This policy explains how Magynta Technologies Pvt. Ltd. ("Magynta Technologies", "we", "us") handles personal data when you visit this website, book a demo, apply to become a partner, or use Qryti. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and its Rules ("DPDP"), and, for people in the European Economic Area or the United Kingdom, the General Data Protection Regulation ("GDPR").
In short
- We collect only what you send us in a form or email, and what we need to run and protect the service.
- This website sets no cookies and uses no analytics or advertising. See the cookie policy.
- We never sell your personal data or use it for anyone else's advertising.
- You can see, correct or erase your data, or withdraw consent, at any time: write to connect@qryti.com.
Who is responsible
For this website, enquiries and our customers' accounts, Magynta Technologies Pvt. Ltd., India, is the data fiduciary (under GDPR, the controller). For the business data our customers put into Qryti (their clients, contacts, proposals, invoices, expenses and salaries), our customer is the data fiduciary and we are their data processor: we process it only on their instructions, under our agreement with them. If your data is in a customer's workspace, please contact that organisation first; we will pass on any request that reaches us.
What we collect
- Demo requests and partner applications: your name, work email, company, phone (optional), team size or partner model, and your message.
- Emails you send us: what you write and your contact details.
- Qryti accounts: name, work email, role, sign-in methods (password hash, authenticator, passkeys), and an audit trail of activity, as needed to run a secure business application.
- Technical data: IP address, browser type and security logs, kept to protect the service and stop abuse (for example, to limit how often a form can be sent from one network).
We do not ask for, and ask you not to send, sensitive personal data such as health or financial account details through the website.
Why we use it, and on what basis
- To reply to your demo request or partner application and follow up on it: on your consent, given with the tick box on the form (GDPR: consent and, where we are talking about a contract, steps you asked for).
- To provide, secure, support and bill for Qryti: to perform our contract with your organisation, and for the legitimate use of keeping the service safe.
- To meet legal obligations, such as tax, GST and accounting records, or a lawful request from an authority.
We send no marketing emails unless you ask for them, and every such email lets you stop them. We make no decisions about you by automated means alone.
Withdrawing consent
You can withdraw consent at any time, as easily as you gave it: write to connect@qryti.com. We then stop using the data for that purpose and erase it, unless the law requires us to keep it. Withdrawing does not affect what we did before.
Who we share it with
Only with service providers who help us run Qryti, under written contracts that require them to protect it and use it only for us: our hosting provider, our email provider (Amazon Web Services, Mumbai region, for sending email) and, for enquiries, the mailbox that receives them. We may disclose data if the law requires it. We never sell personal data.
Where it is kept
Qryti and its data are hosted in India. Data is encrypted in transit and at rest. Where a provider processes data outside India, we do so only to countries the Government of India has not restricted, and, for data of people in the EEA or UK, with safeguards the GDPR recognises, such as standard contractual clauses.
How long we keep it
- Demo requests, partner applications and enquiry emails: up to two years after our last contact, unless you become a customer or partner.
- Customer and partner records: for the life of the agreement, then deleted or returned, except what the law requires us to keep (such as invoices, for at least eight years).
- Security logs: no longer than needed to protect the service, and as the law requires. Our audit log records that a request was made, with the company name and email domain only.
How we protect it
Each organisation's data is kept apart by row-level security in the database; sign-in uses authenticator codes and passkeys; every change is audited; and access by our own staff is limited, approved and logged. Read more on our security page. If a breach affects your personal data, we will tell you and the authorities as the law requires.
Your rights
Depending on where you are, you have the right to:
- get a summary of your personal data we hold and how we use it, and who we have shared it with;
- have inaccurate or incomplete data corrected or updated;
- have your data erased when it is no longer needed or you withdraw consent;
- withdraw consent, and object to or restrict some uses (GDPR);
- receive your data in a portable format (GDPR);
- nominate someone to exercise your rights if you die or cannot act yourself (DPDP);
- have a grievance about our handling of your data resolved, and then complain to the regulator.
Write to connect@qryti.com from the email address we hold, or tell us how to confirm it is you. We reply within 30 days. Exercising your rights is free.
Grievance Officer
If you have a concern or complaint about how we handle personal data, contact our Grievance Officer at connect@qryti.com with "Grievance" in the subject. We acknowledge every grievance within 2 working days and resolve it within 30 days. If you are not satisfied, you may complain to theData Protection Board of India; in the EEA or UK, to your local data protection authority.
Children
Qryti is a business service and this website is not meant for anyone under 18. We do not knowingly collect a child's personal data; if you think we have, write to us and we will erase it.
Changes
We will post any change to this policy here and update the date above. If a change affects how we use data you gave us on consent, we will ask again.