Privacy Policy

This Privacy Policy is effective as of May 1, 2026. Your privacy is extremely important to us. To better protect you, we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. This Privacy Policy relates to information collected by Kudoby Technologies Pvt. Ltd. - Graditto (referred to in this Privacy Policy as "Graditto", "we", "us" or "our") through your use of our website and our Services, features, browser extensions, integrations, API, mobile or desktop applications, information available on our website or app, or when you otherwise interact with us (which are collectively referred to in this Privacy Policy as the "Graditto Service"). If you do not agree to our use of your personal data in line with this policy, please do not use the Graditto Services. Scope of this Privacy Policy Please be aware that this Privacy Policy does not govern all the information Graditto may process. Our commitment to customers and service providers is governed by a separate Data Protection Addendum. This Privacy Policy is also incorporated into and governed by our Terms of Use. Any capitalized words we use in this Privacy Policy that we haven't defined here will have the same meaning that they're given in our Terms of Use. Our commitments to employees are governed by our internal employment policies. In all instances, we are committed to transparency with our customers, employees, and to protecting your data privacy. What Information Do We Collect? You will be required to establish an account in order to take advantage of certain features of the Graditto Service. If you wish to establish an account you will be required to provide us with information (including personally identifiable information and non-personally identifiable information). In addition, we may obtain your personally identifiable information from you if you identify yourself to us by sending us an e-mail with questions or comments. Depending on your use of the Graditto Service, we collect two types of information: personally identifiable information and non-personally identifiable information. Personally Identifiable Information Personally identifiable information identifies you or can be used to identify or contact you. Examples of personally identifiable information may include your name, IP address, company name, job title, address, e-mail address, telephone number, and billing and payment information. Non-Personally Identifiable Information Non-personally identifiable information is information, any single item of which, by itself, cannot be used to identify or contact you, which may include demographic information (such as age, profession, company industry, gender, current location, or pin code/zip code), IP addresses, browser types, domain names, and statistical data involving the use of the Graditto Service. Certain non-personally identifiable information may be considered a part of your personally identifiable information if it were combined with other identifiers in a way that enables you to be identified. But the same pieces of information may be considered non-personally identifiable information when they are taken alone or combined only with other non-personally identifiable information (for example, your account preferences). Why Do We Need Your Personal Data? We do not sell any data, including your personal data. We will only collect and process your personal data in accordance with applicable data protection and privacy laws, including the Indian Digital Personal Data Protection Act (DPDPA), the GDPR, and the CCPA where applicable. We need to collect and process certain personal data in order to provide you with access to Graditto. If you registered with us, you will have been asked to check a tick box indicating your agreement to provide this data in order to access our services. This consent provides us with the legal basis we require under applicable law to process your data. You maintain the right to withdraw such consent at any time. Information we collect automatically when you use the Services: We collect information about you when you use our Services, such as browsing our websites and taking certain actions within the Services, including: Your use of the Services: We keep track of certain information about you when you visit and interact with any of our Services. This information includes the features you use; the tasks, projects, teams and other links you click on; the type, size and filenames of attachments you upload to the Services; frequently used search terms; and how you interact with others on the Services. We also collect information about the teams and people you work with and how you interact with them, like who you collaborate and communicate with most frequently. Device and Connection Information: We collect information about your computer, phone, tablet, or other devices you use to access the Services. This device information includes your connection type and settings when you install, access, update, or use our Services. We also collect information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers, and crash data. We use your IP address and/or country preference in order to approximate your location to provide you with a better Service experience. How much of this information we collect depends on the type and settings of the device you use to access the Services. Cookies and Other Tracking Technologies: Graditto and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across different Services and devices. For more information, please see our Cookies and Tracking policy. Log files: We collect non-personally identifiable information through our Internet log files, which record data such as user IP addresses, browser types, domain names, and other anonymous statistical data involving the use of the Graditto Service. This information may be used to analyze trends, to administer the Graditto Service, to monitor the use of the Graditto Service, and to gather general demographic information. We may link this information to personally identifiable information for these and other purposes, such as personalizing your experience on the Graditto Service, and evaluating the Graditto Service in general. Information we receive from other sources We receive information about you from other Service users, from third party services, and from our business and channel partners. Other users of the Services: Other users of our Services may provide information about you when they submit content through the Services. For example, you may be mentioned by someone else on a task, or a team member may upload content about you to Graditto. We also receive your email address from other Service users when they provide it in order to invite you to the Services. Similarly, an administrator may provide your contact information when they designate you as another administrator for a task, team, or an Enterprise or Unlimited Account. Other services you link to your account: We receive information about you when you or your administrator enable third-party apps or integrate or link a third-party service with our Services. For example, you or your administrator