Privacy Policy

1. Introduction

ThinkSaas Technologies Private Limited, operating under the brand "isaga" ("isaga", "we", "us", "our"), is committed to protecting the privacy of the people whose personal data we handle. This Privacy Policy explains what personal data we collect, where we get it from, why we use it, who we share it with, how long we keep it, and what rights you have. This Policy applies to our website, our enquiry and communication channels, and our business relationships with prospective and existing customers. It forms part of our Terms and Conditions. We act as a Data Fiduciary in respect of the personal data described in this Policy. Where we handle a customer's own data in the course of delivering our services, the terms of the applicable services agreement govern that handling.

2. Who We Are and How to Reach Us

The entity responsible for your personal data is ThinkSaas Technologies Private Limited (CIN: U47413KA2025PTC205621), with its registered office at 4141, Sobha Arena The Park, Kanakapura, Thalaghattapura PO, Doddakallasandra, Bangalore, Karnataka 560062, India. You can reach us at team@isaga.ai. Details of our Grievance Officer are set out in Clause 14.

3. Personal Data We Collect

3.1 Data you give us directly

When you submit an enquiry, correspond with us, or speak with our team, we may collect:

• Identity and role data: your name, job title, designation, and the organisation you represent.
• Contact data: business email address, telephone number, and postal or office address.
• Enquiry content: the requirement, question, or message you share with us, and any documents you choose to send.
• Communication records: notes, summaries, and records of our calls, emails, and meetings with you.

3.2 Data collected automatically

When you visit our website we may collect technical data automatically, for the limited purposes of operating the site, keeping it secure, and understanding how it is used. This includes your IP address, approximate location derived from it, browser and device type, operating system, referring page, pages viewed, and time spent.

3.3 Data from other sources

We also obtain business contact data about professionals in relevant roles from sources other than you directly. These sources include publicly available information, professional and business networking websites, company websites and public filings, industry events and trade shows, referrals, and licensed third-party business information providers. Where we obtain your data in this way, we use it only to make contact with you in a professional capacity about our services. On first contact we will tell you where we obtained your details if you ask, and you may object or ask us to stop at any time as set out in Clause 13.

3.4 Data we do not seek

We do not intentionally collect financial account details, government identification numbers, or any special category of personal data such as health, biometric, religious, or political information. If such information reaches us unintentionally, we delete it.

4. Why We Use Your Personal Data

We use personal data only for specific, lawful purposes. The table below sets these out.

PURPOSE DATA USED BASIS Respond to your enquiry and understand your requirement Identity, contact, enquiry content Consent Contact you by telephone, email, or messaging to discuss our services Identity, contact, communication records Consent Make first contact with professionals in relevant roles Business contact data from the sources in Clause 3.3 Legitimate use Prepare proposals, quotations, and commercial terms Identity, contact, enquiry content Contract Deliver, support, and administer our services to customers Identity, contact, communication records Contract Send updates, offers, and marketing about our services Identity, contact, preferences Consent Operate, secure, and improve our website Technical and usage data Legitimate use Meet legal, tax, accounting, and regulatory obligations Identity, contact, transaction records Legal obligation

If you submit an enquiry on our platform, you agree that we will store your data in our database and that our team may contact you by telephone, email, or messaging to discuss it. We do not use your personal data for any purpose that is incompatible with those listed above. If we need to use it for a new purpose, we will tell you and, where required, obtain your consent.

5. Consent and Withdrawal

Where we rely on your consent, that consent is free, specific, informed, unconditional, and given by a clear affirmative action. We tell you what data we are collecting and why before you give it. You may withdraw your consent at any time, at no cost, by writing to us at team@isaga.ai or by using the unsubscribe or opt-out mechanism in any communication we send. Once you withdraw, we will stop the relevant processing within a reasonable period and, where no other lawful basis applies, delete or anonymise the data. Withdrawal does not affect the lawfulness of processing carried out before it.

