Compliances and Certifications

WHAT IS GDPR?

GDPR or General Data Protection Regulation is designed to “fit for the digital age” and provide all users to control their personal data shared with the websites. It also helps to simplify the regulatory environment for businesses so both citizens and the businesses can benefit from the digital economy.

PERSONAL DATA COLLECTED UNDER GDPR

Almost every internet service involves the collection and storage of personal data. This can include your name, email address, phone number, credit/debit card number. The definition of personal data has been extended so IP addresses can also be treated as personal data.

The compliance of GDPR within and outside the EU ensures that the personal data is gathered legally, respects the rights of data owners and not being misused.

GDPR FOR BUSINESSES

GDPR applies to organizations operating within and outside the EU which offer good/services to customers or businesses. Businesses which fail to protect the collected user data face penalties. As of 25th May 2018, all businesses are expected to be GDPR compliant.

Kapture CX GDPR COMPLIANCE

As a global company, Kapture CX complies with EU-U.S. and Swiss Privacy Shield Frameworks and GDPR. Protecting the personal data of our customers continues to be a priority and we ensure that the collected data is not tampered. While Kapture CX doesn’t introduce significant new requirements to its security and privacy practices, we do maintain security practices for handling customer content (defined in our Privacy Policy).

DATA CONTROLLERS VS DATA PROCESSORS

To simplify, a data controller refers to a person, authority, agency, or body which alone or jointly determines the purpose of gathering the data and analyzing it. Data processor on the other hand refers to a person, authority, agency, or body that processes gathered data on the behalf of the controller. Kapture CX ensures that all the data that is being collected is directly from the consumer and third-party website which has been integrated with us.

DATA PROTECTION AND DATA RESIDENCY

The declaration of obligation or non- disclosure/confidentiality agreement applies to data protection, privacy of all shared data, trade secrets as well as social security data privacy. Furthermore, confidentiality agreements for employees and confidentiality agreements for external service providers would be distinguished.

This also helps to protect very real security risks including:

• Breaches of confidentiality. For instance, information being given out inappropriately.

• Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.

• Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.

• The only people able to access data covered by this policy should be those who need it for their work.

• Data should not be shared informally. When access to confidential information is required, employees can request it from their line managers.

• In particular, strong passwords must be used and they should never be shared.

• Personal data should not be disclosed to unauthorized people, either within the company or externally.

ARTICLE 27 GDPR COMPLIANCE

Information according to Art. 27 EU GDPR
Adjetter Media Network Private Limited is a company located outside of the European Union. In order to comply with Art. 27 juksta.eu has been nominated as our represenative in the European Union. If you want to make use of your data privacy rights, please visit: Our public Privacy dashboard.

GDPR Representative Service

Kapture CX is dedicated to continuously improving the security, technical and organizational measures to better protect the customer data and sensitive information shared with us. We are always evaluating industry standard practices regarding technical data privacy and information security and strive to meet or exceed those standards. Our security programs are comprehensive and dedicated to all facets of safety.

Kapture CX holds the following trusted security certifications.

HIPAA

We help customers address their HIPAA obligations by leveraging appropriate security configuration options in Kapture CX products.

SECURITY COMPLIANCE

ISO

Kapture CX is ISO 27001:2022 certified.

NIST Framework

Kapture CX is NIST compliant and ensures to be prepared in identifying and detecting cyber-attacks, and also has a standard set of guidelines on how Kapture CX can better respond, prevent and recover from cyber-attacks.

The policy and technical and organizational measures provided in this Data Security and Privacy attachment (DSP) apply to Kapture CX Platform underlying applications, platforms, and management of infrastructure components operated by Kapture CX.

Data Protection and Data Residency: The declaration of obligation or non- disclosure/confidentiality agreement applies to data protection, privacy of all shared data, trade secrets as well as social security data privacy. Furthermore, confidentiality agreements for employees and confidentiality agreements for external service providers would be distinguished.

This also helps to protect very real security risks including:

• Breaches of confidentiality. For instance, information being given out inappropriately.

• Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.

• Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.

• The only people able to access data covered by this policy should be those who need it for their work.

• Data should not be shared informally. When access to confidential information is required, employees can request it from their line managers.

• In particular, strong passwords must be used and they should never be shared.

• Personal data should not be disclosed to unauthorized people, either within the company or externally.

Security Policies

I. Kapture CX will maintain and follow IT security policies and practices that are integral to Kapture CX’s business and mandatory for all Kapture CX employees, including contract personnel. II. Kapture CX will review its IT security policies at least annually and amend such policies as Kapture CX deems reasonable to maintain protection of the Cloud Services and Content processed therein.

Kapture CX is also compliant with the data localization mandate provided by Reserve Bank of India [RBI], as well as the Data Protection Bill and the CERT-In guidelines.

Service Integrity

I. Kapture CX will maintain policies and procedures designed to manage risks associated with the application of changes to its Cloud Services. Prior to implementation, changes to the Cloud Service, including its systems, networks and underlying components, will be documented in a registered change request that includes a description and reason for the change, implementation details and schedule, a risk statement addressing impact to the Service and its clients, expected outcome, rollback plan, and documented approval by authorized personnel.