may also integrate our Services with other services you use, such as to allow you to access, store, share and edit certain content from a third-party through our Services. The information we receive when you link or integrate our Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what data may be disclosed to us or shared with our Services. Other partners: We may receive information about you and your activities on and off the Services from third-party partners, such as advertising and market research partners who provide us with information about your interest in, and engagement with, our Services and online advertisements, or where the information is publicly available online or through your device or browser data. Graditto's use of information received, and Graditto's transfer of information to any other app, from Google APIs will adhere to Google's API Services User Data Policy, including the Limited Use Requirements. Your Rights Opt-out: You may contact us anytime to opt-out of: (i) direct marketing communications; (ii) automated decision-making and/or profiling; (iii) our collection of sensitive personal data, if any; or (iv) any new processing of your personal data that we may carry out beyond the original purpose. Please note that your use of some of the platform may be ineffective upon opt-out. Access: You may access the data we hold about you at any time by exporting your Workspace/Team's data (if you are an admin) or by contacting us directly. Amend: You can also contact us to update or correct any inaccuracies in your personal data. Move: Your data is portable – i.e., you have the flexibility to move your data to other service providers as you wish. Erase and Forget: In certain situations, for example when the data we hold about you is no longer relevant or is incorrect, you can request that we erase your data. You may contact us at support@graditto.com or via mail or courier at C208, Sec-6, Lane No. 7, HMH JN., RAJ., IN 335512 anytime for any other questions you may have about your personal data and our use of such personal data. Where Will Data Be Transferred? Your data, including personal data that we collect from you, may be transferred to, stored at, and processed by us and other third parties outside the country in which you reside, including, but not limited to India and the United States, where data protection and privacy regulations may vary. By using our platform, you agree to this transfer, storing or processing subject to the terms of our Data Protection Addendum. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy. Except as otherwise provided in our Data Protection Addendum, your team's project and task data will never be transferred to third parties. The only data we share with third parties is for analytics, error tracking, and marketing. How Long Will Data Be Stored? We will only retain your personal data as long as reasonably required for you to use the Site/Application(s) and/or to provide you with the Services unless a longer retention period is required or permitted by law. Do We Collect Information from Children Under 16 Years of Age? We are committed to protecting the privacy of children. The Graditto Service is not designed for or directed to children under the age of 16. We do not collect personally identifiable information from any person we actually know is under the age of 16. What Do We Do With The Information We Collect? In general, we use the information collected to provide you with a great overall experience using the Graditto Service, to help us understand who uses the Graditto Service, for internal operations such as operating and improving the Graditto Service, to contact you for customer service and billing purposes, and to facilitate the delivery of our platform notifications in some cases. We use your information to send you a welcome e-mail after you create an account, when you are invited to Graditto, or when you sign up for a demo, webinar or to receive our newsletter. We may also use your information to send other communication related to the Graditto website and to give you the option to reactivate an inactive account. When required, we will always give you the option to unsubscribe in any email we send you. We may also use the information gathered to perform statistical analysis of user behavior or to evaluate and improve the Graditto Service. We may link some of this information to personally identifiable information for internal purposes or to improve your experience with the Graditto Service. When Do We Disclose Information To Third Parties? Except as set forth in this Privacy Policy, the Cookie Policy, or the Graditto Data Protection Addendum or as specifically authorized by you, we will not disclose any information to third parties outside of Graditto. Laws and Legal Rights We may disclose your information (including personally identifiable information) if we believe in good faith that we are required to do so in order to comply with an applicable statute, regulation, rule or law, a subpoena, a search warrant, a court or regulatory order, or other valid legal process. We may disclose personally identifiable information in special circumstances when we have reason to believe that disclosing this information is necessary to identify, contact, or bring legal action against someone who may be violating our Terms of Service, to detect fraud, or to protect the safety and/or security of our users, the Graditto Service or the general public. Outside Contractors We may employ independent contractors, vendors and suppliers (collectively, "Outside Contractors") to provide specific services and products related to the Graditto Service, such as cloud hosting, payment processing, fraud screening, and notification delivery services. In the course of providing products or services to us, these Outside Contractors may have access to information collected through the Graditto Service, including your personally identifiable information. We require that these contractors agree to (1) protect the privacy of your personally identifiable information consistent with this Privacy Policy or the Data Protection Addendum and (2) not use or disclose your personally identifiable information for any purpose other than providing us with the products or services for which we contracted or as required by law. Sale of Business We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of the assets of Graditto or any of its Corporate Affiliates (as defined herein), or that portion of Graditto or any of its Corporate Affiliates to which the Service relates, or in the event that we discontinue our business or file a petition or have filed against us a petition in bankruptcy, reorganization or similar proceeding, provided that the third party agrees to adhere to the terms of this Privacy Policy. Affiliates We may disclose information (including personally identifiable information) about you to our Corporate Affiliates. For purposes of this Privacy Policy, "Corporate Affiliate" means any person or entity which directly or indirectly controls, is controlled by or is under common control with