Comprehensive Privacy Policy

1. Introduction, Scope, and Definitions

Welcome to Celeris Solutions (“we,” “our,” “us,” or the “Company”). We are profoundly committed to protecting your privacy and ensuring that your personal information is handled in a safe, transparent, and legally compliant manner. This Comprehensive Privacy Policy explains in intricate detail how we collect, use, process, share, and protect your personal data when you interact with our entire digital ecosystem.

This policy applies globally to all of our services, which collectively include, but are not limited to:

• Our primary website located at https://celerissolutions.in and any associated subdomains, microsites, or landing pages.
• All mobile applications developed, published, or maintained by Celeris Solutions on the Apple App Store, Google Play Store, Huawei AppGallery, or any other third-party application marketplaces.
• Our web applications, Software as a Service (SaaS) platforms, backend application programming interfaces (APIs), and downloadable desktop software.
• Any other interactions you may have with us, including customer support communications, email newsletters, offline events, and social media engagements.

Definitions:

• “Personal Data” means any information relating to an identified or identifiable natural person.
• “Processing” means any operation performed on Personal Data, such as collection, recording, organization, structuring, storage, adaptation, or alteration.
• “Controller” refers to Celeris Solutions, the entity that determines the purposes and means of the processing of Personal Data.
• “Processor” refers to third-party entities processing Personal Data on our behalf.

By accessing or using any part of our Service, you explicitly agree to the collection, transfer, manipulation, storage, disclosure, and other uses of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Services immediately and uninstall any associated applications.

2. The Information We Collect

We collect information about you in a wide variety of forms, including information you provide to us directly, information we collect automatically through technology, and information we obtain from trusted third-party sources. The specific types of data collected depend heavily on the context of your interactions with us, the choices you make, and the specific products and features you use.

2.1 Information You Provide to Us Directly

We collect personal information that you voluntarily provide to us when registering for an account, expressing an interest in obtaining information about us or our products, participating in activities on the Services, filling out forms, or otherwise contacting us.

• Identity Data: First name, last name, maiden name, username or similar identifier, marital status, title, date of birth, and gender.
• Contact Data: Billing address, delivery address, residential address, email address, and various telephone numbers (mobile, work, home).
• Profile Data: Your username and password (hashed and salted), purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Financial Data: Bank account and payment card details. Please note that we do not store full credit card numbers or CVV codes on our servers; these are securely processed and tokenized by compliant third-party payment gateways (e.g., Stripe, PayPal, Razorpay) who are PCI-DSS compliant.
• User-Generated Content: Information, text, images, videos, audio recordings, or files you upload, post, or otherwise transmit via our Services.
• Employment Data: If you apply for a job with us, we collect your resume, work history, educational background, and professional references.

2.2 Information We Collect Automatically

When you access, use, or navigate our Services, we automatically collect certain information about your device and usage patterns. This information does not typically reveal your specific identity (like your name or contact information) but may include device and usage statistics. This helps us maintain the security and operation of our Services.

• Log and Usage Data: Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. This may include your IP address, browser type, device information, pages visited, timestamps, referral URLs, and exit pages.
• Device Data: Information about the computer, phone, tablet, or other device you use to access the Services. This may include hardware model, operating system version, unique device identifiers (e.g., IMEI, MAC address, IDFA, Android Ad ID, Firebase Installation ID), mobile network information, screen resolution, and language preferences.
• Location Data: We may collect information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. IP addresses can provide coarse geographical data (city/country level).

2.3 App-Specific Permissions, Sensors, and Sensitive Data

To provide specific, advanced functionalities within our mobile applications, we may request access to certain native device features. We will only access these features if you grant explicit, informed permission through your device's operating system dialogs:

• Camera and Photo Library: To allow you to take photographs, record videos, or upload existing media from your device for profile pictures, document scanning, augmented reality features, or content sharing.
• Microphone: To enable audio recording for voice messages, voice commands, speech-to-text features, or video recording.
• Precise Location (GPS): To provide location-based services, such as finding nearby facilities, tracking delivery, step-by-step navigation, or geo-tagging user-generated content. We may use GPS, Wi-Fi, and cellular network triangulation.
• Contacts/Address Book: To help you find friends, send invitations, or facilitate in-app communication. We do not store your contacts on our servers unless explicitly stated and required for the core functionality, and only with your explicit consent.
• Storage/Files: To save application data locally on your device (caching) to improve performance, or to read files you choose to upload to the Service.
• Bluetooth and Local Network: To connect to peripheral IoT devices, smart hardware, or communicate with other devices on your local Wi-Fi network.
• Motion Sensors: Accelerometer, gyroscope, and compass data to detect device orientation, movement, or step counting.
• Biometric Data: If you choose to use biometric authentication (e.g., Apple Face ID, Apple Touch ID, or Android Fingerprint/Face Unlock) to log into our apps, the biometric processing is handled entirely locally by your device's operating system secure enclave. We do not collect, transmit, or store your actual biometric templates on our servers. We only receive a cryptographic token confirming authentication success.

You can change your preferences and revoke these permissions at any time within your device's application settings (e.g., iOS Settings > Privacy, or Android Settings > Apps > Permissions), though doing so may severely limit or disable the functionality of the application.

2.4 Information from Third-Party Sources

We may obtain information about you from other sources, such as public databases, joint marketing partners, social media platforms, data brokers, and other third parties. Examples of the information we receive from other sources include:

• Social media profile information (if you log in using Facebook, Google, Apple, etc.).
• Marketing leads and demographic data from data aggregators.
• Search results and links, including paid listings (such as sponsored links).
• Fraud detection information from credit bureaus or identity verification services to protect our platform from malicious activity.

3. Tracking Technologies: Cookies, Pixels, and SDKs

We use various tracking technologies to collect and store information when you interact with our Services. These technologies help us remember you and your preferences, analyze how our Services are performing, and deliver relevant marketing.

3.1 Types of Tracking Technologies Used

• Strictly Necessary Cookies: These are essential for the website to function properly. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart, or make use of e-billing services.
• Analytical/Performance Cookies: They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works.
• Functionality Cookies: These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
• Targeting Cookies: These cookies record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.
• Web Beacons/Pixels: Small electronic files (also known as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics.
• Mobile SDKs: Software Development Kits embedded within our mobile applications that function similarly to cookies, allowing us to collect device data, crash reports, and usage analytics natively within the app environment without relying on a web browser.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

4. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. We use your data securely and only when we have a valid legal basis to do so.

4.1 Contractual Necessity

We process your data to fulfill our contract with you or to take steps at your request before entering into a contract:

• To facilitate account creation and logon process.
• To deliver the services, digital goods, or physical products you requested.
• To process your transactions, billing, and send related information, including confirmations and invoices.
• To send administrative information to you, such as product, service, and new feature information or changes to our terms, conditions, and policies.

4.2 Legitimate Business Interests

We process your data when it is reasonably necessary to achieve our legitimate business interests, as long as those interests do not outweigh your fundamental rights and freedoms:

• To monitor and analyze usage and trends to improve your experience.
• To protect our Services, including fraud monitoring, spam prevention, and cybersecurity threat detection.
• To enforce our terms, conditions, and policies for business purposes, legal reasons, and contractual obligations.
• To respond to user inquiries and offer technical support.
• To identify usage trends and determine the effectiveness of our promotional campaigns to tailor our offerings.
• To anonymize and aggregate data for statistical analysis and market research.

4.3 Explicit Consent

We process your data when you have given us specific, informed, and unambiguous consent to do so:

• To send you marketing and promotional communications (you can opt-out or unsubscribe at any time).
• To deliver targeted advertising to you based on your interests across the internet.
• To access specific device hardware (camera, precise GPS location, microphone) as permitted by you.
• To process particularly sensitive data, such as health data, if applicable to the specific app being used.

