we are holding about you
  • Restrict the way we process your Personal Information
  • Provide your Personal Information to a third-party provider of services
  • Provide you with a copy of any Personal Information which we hold about you

You have the right to ask us not to process your Personal Information for marketing purposes. You can also opt-out by following the unsubscribe instructions included in any marketing email, or by contacting us at marketing@indusface.com.

20

Do We Change This Privacy Policy?

We may update our Privacy Policy from time to time. By continuing to use the services and our Website, you agree to the latest version. Any changes we make in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes.

21

How to Contact Us

If you have a question about this statement or Indusface's handling of your personal data, or if you wish to provide instructions regarding our use of your data as set forth in this statement, you may contact us at:

support@indusface.com