Graditto, whether by ownership or otherwise. Any information relating to you that we provide to our Corporate Affiliates will be treated by those Corporate Affiliates in accordance with the terms of this Privacy Policy. Does this Privacy Policy apply when I link to other websites or services? The Graditto Service may provide you with access to other websites and services. Please be aware that we are not responsible for the privacy practices of any websites or services other than the Graditto Service. We encourage you to read the privacy policies or statements of each and every such website and service. This Privacy Policy applies solely to information collected by us through the Graditto Service. Is the information collected through the Graditto Service secure? We take precautions to protect the security of your information. We have physical, electronic, and managerial procedures to help safeguard, prevent unauthorized access, maintain data security, and correctly use your information. However, neither people nor security systems are foolproof, including encryption systems. In addition, people can commit intentional crimes, make mistakes or fail to follow policies. For more information about our policies and standards used to ensure security, please see our Security Policy. Could my Information be Transferred to other Countries? Personally identifiable information collected on the Graditto Service may be transferred from time to time to our offices or personnel, or to third parties, located throughout the world, and the Graditto Service may be viewed and hosted anywhere in the world, including countries that may not have laws of general applicability regulating the use and transfer of such data. To the fullest extent allowed by applicable law, by using the Graditto Service and submitting such information on it, you voluntarily consent to the trans-border transfer and hosting of such information. To the fullest extent allowed by applicable law, if you are a User accessing the Graditto Service from a jurisdiction with laws or regulations governing personal data collection, use, and disclosure that differ from those of India, please be advised that all aspects of the Graditto Service are governed by the internal laws of India, regardless of your location. Regional Privacy Rights (Including CCPA, GDPR & DPDPA) Graditto complies with the Indian Digital Personal Data Protection Act (DPDPA), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and the General Data Protection Regulation (GDPR) where applicable. If these regulations apply to your personal information, this Privacy Policy provides you with information regarding how to receive information about our privacy practices, as well as request access to, correction of, and deletion of your personal information. Graditto does not sell the personal information we collect. We only share your personal information as described in this Privacy Policy. California, European, and Indian consumers or users may make a request pursuant to their rights under their applicable local law by contacting support@graditto.com. What Choices Do I Have Regarding the Collection, Disclosure, and Distribution of Personally Identifiable Information? Except as otherwise described in this Privacy Policy or in the Data Protection Addendum, we will only use personally identifiable information for the purposes described above, or as otherwise disclosed at the time we request such information from you. You must "opt in" and give us permission to use your personally identifiable information for any other purpose. You may also change your preference and "opt out" of receiving certain marketing communications from us by clicking the unsubscribe link included at the bottom of all such communications or by contacting us via email. Do Not Track The term "Do Not Track" refers to an HTTP header offered by certain web browsers to request that websites refrain from tracking the user. We take no action in response to Do Not Track requests. Can I update or correct my personally identifiable information? The rights you have to request updates or corrections to the information Graditto collects depend on your relationship with Graditto. Customers have the right to request the restriction of certain uses and disclosures of personally identifiable information. You can contact us in order to (1) update or correct your personally identifiable information, (2) change your preferences with respect to communications and other information you receive from us, or (3) delete the personally identifiable information maintained about you in our systems (subject to the following paragraph), up to and including by deleting your account. Updates, corrections, changes, and deletions will have no effect on other information that we maintain, or information that we have provided to third parties in accordance with this Privacy Policy prior to such request. To protect your privacy and security, we may take reasonable steps to verify your identity before granting profile access or making corrections. You should be aware that it is not technologically possible to remove each and every record of the information you have provided to us from our system due to backups. Promptly after receiving your request, all personal information stored in databases we actively use, and other readily searchable media will be updated, corrected, changed, or deleted, as appropriate, as soon as and to the extent reasonably and technically practicable. If you are an end user in a Workspace not owned by you and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization who owns your Workspace. How will I know if there are any changes to this Privacy Policy? We may revise this Privacy Policy from time to time. We will not make changes that result in significant additional uses or disclosures of your personally identifiable information without notifying you of such changes via email. We may also make non-significant changes to this Privacy Policy for which an email is not required. We encourage you to check this page periodically for any changes. Your continued use of the Graditto Service following the posting of non-significant changes to this Privacy Policy constitutes your acceptance of those changes. Whom Do I Contact If I Have Any Privacy Questions? If you have any questions or comments about this Privacy Policy or feel that we are not abiding by the terms of this Privacy Policy, please contact our Privacy Agent in any of the following ways: By email: support@graditto.com By postal mail or courier: ATTN: Privacy Agent Graditto C208, Sec-6, Lane No. 7 HMH JN., RAJ., IN 335512 Subject to the next paragraph, we ask that you not send or disclose to us any sensitive personal data (e.g., social security numbers, Aadhaar or government IDs, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Graditto Services. If you send or disclose any sensitive personal data to us when you submit content to the Graditto Services, you consent to our processing and use of such data in accordance with this policy. By using the Graditto Service, you signify your acceptance of this Privacy Policy.