Privacy Policy

Last Updated: December 2025

This Privacy Policy explains how Zykoon Technologies Pvt Ltd ("Company", "We", "Us") collects, uses, stores, and protects personal data when you use Intellicrew Elevate, our AI-powered Learning & Compliance SaaS platform.

1. Company Information

Zykoon Technologies Pvt Ltd
Orchid Business Park, Sector 48, Gurgaon, India
Email: support@zykoontech.com

2. Scope of This Privacy Policy

This policy applies to all users of Elevate, including Super Admins, Admins, and Learners. It covers data collected through the platform UI, PWA/mobile, analytics, email notifications, and AI processing.

3. Data We Collect

3.1 Personal Information

• Name, employee ID, email ID, phone (optional)
• Department, role, location, reporting manager
• User activity logs, course progress, quiz attempts

3.2 Technical Information

• IP address, device metadata, browser details
• Login timestamps, session identifiers
• Error logs and performance diagnostics

3.3 Content & Interactions

• Uploaded documents, policies, videos, and course materials
• Survey responses, quiz answers, learning path activities
• Converse / Converse Mini chat inputs

3.4 AI-Processed Data

AI agents may process:

• Course titles, outlines, policy text, training prompts
• User questions submitted to AI assistants
• Role/skill attributes for recommendations

We do not train AI models on customer data. AI processing occurs via Azure-hosted models worldwide for inferencing only.

4. Purpose of Processing

We process data to:

• Provide learning, policy, and compliance services
• Deliver analytics and dashboards
• Enable AI-driven content generation and support
• Support PoSH compliance reporting & audit trails
• Ensure platform security and detect misuse
• Send reminders, alerts, and service messages

5. Legal Basis (DPDP Act Alignment)

We process data based on:

• Consent obtained by the employer (Data Fiduciary)
• Purpose limitation related to L&D and compliance
• Legitimate use for system security and fraud prevention

6. Data Storage & International Processing

All user data for India-based clients is stored in the Azure India Region. For global clients, data is stored in the region selected during onboarding, subject to platform availability. AI inferencing may occur in Azure's global regions. However:

• No personal data is permanently stored outside India
• Cross-border transfers occur only for processing
• All transmissions are encrypted (TLS 1.2+)

7. Data Sharing

We do not sell or rent data. Limited sharing occurs with:

• Azure Cloud (hosting and AI inference)
• Email gateways for sending communication
• Razorpay for billing and invoicing

All partners follow contractual, confidentiality, and security obligations.

8. AI Transparency & User Rights

Under DPDP Act principles, users have the right to:

• Know when AI-generated content is used
• Access and correct inaccurate data
• Request deletion of personal data (via employer)
• Review and validate AI-generated drafts

9. Data Retention

Retention timelines:

• Learning records: retained through contract period
• AI prompts: retained until the end of the customer's contract period or earlier upon explicit deletion request from the Customer
• PoSH compliance logs: retained as legally required

10. Security Measures

• Encryption at rest as provided by Azure-managed infrastructure (region-dependent security controls)
• Strict RBAC and token validation for every request
• Audit trails for admin actions
• Periodic internal vulnerability checks

11. Customer Responsibilities

• Provide lawful consent notices to employees
• Ensure secure passwords and account usage
• Deactivate users who exit the organization
• Validate legal correctness of AI drafts

12. Data Breach Protocol

If a breach occurs, we will:

• Notify the employer promptly
• Provide severity details and mitigation steps
• Assist with regulatory reporting duties

13. Cookies & Tracking

Only essential cookies are used for authentication and performance. No advertising or profiling cookies are used.

14. Children's Data

Elevate is not intended for individuals under 18. Customers must not upload minors' data.

15. Changes to This Policy

We may update the Privacy Policy periodically. Material changes will be communicated via email or in-app notification.

16. Contact

For concerns or requests:
Zykoon Technologies Pvt Ltd
Orchid Business Park, Sector 48, Gurgaon, India
Email: support@zykoontech.com