Privacy Policy

1. Overview & Commitment

Ricoz Technologies Private Limited (“RicozTrack”, “we”, “us”, or “our”), registered in Bengaluru, Karnataka, India, operates the RicozTrack multi-tier enterprise work management operating system. We respect your organizational privacy and are strictly committed to safeguarding enterprise and individual personal data.

This Privacy Policy outlines how we collect, process, store, and protect your information in adherence to India's Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000, and international standards such as GDPR and SOC2 Type II.

2. Information We Collect

• Account & Identity Information: Full name, professional work email address, phone number, designated role, and organization credentials.
• Organizational Structure Data: Departments, designated project leads, reporting hierarchies, and project workspace configurations.
• Billing & Tax Compliance Details: Company Legal Name, GSTIN (Goods and Services Tax Identification Number), billing address, and transaction logs. Note that credit card and UPI information is tokenized and processed securely by RBI-compliant payment gateways.
• Telemetry & Security Logs: IP address, device fingerprints, login audit timestamps, and diagnostic metrics to prevent unauthorized tenant intrusion.

3. Indian Data Residency & Multi-Tenant Isolation

All production databases, audit logs, and file storage for our Indian customers are hosted exclusively in the AWS Asia Pacific (Mumbai - ap-south-1) cloud region.

Data is encrypted both in transit (TLS 1.3 with forward secrecy) and at rest (AES-256). Furthermore, our architecture enforces strict multi-tenant boundary isolation at the database query layer, ensuring zero cross-organization data leakage.

4. Your Rights under the DPDP Act 2023

As a data principal under Indian law, you and your employees hold specific statutory rights:

5. Grievance Officer & Contact Information

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules and the DPDP Act 2023, the details of our Grievance Redressal Officer are: