Apprecio Tech Venture Pvt Ltd (“Apprecio”, “we”, “us”) provides an employee rewards platform primarily delivered as an ownable, self‑hosted codebase for deployment on customer infrastructure.

What we do by default

• Self‑hosted by default: Customer data (including employee profiles, activity, rewards, catalogs, and logs) stays on customer‑controlled infrastructure. We do not collect, store, or access this data in the ordinary course of business.

• No sale of personal data: We do not sell personal information or share it for targeted advertising.

When we may process limited data

• Business contact and account data: If an organization purchases a license, support, or implementation, we may process business contact details (name, work email, phone, company, role) provided directly to us for contracting, billing, and service delivery.

• Support diagnostics you choose to share: If you request support and send us logs, screenshots, or configuration snippets, we use them only to resolve your ticket and then delete them according to the retention section below.

• Optional hosted/subscription add‑ons (rare): If you opt into an Apprecio‑hosted portal or maintenance service, we may process the minimal account and usage data needed to operate that service (for example, admin login, SSO identifier, feature flags, error telemetry you explicitly enable).

• Payments: If paying by card through a payment processor, card data is handled by the processor; we receive transaction metadata only. If paying by invoice/bank transfer, we process remittance details for accounting.

How we use limited data

• To provide licensing, support, updates, security notices, invoicing, and implementation services.

• To comply with legal obligations and protect our platform, customers, and users from abuse or fraud.

• With consent where required (you can withdraw consent at any time; this may affect our ability to provide certain services).

What we share

• Service providers: We may share limited data with vetted providers (e.g., ticketing, email, billing, payment processing) under confidentiality and data‑protection terms. They may only use the data to provide contracted services to us.

• Legal and safety: We may disclose information if required by law or to protect rights, safety, and security.

• No third‑party advertising or brokering of personal data.

International transfers
If data is transferred across borders (for example, for support ticketing or email systems), we use appropriate safeguards. Self‑hosted customers control data residency for their end‑user data.

Security
We apply administrative, technical, and organizational measures appropriate to the limited data we process. For self‑hosted deployments, customers are responsible for securing their infrastructure, access controls, backups, and compliance.

Retention

• Business contact, billing, and support records: Retained only as long as necessary for contractual, operational, and legal requirements, then deleted or de‑identified.

• Support artifacts shared by customers (logs/screenshots/configs): Deleted after ticket closure on a rolling schedule, unless a longer period is required by law or necessary to resolve an ongoing issue.

Your choices and rights

• Access, correction, deletion: Contact us to request access to, correction of, or deletion of the limited data we hold as controller. For data in self‑hosted environments, the customer (your organization) controls and fulfills end‑user requests.

• Marketing opt‑out: Admins can opt out of non‑essential marketing. We may still send transactional and security notices.

Children
Our products are designed for business use and are not directed to children. We do not knowingly collect children’s data. If you believe a child’s data was provided to us, contact support to request deletion.

Cookies

• Apprecio‑hosted websites/portals may use minimal cookies for operations and basic analytics. You can control cookies via your browser settings.

• Product cookies in self‑hosted deployments are under the customer’s control.

Changes to this policy
We may update this policy from time to time. Material changes will be posted with a new effective date and, where required, notified through appropriate channels.