Privacy Policy

Civiq.plus (“we”, “us”) provides civic intelligence software to government agencies, civic organisations and public institutions. This policy explains what personal information we collect, why, and what rights you have over it.

1. Two different roles

We handle personal information in two distinct capacities, and different rules apply to each.

• As a controller — for information you give us directly through this website, such as a demo request, a contact form or a newsletter subscription. We decide how that information is used.
• As a processor — for information held inside a customer’s Civiq.plus deployment, such as citizen feedback records. The customer organisation is the controller; we process that data only on their documented instructions and under our agreement with them.

2. Information we collect as a controller

• Contact details you submit — name, work email, organisation, role and the content of your message.
• Technical information — IP address, browser type and pages visited, collected in server logs for security and reliability purposes.
• Communication records — correspondence between you and our team.

This website does not use advertising or cross-site tracking cookies. Any analytics we run is aggregate and does not build a profile of individual visitors across other sites.

3. How we use it

• To respond to your enquiry and, where relevant, scope a deployment
• To send material you explicitly asked for, such as a newsletter or a webinar recording
• To keep the website secure and available
• To meet legal, regulatory and contractual obligations

We do not sell personal information. We do not share your details with third parties for their own marketing.

4. Platform data

Inside a deployment, personal information is classified and controlled. Feedback records containing personal data are classified as confidential, access is scoped by both role and geography, and every access-relevant action is written to an append-only audit log. Retention and deletion policies are defined per data class.

The platform is built for aggregate geographic, cohort and community intelligence. It does not create covert individual-level psychographic scores or hidden persuasion profiles.

5. Legal bases

Where applicable data protection law requires a legal basis, we rely on: your consent (for newsletters and optional communications); performance of a contract (to deliver services you have engaged us for); our legitimate interests (to respond to enquiries and secure our systems); and legal obligation (where retention or disclosure is required by law).

6. Retention

We keep enquiry correspondence for as long as needed to respond and for a reasonable period afterwards for business record purposes, then delete it. Server logs are retained on a short rolling window. Platform data retention is governed by the agreement with the customer organisation.

7. Sharing and processors

We use a small number of service providers for hosting, email and support tooling. Each is bound by contract to process personal information only on our instructions and to apply appropriate security measures. A current list is available on request.

8. International transfers

Regional data residency is configurable for platform deployments, and private-cloud or on-premise deployment is available where data must not leave a particular jurisdiction. For website enquiries, where information is transferred across borders we rely on appropriate safeguards.

9. Security

We encrypt data in transit and at rest, isolate tenants at the authorization and storage layers, require MFA or SSO for privileged access, hold secrets in a managed vault, and maintain an append-only audit log. Full detail is on the security page.

10. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, and to data portability. To exercise a right relating to information we hold as a controller, write to [email protected]. If your request concerns data held inside a customer’s deployment, we will refer you to that organisation, which is the controller.

11. Children

This website is not directed at children, and we do not knowingly collect personal information from children through it.

12. Changes

We will update this page when our practice changes and revise the date at the top. Material changes affecting customers are communicated through the agreement with that organisation.

13. Contact

Privacy enquiries: [email protected]
Security reports: [email protected]
General: [email protected]
HITEC City, Hyderabad 500081, Telangana, India