Privacy Policy

1. Introduction

This Privacy Policy explains:

• What information we collect
• Why we collect it
• How we use it
• How we protect it
• When we may disclose it
• Your privacy rights
• Our legal obligations

2. Company Information

Company Name: UQuick Technologies India Limited

Product: CtrlOne®

Website: https://ctrlone.online

Email: privacy@ctrlone.online

Registered Office: Rajkot, Gujarat, India

3. Scope

This Privacy Policy applies to:

• CtrlOne Website
• CtrlOne Cloud Platform
• CtrlOne Admin Console
• CtrlOne Agent
• CtrlOne LAN Version
• APIs
• Desktop Applications
• Mobile Applications (if released)
• Customer Support
• Sales Enquiries
• Marketing Activities
• Partner Portal
• Reseller Portal

4. Information We Collect

Depending upon how you interact with CtrlOne, we may collect the following information.

4A. Personal Information

• Full Name
• Company Name
• Email Address
• Phone Number
• Designation
• Billing Address
• GST Number
• Country
• State
• City

4B. Business Information

• Organization Name
• Company Size
• Industry
• Device Count
• License Information
• Subscription Details
• Payment Status

4C. Account Information

Passwords are never stored in plain text.

• Username
• Password (encrypted)
• Login History
• Two-Factor Authentication Data
• Session Information

4D. Device Information

The CtrlOne Agent may collect the following, solely for endpoint management and security administration:

• Device Name
• Device ID
• Machine GUID
• Operating System
• Windows Edition
• Processor Information
• RAM Information
• Storage Information
• BIOS Version
• IP Address
• MAC Address
• Domain Name
• Windows Build Number
• Installed Software Inventory
• Installed Updates
• Security Status

4E. Security Logs

CtrlOne may collect:

• Login Events
• Security Events
• Policy Application Logs
• Device Health Logs
• Protection Status
• Audit Logs
• Administrative Activities
• Error Logs
• Crash Reports

4F. Website Usage Information

When visiting our website, we may collect:

• Browser Type
• Device Type
• Operating System
• IP Address
• Pages Visited
• Referral Source
• Date & Time
• Session Duration
• Cookies

5. Information We DO NOT Collect

Unless explicitly enabled by an organization administrator, CtrlOne does not intentionally collect:

• Personal photos
• Personal videos
• Personal documents
• Personal emails
• Banking credentials
• Credit card numbers
• UPI PINs
• Passwords of third-party websites
• Aadhaar numbers
• PAN numbers
• Passport details
• Personal chat conversations

5.1 Optional enterprise features

If optional enterprise features such as remote management, inventory collection, or administrator-initiated screen capture are enabled by the customer, the organization is responsible for informing its users and obtaining any required legal permissions.

6. Why We Collect Information

We use collected information to:

• Provide CtrlOne services
• Authenticate users
• Manage subscriptions
• Activate licenses
• Protect customer devices
• Improve security
• Detect malware
• Prevent fraud
• Improve software performance
• Deliver updates
• Respond to support requests
• Send important security notifications
• Comply with legal obligations

7. Legal Basis for Processing

Where applicable, we process information based on:

• User Consent
• Contractual Necessity
• Legitimate Business Interests
• Legal Compliance
• Protection of Vital Interests

8. Cookies

The CtrlOne website may use cookies for:

Users may disable cookies through browser settings, although some website features may not function correctly.

• Login Sessions
• Authentication
• Language Preferences
• Analytics
• Security
• Performance Optimization

9. Analytics

We may use privacy-conscious analytics tools to understand website traffic, popular pages, user interactions, performance metrics, and error reporting. Analytics data is generally aggregated and used to improve our services.

10. License Activation

To activate software, CtrlOne may securely transmit the following, used only for license validation and preventing unauthorized use:

• License Key
• Machine ID
• Product Version
• Activation Date
• Subscription Status

11. Remote Management

When enabled by the customer organization, CtrlOne administrators may:

These actions are performed only under the customer's administrative control.

• Apply security policies
• Deploy software
• View device inventory
• Collect endpoint health information
• Restart services
• Execute approved administrative tasks

12. Data Sharing

We do not sell personal information. We may share information only with:

All third parties are required to protect the information they process on our behalf.

• Payment processors
• Cloud hosting providers
• Email delivery providers
• Technical support vendors
• Authorized channel partners (where necessary)
• Government or regulatory authorities when legally required
• Courts or law enforcement agencies pursuant to applicable law

13. International Data Transfers

Where information is transferred outside India, we implement appropriate contractual, organizational, and technical safeguards to protect personal data in accordance with applicable law.

14. Data Security

CtrlOne implements commercially reasonable safeguards including:

While we strive to protect information, no internet-based system can be guaranteed to be completely secure.

• HTTPS/TLS encryption
• Secure APIs
• Encrypted password storage
• Firewall protection
• Access controls
• Role-Based Access Control (RBAC)
• Audit logging
• Multi-factor authentication support
• Security monitoring
• Regular software updates

15. Data Retention

We retain personal information only for as long as necessary to:

When information is no longer required, it is deleted or anonymized where reasonably practicable.

• Provide services
• Meet contractual obligations
• Comply with legal requirements
• Resolve disputes
• Enforce agreements

16. Your Privacy Rights

Subject to applicable law, you may have the right to:

Requests may be submitted using the contact details provided below.

• Access your personal information
• Correct inaccurate information
• Update your information
• Request deletion
• Withdraw consent (where processing is based on consent)
• Request restriction of processing where applicable
• Lodge a complaint with an appropriate authority

17. Children's Privacy

CtrlOne is intended for businesses, educational institutions, government organizations, and enterprise users. Our services are not directed to children under the age of 18, and we do not knowingly collect personal information directly from children.

18. Third-Party Services

Our services may integrate with third-party platforms such as Microsoft Windows, Microsoft Azure, Google Workspace, email providers, payment gateways, and cloud infrastructure providers. Use of such services is governed by the respective providers' privacy policies.

19. Customer Responsibilities

Organizations using CtrlOne are responsible for:

• Configuring security settings appropriately
• Informing their employees or end users about monitoring or management features where required by law
• Obtaining necessary consents
• Complying with applicable employment, privacy, and data protection laws

20. Data Breach Response

If a personal data breach affecting CtrlOne systems is identified, we will:

• Investigate the incident
• Mitigate risks
• Notify affected customers where legally required
• Cooperate with applicable regulatory authorities
• Implement corrective measures

21. Compliance with Indian Laws

CtrlOne endeavors to comply with applicable Indian laws, including:

• Digital Personal Data Protection Act, 2023
• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Other applicable laws and regulations relating to data protection and cybersecurity, as amended from time to time

22. Changes to this Privacy Policy

We may revise this Privacy Policy periodically. Material changes will be published on our website with an updated "Last Updated" date. Continued use of CtrlOne after such updates constitutes acceptance of the revised policy.

23. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact:

Privacy Officer, UQuick Technologies India Limited — Product: CtrlOne® — Website: https://ctrlone.online — Email: privacy@ctrlone.online

24. Governing Law & Jurisdiction

This Privacy Policy shall be governed by the laws of India. Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts located in Rajkot, Gujarat, India, unless otherwise required by applicable law.