6. How We Contact You

We may contact you by telephone, email, or messaging for the purposes set out in Clause 4. Where we make commercial communications by telephone or SMS to Indian numbers, we do so in accordance with the applicable telecom commercial communication regulations and preference registers. You may ask us to stop marketing or promotional contact at any time without giving a reason. We will continue to send communications that are necessary to perform an agreement we have with you, or that we are required by law to send.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies such as local storage identifiers. Some are strictly necessary for the site to function and to keep it secure. Others are optional and help us understand how the site is used so we can improve it. Optional cookies, including analytics and marketing cookies, are set only with your consent. You may accept, reject, or withdraw consent at any time through the cookie settings on our site or through your browser settings. Disabling cookies may affect parts of the website.

8. Sharing Your Personal Data

We may share personal data with:

• Our personnel who need it to respond to you or to deliver our services.
• Service providers and processors who support our operations, including cloud hosting, communication, customer relationship management, analytics, telephony, and accounting providers, under written contracts that require them to protect the data and use it only on our instructions.
• Cloud providers, distributors, and program partners, to the extent necessary to set up, provision, or support the services you have engaged us for.
• Professional advisers such as auditors, lawyers, and insurers, where reasonably required.
• Government, regulatory, tax, or judicial authorities, where we are required to disclose under applicable law.
• An acquirer or successor entity, in connection with a merger, acquisition, or transfer of business, subject to equivalent protection. We do not sell your personal data, and we do not share it for any third party's independent marketing purposes.

9. Transfers Outside India

Some of our service providers and cloud infrastructure may be located outside India. Where personal data is transferred outside India, we transfer it only to jurisdictions permitted under applicable Indian law, and we require the recipient to apply protections consistent with this Policy through written contractual commitments.

10. Retention

We keep personal data only as long as is necessary for the purpose it was collected for, or as required by law. In practice this means:

• Enquiry and prospect data: retained while there is an active or reasonably foreseeable business interest, and reviewed periodically.
• Customer data: retained for the duration of the engagement and thereafter for the period required under tax, accounting, and limitation laws.
• Technical and website data: retained for a short operational period for security and analytics. When personal data is no longer required, we delete it or irreversibly anonymise it, except where retention is required by law.

11. Security

We apply reasonable technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse. These include access controls based on role, encryption of data in transit, logging and monitoring, vendor due diligence, and staff awareness. No system is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as required under applicable law.

12. Automated Decision-Making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Where we use automated tools to organise, prioritise, or summarise information, the outcome is always reviewed by a person before it affects you.

13. Your Rights

Subject to applicable law, you have the right to:

• Obtain a summary of the personal data we hold about you and how we process it.
• Obtain the identities of other entities with whom we have shared your data, and a description of what was shared.
• Request correction, completion, or updating of inaccurate or incomplete data.
• Request erasure of your data, where it is no longer needed for the purpose it was collected for and we are not required to keep it.
• Withdraw your consent, including asking us to stop calling, emailing, or messaging you.
• Nominate another individual to exercise your rights in the event of your death or incapacity.
• Raise a grievance with us, and thereafter with the Data Protection Board of India. To exercise any of these rights, write to us at team@isaga.ai. We may ask you to verify your identity before we act. We will respond within the timelines prescribed under applicable law. You are responsible for providing information that is accurate and complete, and for not impersonating another person when exercising these rights.

14. Grievance Redressal

If you have a concern about how we handle your personal data, please contact our Grievance Officer. We will acknowledge your grievance promptly and respond within the timelines prescribed under the Digital Personal Data Protection Act, 2023.

GRIEVANCE OFFICER [Name, Designation] EMAIL [grievance email] ADDRESS 4141, Sobha Arena The Park, Kanakapura, Thalaghattapura PO, Doddakallasandra, Bangalore, Karnataka 560062, India RESPONSE TIME As prescribed under applicable law

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India.

15. Children

Our website and services are directed at business users. We do not knowingly collect the personal data of any individual below the age of 18 years. If we become aware that we have done so, we will delete it.

16. Changes to This Policy

We may update this Policy to reflect changes in our processing or in the law. The updated version will be published on our website with a revised version number and effective date. Where a change is material, we will take reasonable steps to bring it to your attention.

17. Contact

For any question about this Policy or how we handle your personal data, write to us using the details below.

ThinkSaas Technologies Private Limited Brand: isaga 4141, Sobha Arena The Park, Kanakapura, Thalaghattapura PO, Doddakallasandra, Bangalore, Karnataka 560062, India Email: team@isaga.ai Website: https://isaga.ai