Privacy Policy

1. Information We Collect

1.1 Account Information

When you register, we collect your name, email address, and password (stored as a one-way hash). We do not store plain-text passwords.

1.2 Organizational Assessment Data

When your team members complete the diagnostic survey, we collect their responses. Survey responses are stored at the aggregate level. We do not link individual responses to individual respondents unless the respondent voluntarily provides their name.

1.3 Documents You Upload

Pro and Enterprise users may upload documents (P&L statements, org charts, audit reports, etc.) to the AI Workspace. These documents are stored securely and used only to generate insights within your workspace.

1.4 AI Workspace Conversations

Conversations with the Enpower AI in your workspace are stored so you can refer back to them. They are not used to train AI models and are not shared with other users or tenants.

1.5 Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This is used for security, debugging, and improving the platform.

1.6 Payment Information

Payments are processed by Razorpay. We do not store card numbers or bank account details. We receive a transaction record containing the amount, plan, and status.

2. How We Use Your Information

• To provide, operate, and improve the Enpower Org DNA platform
• To generate organizational diagnostic reports and AI recommendations
• To send transactional emails (account confirmation, password reset, assessment notifications)
• To respond to your support requests and enquiries
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations under Indian law

We do not sell your personal information to third parties. We do not use your data for advertising.

3. Data Sharing

We share data only in the following limited circumstances:

• Service providers: We use Razorpay (payments), Microsoft (email delivery via Graph API), and Oracle Cloud (hosting). Each provider is bound by their own privacy policies.
• Collaborators: If you invite team members to your company workspace, they will have access to reports and assessment data for that company only.
• Legal requirements: We may disclose data if required by law, court order, or government authority in India.
• Business transfers: In the event of a merger or acquisition, user data may be transferred. We will notify you before this occurs.

4. Data Storage and Security

Your data is stored on Oracle Cloud infrastructure in Mumbai, India. We use industry-standard encryption (TLS 1.2+) in transit and AES-256 encryption at rest. Access to production data is restricted to authorized personnel only.

We perform daily automated backups. In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

5. AI and Data Training

Your survey responses, uploaded documents, and AI workspace conversations are never used to train AI models — neither our own nor those of any third-party AI provider. Your data is used solely to generate responses within your session and workspace.

6. Data Retention

• Active accounts: Data is retained for the duration of your subscription.
• Cancelled accounts: We retain data for 90 days after cancellation, then permanently delete it.
• Survey responses: Retained as long as the company workspace exists.
• Uploaded documents: Retained until you delete them or your account is closed.

7. Your Rights

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent to any optional data processing

To exercise any of these rights, email us at info@enpower.pro. We will respond within 30 days.

8. Cookies

We use essential cookies to maintain your login session and store your theme preference. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

9. Children's Privacy

The platform is intended for business use only. We do not knowingly collect information from individuals under 18 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform.