Collections and controls of user

We only collect the information that we actually need. Some of the information that when you sign up for an account, register for an event, ask for customer support. We store your name and contact information, but we do not store your credit card information. Sometimes we receive information indirectly. If you ask about our products through one of our referral programs or reselling partners, or sign in to one of our products through an authentication service provider like LinkedIn or Google, they'll pass on your contact information to us. We use that information to complete the request that you made.

Use of your information

We use your information to provide the services you have requested, create and maintain your accounts, and keep an eye out for unauthorized activity on your accounts. We also use it to communicate with you about the products you're currently using, your customer support requests, new products you may like, chances for you to give us feedback, and policy updates. You can decline certain kinds of information use either by not providing the information in the first place or by opting out later.

We limit access to your personal information to our employees and contractors who have a legitimate need to use it. If we share your information with other parties (like service providers, domain registrars, and reselling partners), they must have appropriate security measures and a valid reason for using your information, typically to serve you.

We keep your personal information as long as it is required for the purposes stated in this Privacy Policy. When we no longer have a legitimate need to process your information, we will delete, anonymize, or isolate your information, whichever is appropriate.

Information that we processes on your behalf

If you handle other people's data using Aarars MyCHS apps, such as information about your customers or employees, you are entrusting that data to us for processing. If you use a Aarars MyCHS mobile app and give the app access to your contacts and photo library, you are entrusting data to us. The data you entrust to us for processing is called service data.

You own your service data. We protect it, limit access to it, and only process it according to your instructions. You may access it, share it through third-party integrations, and request that we export or delete it.

We hold the data in your account as long as you choose to use our Services. After you terminate your account, your data will be automatically deleted from our active database within couple of months and keep in our backups after that.

General

There are some limitations to the privacy we can promise you. We will disclose personal information if it's necessary to comply with a legal obligation, prevent fraud, enforce an agreement, or protect our users' safety. We do not currently honor Do Not Track signals from internet browsers; when a universal standard for processing them emerges, we will follow it.

Third-party websites and social media widgets have their own separate privacy policies. Always check the relevant privacy policy before sharing personal information with third parties.

You can always contact us to ask questions about our privacy practices, alert us if you believe we have collected personal data from a minor, or ask to have your personal information removed from our blogs or forums.

We will contact you to let you know if we make any major changes to our privacy policy, or in the highly unlikely event that we ever decide to sell our business.

Privacy Policy

This Privacy Policy statement is made by the Aarars MyCHS consisting of all the entities listed here and is effective from February 2021.

Privacy Commitment

We ask for only the least amount of information necessary, gathering only what we believe is essential for doing business, or for the specific transaction at hand. We let customers know the information we have on them and allow them to opt out of specific engagements. But, by far, our biggest commitment is that we do not make a penny from advertising revenue—never have, never will—even from the free editions of our products. This means we avoid the fundamental conflict of interest between gathering customer information and fueling advertising revenue, and the unavoidable compromises in customer privacy that it brings.

The goal of this policy is to make explicit the information we gather on our customers and users, how we will use it, and how we will not. This policy is unfortunately longer than we would like, but we must unambiguously address all the relevant cases. We will try and keep the language simple and direct as much as possible.

Scope of this Privacy Policy

This Privacy Policy applies to all our websites that link to it. It also applies to the products and services provided by us through these websites, our mobile applications and in other third-party online marketplaces. This Privacy Policy does not apply to any of our websites, products or services that have a separate privacy policy.

Information that you provide us

1. Account signup: When you sign up for an account to access one or more of our services, we ask for information like your name, contact number, email address, company/building name etc. You'll also be required to choose a unique username and a password for accessing the created account. You may also provide us with more information such as your photo.

2. Payment processing: When you buy any feature from us, we ask you to provide your name, contact information, and credit card information or other payment account information. When you submit your card information, we DO NOT store the name and address of the cardholder, the expiry date and the last four digits of the credit card number. All of these information are collected by our third=party Payment Gateway Service Providers.

We may use your information for the following purposes:

1. To communicate with you (such as through email) about products that you have downloaded and services that you have signed up for, changes to this Privacy Policy, changes to the Terms of Service, or important notices;
2. To keep you posted on new products and services, upcoming events, offers, promotions and other information that we think will be of interest to you;
3. To ask you to participate in surveys, or to solicit feedback on our products and services;
4. To set up and maintain your account, and to do all other things required for providing our services, such as enabling collaboration, providing website and mail hosting, and backing up and restoring your data;
5. To understand how users use our products and services, to monitor and prevent problems, and to improve our products and services;
6. To provide customer support, and to analyze and improve our interactions with customers;
7. To detect and prevent fraudulent transactions and other illegal activities, to report spam, and to protect the rights and interests of Aarars MyCHS, Aarars MyCHS’s users, third parties and the public;
8. To update, expand and analyze our records, identify new customers, and provide products and services that may be of interest to you;
9. To analyze trends, administer our websites, and track visitor navigations on our websites to understand what visitors are looking for and to better help them;
10. To monitor and improve marketing campaigns and make suggestions relevant to the user.

