Privacy Policy

Privacy Policy for CGaaS.ai

Effective Date: August 1st 2024 

​

Introduction

Welcome to CGaaS.ai, a revolutionary codeless development platform designed to empower enterprises in building, deploying, and scaling enterprise-grade software solutions with unprecedented speed and efficiency. CGaaS.ai is owned and operated by Evolza Holdings (Private) Limited, a company incorporated in Colombo, Sri Lanka. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of your personal information. Our commitment to safeguarding your privacy is in strict compliance with Sri Lankan law and reflects industry best practices for software as a service (SaaS), no-code, and low-code platforms.

​

1. Information We Collect

To deliver our services effectively, we collect several types of information:

• Personal Information:

  • Account Registration: When you create an account on CGaaS.ai, we collect personal details such as your name, email address, phone number, and payment information. This data is essential for user identification, account management, and transaction processing.

  • Billing Information: For subscription management, we may collect payment details, including credit/debit card numbers, billing addresses, and transaction history.

  • Customer Support: When you contact our support team, we collect the information you provide to assist with your inquiry, including your contact details and any additional information you choose to share.

• Usage Data:

  • Technical Data: We automatically collect information about your device, internet connection, and browsing behavior. This includes IP addresses, browser types, operating systems, device identifiers, and referring URLs.

  • Interaction Data: We monitor your interactions with our platform, including pages visited, features used, time spent on the platform, and actions taken (such as creating or modifying applications). This data helps us understand user behavior and improve the platform’s functionality and user experience.

• Cookies and Tracking Technologies:

  • Cookies: We use cookies to enhance your experience on our platform. Cookies are small data files stored on your device that help us recognize you when you return to our site. Cookies allow us to personalize content, remember your preferences, and monitor site performance.

  • Web Beacons: We may use web beacons (small graphic files) to monitor your interactions with our emails and website. This helps us measure the effectiveness of our communications and marketing campaigns.

  • Analytics Tools: We utilize third-party analytics tools, such as Google Analytics, to analyze how users interact with our platform. These tools collect information anonymously and report trends without identifying individual users.

2. How We Use Your Information

The information we collect serves several key purposes:

• Service Delivery and Enhancement:

  • Account Management: To authenticate users, manage subscriptions, and provide access to the CGaaS.ai platform. Accurate personal information ensures that you receive the appropriate level of service and support.

  • Platform Functionality: To operate and improve the CGaaS.ai platform, ensuring a seamless user experience. Usage data allows us to identify areas for improvement and optimize the platform's performance.

  • Customization: To tailor your experience based on your preferences and usage patterns. We may use your data to offer personalized recommendations, features, and content relevant to your needs.

• Communication:

  • Transactional Communications: To send you essential information about your account, subscriptions, and services, such as payment confirmations, account updates, and security alerts.

  • Marketing Communications: To inform you about new features, promotions, and updates to the platform. You can opt-out of marketing communications at any time by adjusting your account settings or following the unsubscribe link in our emails.

• Compliance and Legal Obligations:

  • Legal Compliance: To comply with legal obligations, including tax reporting, anti-money laundering regulations, and data protection laws. We may be required to retain certain information for a specified period to meet these obligations.

  • Dispute Resolution: To investigate and resolve disputes, enforce our terms of service, and protect the rights, property, and safety of CGaaS.ai, its users, and the public. This may include using your information in connection with legal proceedings or regulatory inquiries.

• Automated Decision-Making and Profiling:

  • Service Optimization: We may use automated decision-making tools to optimize your experience on CGaaS.ai. This includes personalizing content, managing risks (such as fraud detection), and improving service delivery.

  • User Profiling: We may create user profiles based on your usage data to offer personalized recommendations and services. You have the right to request human intervention, express your views, and contest decisions made by automated systems.

3. Sharing and Disclosure of Information

Your information may be shared with third parties under specific and controlled conditions:

• Service Providers:

  • Third-Party Vendors: We engage third-party vendors to provide services such as payment processing, data hosting, and customer support. These vendors have access to your information only to perform specific tasks on our behalf and are contractually obligated to protect your data.

  • Cloud Service Providers: We may store and process your data using cloud services located outside Sri Lanka. These providers are required to comply with our data protection standards, ensuring your data remains secure and confidential.

• Legal Compliance:

  • Government Authorities: We may disclose your information if required by law or in response to valid requests from public authorities, including law enforcement agencies and regulatory bodies. Such disclosures are made in accordance with Sri Lankan law and international data protection standards.

