Privacy Policy

1. Introduction

Rua Technologies ("Rua", "we", "us", or "our") provides software licensing, cloud, and IT services to business customers. Under the DPDP Act, Rua acts as a Data Fiduciary — the entity that determines the purpose and means of processing personal data. This Privacy Policy explains what personal data we collect, why we process it, how we protect it, and the rights available to you as a Data Principal (the individual to whom the personal data relates).

3. Consent

We process your personal data on the basis of your free, specific, informed, and unambiguous consent, given when you contact us or otherwise share your details. Where required, we will provide a clear notice describing the personal data being collected and the purpose of processing, in or accompanying the request for consent. You may withdraw your consent at any time by contacting us using the details in Section 13; withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to continue providing services that depend on that data.

2. Personal Data We Collect

We collect personal data that you voluntarily provide, such as when you:

• Send us an email at sales@ruatechnologies.com
• Message us via WhatsApp
• Fill out a form or otherwise contact us regarding licensing, cloud, or security services

This may include your name, business name, email address, phone number, and the details of your inquiry. When you submit a form on this site, it is protected by hCaptcha, a bot-verification service, which may collect limited technical data such as your IP address and browser or device information for spam-prevention purposes. We also use Google Analytics to understand website traffic and usage patterns, which may involve cookies or similar technologies, and we track when visitors click to contact us by phone, email, or WhatsApp so we can measure which pages generate inquiries. This automated data relates to website usage and does not include the content of your messages to us. If that changes, this policy will be updated to describe what is collected and why.

4. How We Use Your Information

• To respond to inquiries and provide quotes for software, cloud, and security services
• To process licensing orders and renewals on your behalf
• To communicate about your account, services, or support requests
• To maintain internal business records and comply with legal, accounting, or regulatory obligations

We do not sell your personal data to third parties, and we do not use it for any purpose beyond what it was collected for without seeking fresh consent.

5. Sharing and Disclosure of Personal Data

We may share limited personal data with software vendors and cloud providers (such as Microsoft, Google, Adobe, AWS, or others named on this site) strictly as necessary to provision licenses, subscriptions, or support on your behalf. Where you contact us through a form on this site, your submission is processed by Web3Forms, a third-party form-delivery service, in order to route your message to us, and is checked by hCaptcha, a bot-verification service, to prevent automated spam submissions. These providers act as our Data Processors for this purpose, and each also maintains its own privacy policy governing how it independently handles your information as a provider of its own services. We may also disclose personal data where required by law or to a competent government or regulatory authority, including the Data Protection Board of India.

6. Cross-Border Transfer

Some of the vendors and cloud providers named in Section 5 may store or process personal data outside India as part of delivering their services. Where this occurs, it is carried out consistent with the DPDP Act's provisions on transfer of personal data outside India.

7. Data Security

We take reasonable technical and organisational measures to protect personal data shared with us against unauthorised access, loss, or misuse, consistent with our obligation under the DPDP Act to implement reasonable security safeguards. This includes measures such as HTTPS encryption, access controls, multi-factor authentication, endpoint protection, and regular security updates. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Cookies and Analytics

We use cookies and Google Analytics to understand website traffic and improve performance. You can control cookies through your browser settings. See our Cookie Policy for full details on what cookies we use and why.

9. Personal Data Breach

In the event of a personal data breach, we will take prompt steps to contain and assess the incident, and will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act and DPDP Rules.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required to meet legal, accounting, or regulatory obligations, after which it is erased or anonymised, consistent with the DPDP Act's data minimisation and storage limitation principles.

11. Your Rights as a Data Principal

Subject to the DPDP Act and applicable exemptions, you have the right to:

• Access a summary of the personal data we hold about you and the processing activities carried out
• Correct, complete, and update inaccurate or outdated personal data
• Erase personal data that is no longer necessary for the purpose it was collected, unless we are required to retain it by law
• Withdraw consent at any time, as described in Section 3
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a grievance with us and, if unresolved, with the Data Protection Board of India

To exercise any of these rights, contact our Grievance Officer using the details in Section 13. We will respond within a reasonable time in accordance with the DPDP Rules.

12. Children's Data

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from individuals under 18 years of age, and if we become aware that we have done so, we will take steps to delete it, consistent with the DPDP Act's requirements for processing children's data.

13. Grievance Officer

In accordance with the DPDP Act, we have designated a Grievance Officer to address questions, requests, and grievances relating to your personal data.

14. Third-Party Links

Our website references and links to third-party vendors and partners. We are not responsible for the privacy practices of those third-party sites.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date above reflects the most recent revision.

16. Contact Us

For general inquiries, contact us at sales@ruatechnologies.com. For questions, requests, or grievances relating to your personal data, contact our Grievance Officer at contact@ruatechnologies.com, or write to us at Rajats Golden Nest, Katara Hills, Bhopal–462043, Madhya Pradesh.