4.4 Legal Obligations

We process your data where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process:

• To respond to subpoenas or discovery requests.
• To maintain financial records for tax and accounting purposes.
• To assist law enforcement agencies in investigating criminal activities.

5. Disclosure and Sharing of Your Information

We do not sell your personal data. However, we may share information we have collected about you in certain situations to operate our business effectively. Your information may be disclosed as follows:

• Service Providers and Contractors: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. Examples include payment processing (Stripe, PayPal), data analysis (Google Analytics, Mixpanel), email delivery (SendGrid, Mailchimp), cloud hosting services (Amazon Web Services, Google Cloud Platform, Microsoft Azure), customer service platforms (Zendesk, Intercom), and marketing assistance. We mandate that these third parties safeguard your data and only use it for the intended purposes.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, restructuring, or acquisition of all or a portion of our business to another company. If a change happens to our business, the new owners may use your personal data in the same way as set out in this privacy policy.
• Affiliates and Subsidiaries: We may share your information with our affiliates, parent companies, or subsidiaries, in which case we will require those entities to honor this Privacy Policy stringently.
• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of Celeris Solutions, our employees, our users, or others, we may share your information as permitted or required by any applicable law, rule, or regulation.
• Third-Party Advertisers and Ad Networks: We may use third-party advertising companies (e.g., Google AdMob, Facebook Audience Network, AppLovin) to serve ads when you visit our Services. These companies may use information about your visits to our Services and other websites that are contained in web cookies in order to provide advertisements about goods and services of interest to you.

6. Data Retention and Deletion Lifecycle

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax laws, accounting rules, or other legal requirements). No purpose in this policy will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in immutable backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is technically possible.

6.1 Specific Retention Periods

• Account Data: Retained until you request deletion or after 24 months of total inactivity.
• Financial Logs: Retained for a minimum of 7 years to comply with international tax and accounting laws.
• Server Logs: Retained for 90 days for security auditing and bug tracking before being automatically purged.
• Marketing Data: Retained until you opt-out or unsubscribe.

7. Data Security Infrastructure

We have implemented robust, enterprise-grade technical and organizational security measures designed to protect the security of any personal information we process. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.2 or higher protocols (HTTPS).
• Encryption at Rest: Sensitive data, such as passwords and personal identifiers, are encrypted when stored in our databases using AES-256 encryption.
• Access Controls: We implement strict Role-Based Access Control (RBAC). Only authorized personnel who need access to perform their job duties (e.g., customer support, database administrators) are granted access to personal data.
• Regular Audits: We conduct periodic vulnerability scanning and penetration testing to identify and mitigate potential security flaws.
• Incident Response Plan: In the highly unlikely event of a data breach, we have procedures in place to quickly isolate the threat, notify relevant authorities, and inform affected users within legally mandated timeframes (e.g., 72 hours under GDPR).

However, despite our extensive safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Therefore, we cannot promise or guarantee that sophisticated threat actors will not be able to defeat our security. Transmission of personal information to and from our Services is at your own risk.

8. International Data Transfers

Celeris Solutions operates globally. Our primary servers are located in secure data centers. However, to ensure low latency and high availability, your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information, in other countries across the world.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We will, however, take all necessary measures to protect your personal information in accordance with this Privacy Policy and applicable law, including:

• Implementing the European Commission's Standard Contractual Clauses (SCCs) for transfers of personal information between our group companies and third-party processors.
• Ensuring the receiving country has an adequacy decision from the European Commission.
• Implementing supplementary technical measures such as strong encryption where appropriate.

9. Your Global Privacy Rights

9.1 GDPR & UK GDPR (European Rights)

If you are a resident of the EEA or UK, you have specific rights regarding your personal data under the General Data Protection Regulation:

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request that we correct any inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): Request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: Request that we limit the processing of your personal data.
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to our processing of your personal data, particularly for direct marketing purposes.
• Right to Withdraw Consent: Withdraw your consent at any time where we relied on it to process your data.

