Privacy Policy

Information you give us. When you submit the contact or demo request form, we collect your name, email address, telephone number (optional), and the message you write. When you request a call back through a referral link, we collect your name, mobile number, email address (optional), the referral code you arrived with, and your consent to be contacted. When you sign in to the referral partner dashboard, we collect your email address and the one-time code we send to it. When you apply for a job by email, we receive whatever you choose to send, which usually includes your name, contact details, curriculum vitae, and work history. When you buy, register, or renew a SincA subscription, we collect the business name, the name of the contact person, the email address, telephone number, billing address, GST number, and payment and invoice records.

Information collected automatically. When you visit the website, our servers receive your IP address, browser type, device type, the pages you request, the referring page, and the date and time of each request, and record these in standard server logs. When you activate or use the SincA software, it sends the information needed to issue and verify your licence, such as a device identifier, machine name, software version, licence key, and activation and renewal dates. We do not use advertising trackers or third-party analytics on the website.

Information from others. If someone in our referral programme refers you, we receive the details they or you enter in the referral form, and we link the resulting lead to that partner's referral code so they can be credited.

We use personal data only for these purposes: to answer your enquiries, arrange demonstrations, and send quotations; to call back people who requested it through a referral link, and to credit and reward the referring partner; to sign referral partners in securely and show them their leads, rewards, and redemptions; to supply, install, activate, license, support, update, and renew the SincA software; to issue invoices, collect payments, and meet our tax, GST, and accounting duties; to assess job applications; to show prices in your local currency; to keep the website and software secure, detect fraud, misuse, and spam, and diagnose faults; and to comply with legal obligations, lawful requests from authorities, and the enforcement of our Terms of Service.

We do not sell personal data, and we do not use it for automated decisions that produce legal or similarly significant effects on you. We will only send you marketing messages where you have agreed to them, and you can opt out at any time.

We process personal data on the basis of your consent, which you give, for example, by submitting a form, ticking the consent box on a referral page, or emailing us your application; and, where the DPDP Act permits, for legitimate uses without separate consent, including where you have voluntarily provided your data for a specified purpose and have not indicated that you do not consent, where processing is needed to meet a legal obligation, and where it is needed to perform a contract you have entered into with us. You may withdraw consent at any time, as described in Clause 9; withdrawal does not affect processing that took place before it.

The website uses only the cookies and browser storage it needs to work. A cookie named "screl_ref" keeps referral partners signed in to their dashboard; it is HTTP-only, is set only after you sign in, and expires after seven (7) days or when you sign out. A separate sign-in cookie is used only by SCREL staff for the administration area. Your choice of light or dark theme is stored in your browser's local storage under the key "theme" and never leaves your device. We do not use advertising, tracking, or third-party analytics cookies. You can clear or block cookies in your browser settings, but if you do, the referral dashboard will not keep you signed in.

We share personal data only where needed for the purposes in Clause 2, and only with: our own employees and support engineers who need it to do their work; service providers who process data on our behalf under contract, such as hosting, email, SMS, and WhatsApp messaging providers, and payment gateways; the referral partner who referred you, who can see your name and the progress of your enquiry in their dashboard so that they can be credited; ip-api.com, which receives your IP address when you visit our pricing pages so that we can show the correct country and currency, and which returns only your country to us; professional advisers such as auditors, accountants, and lawyers; and government, tax, regulatory, or law-enforcement authorities where the law requires or permits disclosure.

If SCREL is involved in a merger, acquisition, or transfer of its business, personal data may be transferred to the successor, which will be bound to use it in line with this Policy.

Some of our service providers, including ip-api.com, may process data outside India. We transfer personal data outside India only to countries or territories not restricted by the Central Government under Section 16 of the DPDP Act, and we require our providers to protect it to a standard consistent with this Policy. Customers outside India should note that their data may be stored and processed in India.

We keep personal data only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. Contact enquiries and referral leads are kept for as long as the enquiry is active and for up to three (3) years afterwards, so that we can follow up and credit referral partners. Customer account, licence, invoice, and payment records are kept for the period required under the Companies Act, 2013, the Central Goods and Services Tax Act, 2017, and the Income-tax Act, 1961, which is generally eight (8) years from the end of the relevant financial year. Job applications are kept for up to one (1) year after the recruitment process ends, unless you ask us to delete them sooner. Server logs are kept for a short period for security and troubleshooting, except where a longer period is required by law, including the directions issued by CERT-In. When personal data is no longer needed, we delete it or make it anonymous.

We take reasonable technical and organisational security safeguards to protect personal data against loss, misuse, and unauthorised access, including encrypted connections for the website, HTTP-only and secure session cookies, one-time codes for partner sign-in, access controls that limit data to the people who need it, and regular review of our systems. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and the affected persons as required by the DPDP Act and the DPDP Rules, 2025.

Subject to the DPDP Act and other applicable law, you have the right: to obtain a summary of the personal data we hold about you and of the processing we carry out on it, and the identities of those with whom we have shared it; to have inaccurate or incomplete data corrected or completed, and out-of-date data updated; to have your data erased once it is no longer needed for the purpose for which it was collected, unless we must keep it to meet a legal obligation; to withdraw any consent you have given, as easily as you gave it; to have your grievances addressed; and to nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to us at info@screl.com from the email address or telephone number we hold for you, or include enough detail for us to identify you. We may need to verify your identity before acting on a request. We will respond within the period required by law and, in any case, within thirty (30) days. If you withdraw consent, we will stop processing the data concerned within a reasonable time, except where the law requires or permits us to continue; withdrawing consent may mean that we can no longer provide a service that depends on it.

You also have a duty under Section 15 of the DPDP Act to provide data that is accurate and authentic, not to impersonate another person, and not to file false or frivolous grievances.

The website and the SincA software are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of eighteen (18). If you believe a child has given us personal data, please contact us and we will delete it.

The website and the SincA software may link to, or integrate with, services operated by others, such as WhatsApp, payment gateways, SMS providers, the GST portal, and delivery platforms. Those services are governed by their own privacy policies, which we do not control, and we encourage you to read them before giving them your data.

We may update this Policy from time to time to reflect changes in our services, our practices, or the law. The updated Policy takes effect from the date it is published on this page, and the "Last Updated" date above will change. Where a change materially affects how we use personal data that we already hold, we will tell you by email or through the software, and, where the law requires it, ask for your consent again.

Any question, request, or complaint about this Policy or about how we handle your personal data may be directed to the Grievance Officer, SCREL INFO Private Limited, at its registered office at Kakkanchery, Kerala, India, by email at info@screl.com with the subject line "Privacy", or by telephone or WhatsApp on +91 8001070000. We will acknowledge your grievance promptly and resolve it within the period required by the DPDP Rules, 2025.

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India in the manner it prescribes. Under the DPDP Act, you should first raise the grievance with us before approaching the Board.