Data Privacy at Aria Infotech
Effective Date:
The principles and safeguards behind how we handle personal data, and the quickest way to use your rights. The formal notice is our Privacy Policy.
1.Data Protection Principles
Seven principles guide every decision we make about personal data.
- Collect only what we need
- Each form and feature asks for the least data that lets it do its job.
- Use data for the stated purpose
- Data given for a demo is used to arrange that demo. Customer data is used to provide ARIA to that customer, and for nothing else.
- Be open about it
- We say what we collect and why before we collect it, and we ask for consent where the law requires it.
- Keep data accurate
- You can ask us to correct anything that is wrong or out of date.
- Keep data only as long as needed
- We delete or anonymise data once its purpose has been served, unless the law requires us to keep it.
- Keep data secure
- Technical and organisational safeguards protect data against loss, misuse and unauthorised access.
- Stay accountable
- Our Grievance Officer answers for how we handle personal data, and replies to every complaint.
2.Security Measures
We protect the data in our care with safeguards at every layer.
Access
- Role-based permissions: each user sees only what their role needs.
- Passwords are stored in a hashed form that cannot be read.
- Our own staff get the least access their work requires.
Encryption
- Data is encrypted in transit with TLS.
- Stored data is encrypted at rest.
Monitoring and recovery
- Audit logs record important actions, including changes to commission records.
- Systems are monitored for unusual activity and kept up to date.
- Regular backups allow data to be restored after a failure.
People and partners
- Employees and contractors are bound by confidentiality duties.
- Every service provider that handles data for us must meet security terms set out in a contract.
Incident response
If a personal data breach occurs, we contain it, tell the Data Protection Board of India and the people affected, and report the incident to CERT-In within six hours, as Indian law requires.
3.Data Processing
How we process data depends on whose data it is.
Data we are responsible for
For website visitors, demo and trial requests, customer accounts and billing, we decide how the data is used. We process it to answer enquiries, provide the ARIA platform, send invoices and keep our systems secure.
Data we process for brokerages
Brokerages store details of their leads, buyers, job applicants and staff in ARIA. The brokerage decides how that data is used. We process it only on the brokerage’s instructions and for no purpose of our own. Account administrators can ask us for:
- our data processing terms;
- the current list of service providers that help us run the platform;
- a security overview; and
- an export of their data, or its deletion when they leave.
AI processing
ARIA’s AI features transcribe calls, draft follow-ups and pitches, and assess resumes. Their output is a draft for a person to review. A flagged job application always goes to a human reviewer. Our AI providers may not use customer data to train their own models.
We never sell personal data.
4.Compliance
Our practices are built around the privacy laws that apply to us.
| Law | What it means in practice |
|---|---|
| Information Technology Act, 2000 (section 43A) | We maintain reasonable security practices for the personal data we handle. |
| SPDI Rules, 2011 | We publish a privacy policy, ask for consent before collecting sensitive data, limit sharing and transfers, and appoint a Grievance Officer. |
| Digital Personal Data Protection Act, 2023 | We give clear notice, process data for lawful purposes, honour access, correction and erasure requests, and notify breaches. |
| CERT-In Directions, 2022 | We report cyber security incidents within six hours and keep system logs as required. |
| GDPR and UK GDPR | Where these apply to people in Europe or the United Kingdom, we honour the extra rights they give. |
Customers remain responsible for their own compliance when they use ARIA, for example telling callers that a call is recorded. Our Terms of Service explain those duties.
5.Data Storage
We store personal data on servers run by our cloud hosting providers. If a provider processes data outside India, we make sure it is protected to the same standard. The Privacy Policy lists how long each kind of data is kept.
What this website stores in your browser
No cookies, no third-party analytics and no advertising trackers. Only the two items below, which stay on your device.
Remembers the page you arrived on, the site that referred you and any campaign tags, so a demo request made later in the same visit can include them.
aria.attribution · Until you close the tab
Remembers that you closed the free-trial offer, so it is not shown again for a week.
aria.trialPopup.dismissedAt · 7 days, or until you clear it
6.User Rights
Indian law gives you clear rights over your personal data. Using them is free, and we aim to reply within 30 days. Choose a request below to start an email to us.
Access your data
Get a summary of the personal data we hold about you and who we have shared it with.
Email a requestWithdraw consent
Stop processing that relies on your consent, including marketing emails.
Email a requestRaise a grievance
Tell our Grievance Officer if something is not right. We reply within one month.
Email a requestAre you a lead, buyer, job applicant or employee of a brokerage that uses ARIA? That brokerage controls your data, so please contact it first. If you write to us, we will pass your request on.
7.Contact
Questions about data privacy at Aria Infotech? Write to info@ariainfotech.com.
Grievance Officer
Our Grievance Officer handles privacy complaints and replies within one month.
The Grievance Officer
Aria Infotech, India
- Hours
- Monday to Friday, 10:00 to 18:00 IST, excluding public holidays
If you are still not satisfied, you may complain to the Data Protection Board of India.