This Privacy Notice explains how Poshith Technologies Private Limited ("Poshith", "we", "our") collects, uses, stores, and safeguards personal information on the Poshith platform (poshith.in).

Contact Permission

When you submit a contact or demo request, we may reach out to you via email or phone to understand your compliance needs and demonstrate our services. Product updates or promotional communication will be shared only if you have explicitly opted in.

Information We Collect

Individual users: Name, email address, password, login timestamps, IP address, and platform activity logs.

Organisational users: Designation, department, employee ID, reporting manager details, and other information provided by the organisation. Billing and payment information may be collected for paid services.

Website visitors: Referral source, browsing behaviour, and form submissions for analytics and platform optimisation.

How We Use Your Information

• Provide and maintain compliance-related services
• Implement statutory or policy updates
• Improve platform security, performance, and usability
• Deliver relevant training recommendations
• Send service or product updates with user consent

Access, Retention & Deletion

Organisational user data is governed by the respective organisation’s data retention policy. Individual user data is retained only as long as necessary and deleted after six months of inactivity. Users may request deletion through the Profile section or by emailing support.

Information Sharing

Poshith does not sell personal information or share it for third-party marketing. Information may be shared with trusted service providers solely for hosting, billing, analytics, and operational purposes.

Cookies Policy

Poshith uses essential, performance, and preference cookies to enhance user experience. Third-party analytics cookies (such as Google Analytics) may be used to analyse usage patterns. Disabling essential cookies may impact site functionality.

Data Storage & Transfer

Poshith is hosted on AWS infrastructure located in India. Data access is restricted to authorised employees and partners for legitimate operational purposes only.

Your Rights Under India’s Digital Personal Data Protection Act, 2023

Under the Digital Personal Data Protection (DPDP) Act, 2023, you are recognised as a Data Principal and are entitled to the following rights in relation to your personal data processed by Poshith:

• Right to Access: You may request a summary of personal data being processed by Poshith and the purposes for which it is used.
• Right to Correction and Erasure: You may request correction of inaccurate or misleading personal data, and erasure of personal data that is no longer necessary for the stated purpose.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out prior to such withdrawal.
• Right to Grievance Redressal: You have the right to raise grievances regarding personal data processing practices, which will be addressed within reasonable timelines as prescribed under law.
• Right to Nominate: You may nominate another individual to exercise your rights under the DPDP Act in the event of death or incapacity.

To exercise any of the above rights, you may submit a request through your account dashboard or contact us at support@poshith.in. We may need to verify your identity before processing such requests.