9.2 CCPA / CPRA (California Residents)

The California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide California residents with specific rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, the purposes, and the third parties with whom we shared it over the past 12 months.
• Right to Delete: Request the deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: Opt-out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising. (Note: We do not sell personal data for monetary value).
• Right to Limit Use of Sensitive Info: Limit the use of your sensitive personal information.
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights (e.g., we won't charge you different prices or provide lesser quality services).

9.3 Other US State Privacy Laws (VCDPA, CPA, CTDPA, UCPA)

Depending on your state of residence (e.g., Virginia, Colorado, Connecticut, Utah), you may have similar rights to access, correct, delete, and opt-out of certain processing of your personal data, including targeted advertising and profiling. We honor these rights uniformly across the United States.

9.4 App Store & Play Store Data Deletion Requirements

In strict compliance with Apple App Store and Google Play Store developer guidelines, we provide all users with a straightforward, accessible mechanism to completely delete their accounts and associated personal data.

How to initiate account deletion:

1. In-App Deletion: Log into the mobile application, navigate to the main Settings menu, select “Account” or “Profile Settings,” and tap the “Delete Account” button. Follow the on-screen confirmation prompts.
2. Web Deletion Form: Visit our website, log into your account dashboard, and select “Delete Account” from the security settings.
3. Manual Email Request: Send an email to info@celerissolutions.in from the email address exactly as it is associated with your account. Use the subject line “URGENT: Data Deletion Request”.

Upon receiving a verified deletion request, our automated systems will permanently erase your user profile, personal data, uploaded media, and historical activity logs within 30 days. Please note that data required for legal, tax, or fraud-prevention purposes may be anonymized or securely archived rather than immediately destroyed, as permitted by law.

10. Children's Privacy (COPPA Compliance)

We are deeply committed to protecting the privacy of children. Our Services are generally not designed for, intended to attract, or directed toward anyone under the age of 13 (or 16 in certain European jurisdictions). We do not knowingly solicit, collect, or maintain personal identifiable information from children under 13.

If you are a parent or legal guardian and you are aware that your child has provided us with personal data without your consent, please contact us immediately. If we become aware that we have collected personal information from a child under the age of 13 without verification of parental consent, we will take immediate and aggressive steps to purge that information from our active databases and servers.

11. Links to Third-Party Websites and Services

Our Services may contain links to external third-party websites, online services, or mobile applications that are not operated, controlled, or affiliated with us. Once you click on a third-party link, you will be directed to that third party's platform. We do not control these third-party platforms and are not responsible for their privacy policies, data collection practices, or content.

Any information you provide to third-party websites is governed entirely by their respective privacy policies. We strongly advise and encourage you to review the privacy policies of every single third-party website or service you visit before submitting any personal information to them.

12. Do-Not-Track (DNT) and Global Privacy Control (GPC)

Most modern web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Currently, no uniform technological standard for recognizing and implementing DNT signals has been finalized by the industry. As such, we do not currently respond to DNT browser signals. However, we are actively monitoring the development of the Global Privacy Control (GPC) specification and aim to support it as it becomes legally standardized.

13. Modifications and Updates to This Privacy Policy

We reserve the right to update, amend, or modify this Comprehensive Privacy Policy at any time and from time to time without prior individual notice. The updated version will be indicated by an updated “Effective Date” at the top of this document, and the revised version will be effective as soon as it is published on our website.

If we make material changes to this Privacy Policy that significantly alter your rights or the way we process your data, we will notify you either by prominently posting a notice of such changes on our homepage, displaying an in-app alert, or by directly sending you a notification via email. We encourage you to review this Privacy Policy frequently to remain informed of how we are protecting your information and fulfilling our privacy commitments.