IESL PRIVACY POLICY
To use IESL products and services effectively, customers and users may provide contact
information such as name, email address and mobile number. Depending on the product and
the customer's use of it, the customer may also upload or process information relating to
its customers, vendors, employees, agents, students, business contacts and transactions.
The privacy and confidentiality of such information is important to IESL. This Privacy
Policy explains how IESL may collect, use, process, store, disclose and protect information
in connection with its products and services.
Depending on the deployment model purchased or selected, data may be hosted on infrastructure
operated by or for IESL, on authorised third-party cloud or hosting infrastructure, on
customer-controlled cloud infrastructure, or on customer-managed on-premise infrastructure.
Accordingly, not all customer data is necessarily stored on servers directly owned or
controlled by IESL.
Our Core Privacy Commitment
IESL does not sell, exchange, trade or rent Customer business data or personal information
to third parties for unrelated commercial purposes. Information may, however, be processed,
accessed, transferred or disclosed where reasonably required for service delivery, hosting,
communication services, support, implementation, security, backup, legal compliance,
statutory obligations, fraud prevention, business continuity, or as otherwise permitted by
the applicable terms and law.
How Information May Be Used
-
To send SMS, WhatsApp messages and email requested or initiated by the customer from
its account, subject to applicable law, platform rules, consent requirements and
purchased messaging services.
-
To send transactional information pertaining to an account, such as transaction alerts,
low-balance or usage alerts, overdue reminders and similar operational communications.
-
To send updates regarding recent account activity, product usage, support activity or
service status.
-
To send alerts regarding anticipated delay, planned downtime, maintenance, security
events or service disruption where appropriate.
-
To reply to requests, queries, complaints, support tickets and service communications.
-
To personalise and improve services based on information provided by customers and
users, where appropriate and permitted by law.
-
To conduct surveys, obtain feedback and analyse service experience in order to improve
products, services and support.
-
To send periodic updates regarding changes in services, features, policies, packages
or functionality, subject to applicable communication preferences and law.
-
To provide appropriate access to authorised IESL staff, service providers, associates
and support resources so that they can perform their duties and provide services.
IESL requires such persons to observe appropriate confidentiality, privacy and security
obligations.
-
To comply with legal requirements, court orders, statutory obligations, lawful requests
from law-enforcement or regulatory authorities, or in connection with legal proceedings,
prospective legal proceedings, or the establishment, exercise or defence of legal rights.
-
To provide Software, hosting, implementation, backup, security, compliance, communication,
integration, billing, renewal, technical support and related contracted services.
-
To detect, prevent, investigate or respond to fraud, misuse, abuse, security incidents,
unauthorised access, unlawful activity or violations of applicable terms.
Customer Responsibility for Personal Data
The customer remains responsible for ensuring that it has lawful authority, consent and any
other required legal basis to collect, upload, store, process, communicate or otherwise use
personal data relating to employees, vendors, customers, agents, students, users or other
third parties through an IESL product. The customer is also responsible for the accuracy,
legality, consent status and compliance status of data uploaded or processed by it.
Data Ownership
As between IESL and the customer, the customer owns its business data entered into the
applicable software, while IESL retains ownership of its software, source code, object code,
database design and schema, structures, workflows, algorithms, reports, formats,
documentation, UI/UX and other intellectual property.
Data Access, Service Providers and Third Parties
IESL may use third-party hosting providers, cloud providers, communication gateways, payment
services, government or statutory interfaces, GSPs, email services, WhatsApp Business APIs,
SMS providers, security vendors, backup services and other technology providers where
required to deliver the purchased services. Such providers may process limited information
necessary for the relevant service. Third-party services are also governed by their own terms
and privacy practices.
Third-Party Links
IESL products and websites may contain links to third-party websites or services. Such
third parties have independent policies and practices. IESL is not responsible for the
content, service, security, privacy practices or information provided by those third-party
websites or services.
Security
IESL uses commercially reasonable security measures appropriate to the applicable deployment
model, hosting arrangement, service plan and current technical environment. These measures
may include encryption in transit, firewall protection, database security, role-based access
control, n-tier architecture, access restrictions, monitoring and automated backups where
applicable. No method of transmission or storage can be guaranteed to be completely secure,
and customers are expected to maintain appropriate user-access controls, password security,
endpoint security and independent backups wherever technically available.
Retention, Export and Deletion
Retention, backup, restoration and export depend on the applicable product, deployment model,
hosting arrangement, subscription/AMC status, purchased plan and technical feasibility.
For Tez ERP, after expiry, suspension, termination or non-renewal, IESL may retain data for
a reasonable transition period of up to 90 days unless a different period is agreed in
writing or required by applicable law, after which the data may be deleted, archived or made
unavailable. Customers should request any required export before the applicable retention
period expires and should maintain independent backups where technically available.
Policy Updates
IESL may update this Privacy Policy by publishing a revised version on its website and may
also communicate material changes through email, system notification or other reasonable
channels where appropriate. Changes required for law, security, technology or third-party
compliance may take effect as required. Continued use of the relevant service after the
effective date of an updated policy constitutes acceptance to the extent permitted by
applicable law.
Questions
If you have questions regarding this Privacy Policy, please use the IESL Contact Us page
or write to the official contact details published by IESL.
Relationship with Applicable Terms
This company-level policy should be read together with the terms and conditions applicable
to the relevant IESL product or service. Where a product-specific agreement or
product-specific terms apply, including the Tez ERP Terms and Conditions, those
product-specific terms and mutually agreed written commercial documents shall prevail in
the event of any inconsistency relating to that product or service, to the extent permitted
by applicable law.