  • Legal Proceedings: If necessary, we may disclose your information in connection with legal proceedings, such as court orders, subpoenas, or other legal processes, to protect our rights or comply with judicial requirements.

• Business Transfers:

  • Mergers and Acquisitions: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the new owner as part of the transaction. We will ensure that the acquiring entity honors the commitments made in this Privacy Policy.

  • Business Restructuring: If Evolza Holdings undergoes a business restructuring, your data may be shared with the entities involved, provided that they adhere to equivalent data protection standards.

• Third-Party Links:

  • External Websites: Our platform may contain links to third-party websites that operate independently of CGaaS.ai. We are not responsible for the privacy practices or content of these sites. We encourage you to review the privacy policies of any third-party websites you visit before providing personal information.

4. Data Security

We take data security seriously and have implemented comprehensive measures to protect your information:

• Encryption: We use industry-standard encryption protocols (such as SSL/TLS) to secure your data during transmission between your device and our servers.

• Access Controls: We employ strict access controls to limit access to your data to authorized personnel only. This includes role-based access permissions, multi-factor authentication, and regular access audits.

• Data Storage: Your data is stored on secure servers with advanced security measures, including firewalls, intrusion detection systems, and regular security testing.

• Incident Response: We have a dedicated incident response team to handle any security breaches or data leaks. In the event of a breach, we will notify affected users and take immediate steps to mitigate any potential harm.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Retention Periods: Personal data will be retained for the duration of your relationship with CGaaS.ai and for any additional period required by law, regulatory obligations, or contractual obligations. This includes retaining data for audit purposes, dispute resolution, and legal compliance.

• Data Deletion: Upon termination of your account or the expiration of the retention period, we will securely delete or anonymize your data. Anonymization ensures that the data can no longer be associated with you while retaining its utility for analytical purposes.

• Backup and Recovery: We maintain regular backups of your data to ensure continuity of service. These backups are stored securely and are subject to the same data protection measures as live data.

6. Your Rights

As a user of CGaaS.ai, you are entitled to the following rights under applicable data protection laws:

• Right of Access: You have the right to request access to the personal information we hold about you, including details about how we process your data and who we share it with. We will provide this information within a reasonable time, subject to any applicable legal exemptions.

• Right to Rectification: You can request that we correct any inaccuracies or incomplete information in your personal data. We will update your information promptly upon receiving your request.

• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal information under certain circumstances, such as when it is no longer needed for the purposes for which it was collected or if you withdraw your consent. We will assess your request and, where applicable, delete your data in compliance with legal requirements.

• Right to Restriction of Processing: You can request that we limit the processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to its processing. We will continue to store your data but will only process it under limited conditions.

• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer your data to another service provider, where technically feasible.

• Right to Object: You may object to the processing of your personal data for direct marketing purposes or when processing is based on our legitimate interests. We will respect your objection and cease processing your data unless we have compelling legitimate grounds to continue.

• Rights Related to Automated Decision-Making: If you are subject to a decision based solely on automated processing, including profiling, that has legal effects or significantly impacts you, you have the right to request human intervention and to challenge the decision.

To exercise any of these rights, please contact us at [Insert Contact Information]. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

7. International Data Transfers

As CGaaS.ai operates under Sri Lankan jurisdiction, your personal data may be transferred to and processed in Sri Lanka or other jurisdictions where we or our service providers operate. By using our platform, you consent to the transfer of your data to these jurisdictions, recognizing that data protection laws in these countries may differ from those in your country of residence.

• Data Protection Standards: We will take all necessary measures to ensure that your personal data is treated securely and in accordance with this Privacy Policy, regardless of the location of the data processing.

• Cross-Border Data Transfers: Where necessary, we will implement appropriate safeguards, such as data protection agreements or standard contractual clauses, to ensure that cross-border data transfers comply with applicable data protection laws.

8. Children's Privacy

Our platform is intended for use by individuals aged 18 and above. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected such information, we will promptly take steps to delete it from our systems.

• Parental Consent: If you believe that we may have collected information from a child under 18 without parental consent, please contact us immediately so that we can take appropriate action.

9. Changes to This Privacy Policy

Evolza Holdings (Private) Limited reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be effective immediately upon posting the updated policy on our website.

• Notification of Changes: We will notify you of significant changes to this Privacy Policy via email or through a prominent notice on our platform. Your continued use of CGaaS.ai following the posting of changes constitutes your acceptance of the revised policy.

• Review and Updates: We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at:

Evolza Holdings (Private) Limited
Colombo, Sri Lanka
support@evolza.org