Privacy Policy

1. Who this policy applies to

This Privacy Policy explains how Pyalm (“Pyalm”, “we”, “us”, or “our”) handles personal data when you visit pyalm.com, contact us, engage us for professional services, or use a Pyalm product that refers to this policy. Individual products may provide an additional privacy notice where their processing differs.

Pyalm operates from India and has a business presence in Dubai, United Arab Emirates. Our verified India office is 2nd Floor, HiLITE Business Park, Phase 2, Kozhikode, Kerala 673014.

2. Our role

For website visits, marketing, enquiries, and our direct customer relationship, Pyalm normally determines why and how personal data is processed. For customer-configured software, hosted accounts, or self-hosted deployments, Pyalm may instead process data on the customer's documented instructions. The relevant contract or product notice will describe those roles in more detail.

3. Personal data we may collect

• Contact and identity data: name, work email, phone number, company, role, and business address.
• Enquiry and booking data: project requirements, preferred meeting time, budget range, product interest, and correspondence.
• Account data: login identifiers, organisation membership, preferences, permissions, and support history.
• Commercial data: proposals, orders, subscriptions, invoices, payment status, and transaction references. Payment-card data may be handled directly by a payment provider rather than Pyalm.
• Technical and usage data: IP address, browser, device, approximate location, referring page, pages viewed, events, timestamps, and diagnostic logs.
• Customer content: information submitted to a product or provided while delivering a project, as defined by the relevant customer agreement.
• Verification data: where a customer deploys FaceTrust or a related service, images, document fields, biometric templates, and verification outcomes may be processed under that customer's instructions and deployment configuration.

4. How data is collected

We receive data directly from you, from the organisation you represent, through product use, from service and support interactions, and automatically through security logs, cookies, and analytics. We may also receive business contact data from referral partners or public professional sources where permitted by law.

The enquiry and booking forms on pyalm.com prepare an email in your own email application. Form details are not submitted to our web server by those forms. If you continue through WhatsApp or email, the relevant provider processes the communication under its own terms and privacy notice.

5. Why we use personal data

• Responding to enquiries, arranging consultations, and preparing proposals.
• Creating accounts and delivering, supporting, securing, and improving products and services.
• Processing orders, invoices, subscriptions, and contractual obligations.
• Sending operational messages and, where permitted, relevant product or service updates.
• Measuring website performance and understanding which content is useful.
• Detecting fraud, misuse, security incidents, and technical problems.
• Maintaining records, resolving disputes, enforcing agreements, and complying with law.

6. Legal grounds

Depending on the service and applicable law, we rely on consent, steps requested before entering a contract, performance of a contract, compliance with legal obligations, or legitimate business interests that are not overridden by your rights. Where consent is required, you may withdraw it, although this does not affect processing already carried out lawfully.

7. Cookies and analytics

We use essential storage needed for site or product operation and may use analytics technologies, including Google Analytics 4, to understand aggregate traffic and journeys across pyalm.com and connected product domains. These tools may set or read identifiers and receive technical usage data. You can restrict cookies through your browser. Where applicable law requires consent for non-essential cookies, the relevant product or deployment should present an appropriate consent mechanism.

8. When data is shared

We do not sell or rent personal data. We may share it with:

• Hosting, infrastructure, analytics, communications, payment, security, and support providers acting for us.
• Professional advisers, auditors, insurers, and authorities where reasonably necessary or legally required.
• A buyer, investor, or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality.
• A customer organisation where you use its account or where Pyalm processes data on that organisation's instructions.

Providers are given only the access reasonably needed for their role and are expected to protect the data they handle.

9. International transfers

Pyalm serves customers from India and the UAE and may use providers or teams in other countries. When personal data crosses borders, we use contractual, organisational, and technical safeguards appropriate to the transfer and applicable law. Some authorities may have lawful access to data under the laws of the destination country.

10. Retention

We keep personal data only for as long as reasonably needed for the purpose collected, including the duration of an account or contract, applicable warranty or support periods, and legal, tax, accounting, security, and dispute-resolution requirements. We then delete, anonymise, or securely isolate it unless continued retention is legally required. Backup copies may remain until the relevant backup cycle expires.

11. Security

We use proportionate administrative, technical, and organisational safeguards, which may include access controls, encryption in transit, environment separation, logging, backups, dependency maintenance, and incident response procedures. No online service can guarantee absolute security. Please report a suspected issue to hi@pyalm.com.

12. Your choices and rights

Subject to applicable law and exceptions, you may request information about our processing; access, correction, updating, or deletion of personal data; withdrawal of consent; restriction or objection; portability where available; and review of certain automated decisions. You may also opt out of promotional messages using the method in the message.

India's Digital Personal Data Protection Act, 2023 establishes rights and obligations for digital personal data. The UAE Federal Decree Law No. 45 of 2021 addresses personal-data processing and individual rights in the UAE. The exact right available depends on where you are, which entity controls the data, and which provisions are in force.

13. Children

Pyalm's business websites and services are not directed to children. Do not submit a child's personal data unless an authorised customer workflow, appropriate notice, and any legally required consent are in place. Contact us if you believe a child has submitted data improperly.

14. Requests and complaints

Email hi@pyalm.com with “Privacy request” in the subject. Describe the product or interaction involved. We may verify your identity and authority before responding. If a customer organisation controls your account, we may direct the request to that organisation. You may also have the right to complain to the competent privacy or data-protection authority.

15. Changes to this policy

We may revise this policy as our services, providers, or legal obligations change. We will post the revised version here, update the date above, and provide additional notice where a change materially affects how personal data is used and applicable law requires notice.

16. Contact

Privacy enquiries: hi@pyalm.com
India office: 2nd Floor, HiLITE Business Park, Phase 2, Kozhikode, Kerala 673014