Legal bases for collecting and using information

Withdrawal of consent: Where we rely on your consent as the legal basis, you have the right to withdraw your consent at any time, but this will not affect any processing that has already taken place.

Legitimate interests notice: Where we rely on legitimate interests as the legal basis and those legitimate interests are not specified above, we will clearly explain to you what those legitimate interests are at the time that we collect your information.

Your choice in information use

Opt out of non-essential electronic communications: You may opt out of receiving newsletters and other non-essential messages by using the ‘unsubscribe’ function included in all such messages. However, you will continue to receive notices and essential transactional emails.

Optional information: You can choose not to provide optional profile information such as your photo. You can also delete or change your optional profile information. You can always choose not to fill in non-mandatory fields when you submit any form linked to our websites.

Who we share your information with

All Aarars MyCHS entities listed here have access to the information covered in Part I. We do not sell any personal information. We share your information only in the ways that are described in this Privacy Policy, and only with parties who adopt appropriate confidentiality and security measures.

Employees and independent contractors: Employees and independent contractors of all Aarars MyCHS entities have access to the information covered in Part I on a need-to-know basis. We require all employees and independent contractors of Aarars MyCHS entities to follow this Privacy Policy for personal information that we share with them.

Third-party service providers: We may need to share your personal information and aggregated or de-identified information with third-party service providers that we engage, such as marketing and advertising partners, event organizers, web analytics providers and payment processors. These service providers are authorized to use your personal information only as necessary to provide these services to us.

Domain registrars: When you register a domain through Aarars MyCHS from domain name registrars, we share your name and contact information such as your physical address, email address and phone number with them as per the domain registration rules.

Marketplace application developers: When you install or purchase any application developed using Aarars MyCHS's APIs that is posted on Aarars MyCHS’s online marketplace, your name and email address will be shared with the developer of the application, so they may engage with you directly as the provider of that application or service. Aarars MyCHS does not control the use of your personal information by the developers, which will be based on their own privacy policies.

Right to access: You have the right to access (and obtain a copy of, if required) the categories of personal information that we hold about you, including the information's source, purpose and period of processing, and the persons to whom the information is shared

Right to rectification: You have the right to update the information we hold about you or to rectify any inaccuracies. Based on the purpose for which we use your information, you can instruct us to add supplemental information about you in our database.

Right to erasure: You have the right to request that we delete your personal information in certain circumstances, such as when it is no longer necessary for the purpose for which it was originally collected.

Right to restriction of processing: You may also have the right to request to restrict the use of your information in certain circumstances, such as when you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Right to data portability: You have the right to transfer your information to a third party in a structured, commonly used and machine-readable format, in circumstances where the information is processed with your consent or by automated means.

Right to object: You have the right to object to the use of your information in certain circumstances, such as the use of your personal information for direct marketing.

Right to complain: You have the right to complain to the appropriate supervisory authority if you have any grievance against the way we collect, use or share your information. This right may not be available to you if there is no supervisory authority dealing with data protection in your country.

Retention of information

We retain your personal information for as long as it is required for the purposes stated in this Privacy Policy. Sometimes, we may retain your information for longer periods as permitted or required by law, such as to maintain suppression lists, prevent abuse, if required in connection with a legal claim or proceeding, to enforce our agreements, for tax, accounting, or to comply with other legal obligations. When we no longer have a legitimate need to process your information, we will delete or anonymize your information from our active databases. We will also securely store the information and isolate it from further processing on backup discs until deletion is possible.

Information that we processes on your behalf

Information entrusted to Aarars MyCHS and purpose

Information provided in connection with services: You may entrust information that you or your organization (“you”) control, to Aarars MyCHS in connection with use of our services or for requesting technical support for our products. This includes information regarding your customers and your employees (if you are a controller) or data that you hold and use on behalf of another person for a specific purpose, such as a customer to whom you provide services (if you are a processor). The data may either be stored on our servers when you use our services, or transferred or shared to us as part of a request for technical support or other services.

Ownership and control of your service data

We recognize that you own your service data. We provide you complete control of your service data by providing you the ability to -

1. access your service data,
2. share your service data through supported third-party integrations, and
3. request export or deletion of your service data.

