Privacy Policy

1. Who We Are

Conteak is operated by DNV ARC, a partnership firm registered in India. For the purposes of the DPDP Act, DNV ARC is the Data Fiduciary responsible for your personal data processed through Conteak.

2. Data We Collect

2.1 Account Data

When you sign up via Google or Microsoft OAuth, we collect your name, email address, and profile photo (if provided by your OAuth provider).

2.2 Content You Create

Data you enter into Conteak — contacts, notes, tasks, life dates, career records, and any files or photos you upload. This is your personal data about yourself and, where applicable, the third parties you choose to store information about.

2.3 Billing Data

Subscription and payment status. Card and payment details are handled directly by our payment processors (Razorpay for India, Razorpay International for global payments) — DNV ARC does not store your card details.

2.4 Technical Data

Session cookies required for authentication (see our Cookie Policy) and aggregate, privacy-respecting usage analytics via Google Analytics 4, used only to understand product usage at an aggregate level.

3. How We Use Your Data

We use your data solely to:

• Provide, operate, and maintain the Service
• Authenticate your account and keep it secure
• Process subscription payments and manage billing
• Send essential service communications (renewal reminders, security notices)
• Respond to support requests
• Comply with legal obligations

We do not use your data for advertising, do not sell your data to third parties, and do not use your content to train any AI or machine learning model.

4. Data Security and Encryption

Sensitive personal data stored in Conteak is encrypted at rest and in transit. We implement reasonable technical and organisational safeguards consistent with the security requirements of the DPDP Act. No system is completely immune to failure or unauthorised access; our liability in relation to data security is addressed in Section 9 of our Terms of Service.

5. Who We Share Data With

We share data only with service providers ("Data Processors") who help us operate Conteak, under contractual confidentiality obligations:

We do not sell, rent, or trade your personal data to any third party for marketing purposes. Some of these processors may store or process data outside India (for example, our database is hosted in AWS Singapore); where this occurs, we take reasonable steps to ensure an equivalent standard of protection.

6. Data Retention

We retain your data for as long as your account is active. If you do not subscribe within 60 days of your free trial ending, we reserve the right to delete your account and associated data, consistent with Section 4 of our Terms of Service. If you delete your account, your data is permanently and irreversibly removed, save for records we are legally required to retain (such as billing records, for tax and audit purposes).

7. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Erase your personal data (also available directly via account deletion in your Profile page)
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• Grievance redressal — raise a complaint about how your data is handled (see Section 9 below)
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

To exercise any of these rights, contact us at legal@conteak.com. We will respond within a reasonable time and in accordance with the DPDP Act.

8. Data Breach Notification

In the event of a personal data breach that is likely to affect you, DNV ARC will notify affected users and the relevant authorities as required under the DPDP Act, without undue delay, describing the nature of the breach and the steps we are taking in response.

9. Grievance Officer

In accordance with the DPDP Act, DNV ARC has appointed a Grievance Officer to address concerns regarding the processing of your personal data.

We aim to acknowledge grievances within 7 working days and resolve them within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

10. Children's Data

Conteak is not intended for individuals under 18 years of age (see Section 2, Eligibility, of our Terms of Service). We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently done so, we will delete that data promptly.

11. Third-Party Data You Store

Conteak allows you to store personal data about other individuals (your contacts). You are responsible for ensuring you have a lawful basis to store this data, per Section 7 of our Terms of Service. DNV ARC processes this data solely as directed by you, to provide the Service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app at least 14 days before they take effect, consistent with our Terms of Service.