Data Policy

Last Updated: January 2024

1. Overview

This Data Policy describes how Hawktrion Technologies processes, stores, and protects data in connection with our services. This policy supplements our Privacy Policy and provides detailed information about our data handling practices.

2. Types of Data We Process

2.1 Customer Data

Data that you provide to us or that we collect in connection with your use of our services, including:

• Account information and credentials
• Contact and billing information
• Service usage data and analytics
• Communication records and support tickets
• Custom configurations and preferences

2.2 End User Data

Data collected through your use of our services on behalf of your customers, including:

• Chatbot conversation logs
• WhatsApp message data
• E-commerce transaction information
• Analytics and behavioral data
• User-generated content

2.3 Technical Data

Automatically collected technical information, including:

• IP addresses and device identifiers
• Browser and device information
• Log files and error reports
• Performance metrics
• Network and connection data

3. Data Processing Purposes

We process data for the following purposes:

• Service Provision: To deliver and maintain our services
• Performance Optimization: To improve service performance and reliability
• Analytics and Insights: To generate business intelligence and analytics
• Security and Fraud Prevention: To protect against security threats
• Compliance: To meet legal and regulatory obligations
• Customer Support: To provide technical support and assistance
• Product Development: To enhance and develop new features

4. Legal Basis for Processing

We process data based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations
• Legitimate Interests: For business operations and service improvement
• Consent: When you have provided explicit consent
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interests: To protect life, health, or safety

5. Data Storage and Location

5.1 Storage Locations

Your data may be stored and processed in the following locations:

• United States (primary data centers)
• European Union (for EU customers)
• Other regions as specified in service agreements

5.2 Data Retention

We retain data according to the following principles:

• Active Accounts: Data is retained while your account is active
• Inactive Accounts: Data may be retained for up to 90 days after account closure
• Legal Requirements: Some data may be retained longer to comply with legal obligations
• Backup Data: Backup copies may be retained for up to 30 days

6. Data Security Measures

6.1 Technical Safeguards

We implement comprehensive technical security measures:

• End-to-end encryption for data in transit (TLS 1.3)
• Encryption at rest using AES-256
• Secure authentication and access controls
• Regular security audits and penetration testing
• Intrusion detection and prevention systems
• DDoS protection and mitigation

6.2 Organizational Safeguards

We maintain strong organizational security practices:

• Employee training on data protection
• Strict access controls and role-based permissions
• Background checks for personnel with data access
• Confidentiality agreements and policies
• Regular security awareness programs

7. Data Sharing and Third Parties

7.1 Service Providers

We may share data with trusted service providers who assist in:

• Cloud infrastructure and hosting
• Payment processing
• Email and communication services
• Analytics and monitoring tools
• Customer support platforms

All service providers are contractually obligated to protect your data and use it only for specified purposes.

7.2 Business Partners

We may share aggregated or anonymized data with business partners for analytics and service improvement purposes.

7.3 Legal Disclosures

We may disclose data when required by law, court order, or government request, or to protect our rights and the safety of our users.

8. Data Subject Rights

You have the following rights regarding your data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain types of data processing
• Right to Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at data@hawktrion.com.

9. Data Processing Agreements

When you use our services to process data on behalf of your customers, you act as a data controller and we act as a data processor. We enter into Data Processing Agreements (DPAs) that define:

• Scope and purpose of data processing
• Security measures and safeguards
• Data retention and deletion requirements
• Sub-processor relationships
• Compliance obligations

10. International Data Transfers

When we transfer data across borders, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by regulatory authorities
• Binding Corporate Rules (BCRs) where applicable
• Adequacy decisions by relevant data protection authorities
• Other legally recognized transfer mechanisms

11. Compliance and Certifications

We maintain compliance with various data protection frameworks:

• GDPR: General Data Protection Regulation (EU)
• CCPA: California Consumer Privacy Act
• SOC 2: Security and availability controls
• ISO 27001: Information security management
• PCI DSS: Payment card industry standards

12. Data Breach Procedures

In the event of a data breach, we will:

• Immediately investigate and contain the breach
• Assess the scope and impact of the incident
• Notify affected users and relevant authorities within 72 hours (where required)
• Provide clear information about the breach and remediation steps
• Implement measures to prevent future incidents

13. Data Minimization and Purpose Limitation

We adhere to data minimization principles:

• We only collect data that is necessary for specified purposes
• We do not use data for purposes other than those disclosed
• We regularly review and purge unnecessary data
• We anonymize or pseudonymize data where possible

14. Children's Data

Our services are not intended for children under 18. We do not knowingly collect or process data from children. If we become aware of such data, we will delete it immediately.

15. Automated Decision Making

Some of our services use automated processing and decision-making, including:

• AI-powered chatbots and responses
• Automated analytics and insights
• Fraud detection systems

You have the right to request human review of automated decisions that significantly affect you.

16. Updates to This Policy

We may update this Data Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through our services.

17. Contact Information

For questions, concerns, or requests regarding this Data Policy, please contact us:

• Email: data@hawktrion.com
• Data Protection Officer: dpo@hawktrion.com
• Phone: +919825380434
• Address: 143 Iris plaza, Opp.Jilla seva sadan, Panvadi Vyara, Dist-Tapi, Gujarat - 394650