How we use service data

We process your service data when you provide us instructions through the various modules of our services. For example, when you generate an invoice, information such as the name and address of your customer will be used to generate the invoice; and when you use our campaign management service for email marketing, the email addresses of the persons on your mailing list will be used for sending the emails.

Push notifications

If you have enabled notification on our desktop and mobile applications, we will push notifications through a push notification provider such as Apple Push Notification Service, Google Cloud Messaging or Windows Push Notification Services. You can manage your push notification preferences or deactivate these notifications by turning off notifications in the application or device settings.

Who we share service data with

Aarars MyCHS and third party sub-processors: In order to provide services and technical support for our products, the contracting entity within the Aarars MyCHS engages other group entities and third parties.

Employees and independent contractors: We may provide access to your service data to our employees and individuals who are independent contractors of the Aarars MyCHS entities involved in providing the services (collectively our “employees”) so that they can (i) identify, analyze and resolve errors, (ii) manually verify emails reported as spam to improve spam detection, or (iii) manually verify scanned images that you submit to us to verify the accuracy of optical character recognition. We ensure that access by our employees to your service data is restricted to specific individuals, and is logged and audited. Our employees will also have access to data that you knowingly share with us for technical support or to import data into our products or services. We communicate our privacy and security guidelines to our employees and strictly enforce privacy safeguards within the Aarars MyCHS.

Collaborators and other users: Some of our products or services allow you to collaborate with other users or third parties. Initiating collaboration may enable other collaborators to view some or all of your profile information. For example, when you edit a document that you have shared with other persons for collaboration, your name and profile picture will be displayed next to your edits to allow your collaborators to know that you made those edits.

Third-party integrations you have enabled: Most of our products and services support integrations with third-party products and services. If you choose to enable any third-party integrations, you may be allowing the third party to access your service information and personal information about you. We encourage you to review the privacy practices of the third-party services and products before you enable integrations with them.

Other cases: Other scenarios in which we may share information that are common to information covered under Parts I and II are described in Part III.

Retention of information

We hold the data in your account as long as you choose to use our Services. Once you terminate your our user account, your data will eventually get deleted from active database during the next clean-up that occurs once in 2 months. The data deleted from active database will be deleted from backups after few months.

General

Children’s personal information

Our products and services are not directed to individuals under 18. Aarars MyCHS does not knowingly collect personal information from children who are under 18 years of age. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe that a child under 18 years has provided personal information to us, please write to us with the details, and we will take the necessary steps to delete the information we hold about that child.

How secure is your information

At Aarars MyCHS, we take data security very seriously. We have taken steps to implement appropriate administrative, technical & physical safeguards to prevent unauthorized access, use, modification, disclosure or destruction of the information you entrust to us. If you have any concerns regarding the security of your data, we encourage you to check our Security Policy or write to us with any questions.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our management of your personal information in accordance with this Privacy Policy. If you have any questions or concerns about our privacy practices with respect to your personal information, you can reach out to our team by sending an email.

Disclosures in compliance with legal obligations

We may be required by law to preserve or disclose your personal information and service data to comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements.

Enforcement of our rights

We may disclose personal information and service data to a third party if we believe that such disclosure is necessary for preventing fraud, investigating any suspected illegal activity, enforcing our agreements or policies, or protecting the safety of our users.

Business Transfers

We do not intend to sell our business. However, in the unlikely event that we sell our business or get acquired or merged, we will ensure that the acquiring entity is legally bound to honor our commitments to you. We will notify you via email or through a prominent notice on our website of any change in ownership or in the uses of your personal information and service data. We will also notify you about any choices you may have regarding your personal information and service data.

Compliance with this Privacy Policy

We make every effort, including periodic reviews, to ensure that personal information you provide is used in conformity with this Privacy Policy. If you have any concerns about our adherence to this Privacy Policy or the manner in which your personal information is used, kindly write to us, We'll contact you, and if required, coordinate with the appropriate regulatory authorities to effectively address your concerns.

Notification of changes

We may modify the Privacy Policy at any time, upon notifying you through a service announcement or by sending an email to your primary email address. If we make significant changes to the Privacy Policy that affect your rights, you will be provided with at least 30 days' advance notice of the changes by email to your primary email address. If you think that the updated Privacy Policy affects your rights with respect to your use of our products or services, you may terminate your use by sending us an email within 30 days. Your continued use after the effective date of changes to the Privacy Policy will be deemed to be your agreement to the modified Privacy Policy. You will not receive email notification of minor changes to the Privacy Policy. If you are concerned about how your personal information is used, you should check back at website periodically.