II. Kapture CX will maintain an inventory of all information technology assets used in its operation of the Cloud Service. Kapture CX will continuously monitor the health and availability of the Cloud Service and underlying components. III. Kapture CX will maintain measures designed to assess, test, and apply security advisory patches to the Cloud Service and its associated systems, networks, applications, and underlying components within the Cloud Service scope. Upon determining that a security advisory patch is applicable and appropriate, Kapture CX will implement the patch pursuant to documented severity and risk assessment guidelines. Implementation of security advisory patches will be subject to Kapture CX change management policy.

Kapture CX recognizes the importance of maintaining your privacy. We value your privacy and appreciate your trust in us. This Policy describes how we treat user information we collect on https://www.kapture.cx/ . This Privacy Policy applies to current and former visitors to our website and to our online customers. By visiting and/or using our website, you agree to this Privacy Policy.

Kapture CX is a property of Adjetter Media Network Private Limited, an Indian Company registered under the Companies Act, 2013 having its registered office at B-9, 11th Floor, Brigade Summit, ITPL Main Rd, Brigade Metropolis, Garudachar Palya, Mahadevapura, Bengaluru, Karnataka 560048

This also helps to protect very real security risks including:

This is a summary of our new privacy policy which takes effect on 05/07/2019. It covers every Kapture CX website that links here and all of the products and services provided by the website.

Our Privacy Commitment

Kapture CX has never sold your information to someone else for advertising, or made money by showing you other people’s ads, and we never will. This has been our mindset and approach since we started. This policy tells you what information we do collect from you, what we do with it, who can access it, and what you can do about it.

Account and Sign up : When you sign up for a free trial or any of our services, we will ask for information like your name, contact number, company name, email address and country to complete the sign up process. If you sign up for a free trial account, we do not ask for you to enter your credit card information.

Registration and other form submissions : We collect information that you submit when you

• Subscribe to our newsletter

• Submit a form

• Register for an event, submit a form in order to download any guides or books

• Submit a form to request customer support.

Testimonials : When we get authorization from you to post testimonials about our products and service on website, we may add your name, designation and picture. If you want your testimonial to be removed, Please contact us at marketing@adjetter.com

• Contact Information : We might collect your name, email, mobile number, phone number and ip address.

• Information you Post : We collect information you post in a public space on our website or on a third-party social media site belonging to Kapture.cx

• Demographic Information : We may collect demographic information about you or any other information provided by you during the use of our website. We might collect this as a part of a survey also.

• Other Information : If you use our website, we may collect information about your IP address and the browser you’re using. We might look at what site you came from, duration of time spent on our website, pages accessed or what site you visit when you leave us. We might also collect the type of mobile device you are using, or the version of the operating system your computer or device is running.

• We collect information directly from you. We collect information directly from you when you register for a demo or subscribe. We also collect information if you post a comment on our websites or ask us a question through phone or email.

• We collect information from you passively. We use tracking tools like Google Analytics, Google Webmaster, browser cookies and web beacons for collecting information about your usage of our website.

• We get information about you from third parties. For example, if you use an integrated social media feature on our websites. The third-party social media site will give us certain information about you. This could include your name and email address.

• We use information to contact you: We might use the information you provide to contact you for a sales pitch or for other promotional purposes

• We use information to respond to your requests or questions. We use your information to check the interaction history and respond to you based upon your questions.

• We use information to improve our products and services. We might use your information to customize your experience with us. This could include displaying content based upon your preferences.

• We use information to look at site trends and customer interests. We may use your information to make our website and products better. We may combine information we get from you with information about you we get from third parties.

• We use information for security purposes. We may use information to protect our company, our customers, or our websites.

• We use information for marketing purposes. We might send you information about special promotions or offers. We might also tell you about new features or products. These might be our own offers or products we think you might find interesting

• We use information to send you transactional communications. We might send you emails or SMS about your account and demo scheduled.

Third Party Sites

If you click on one of the links to third party websites, you may be taken to websites we do not control. This policy does not apply to the privacy practices of those websites. Read the privacy policy of other websites carefully. We are not responsible for these third party sites.

Questions, Concerns or Complaints

If you have any comments or questions regarding our Privacy Policy or if you have any concerns regarding your Privacy, you can contact Kapture CX’s support at legal@kapture.cx

Facilities

Kapture CX hosts Service Data primarily in GCP data centers that have been certified as ISO 27001, and/or SOC 2 Type 2 compliant. Learn more about Compliance at GCP..

GCP infrastructure services include backup power, HVAC systems, and fire suppression equipment to help protect servers and ultimately your data.

On-Site Security

GCP provides physical security in the form of multiple features such as custom-designed electronic access cards, alarms, vehicle access barriers, perimeter fencing, metal detectors, and biometrics. Apart from this, there exists the ability to detect and track intruders using laser beam intrusion detection, and 24×7 monitoring using high-resolution interior and exterior camerias. Access logs, activity records and camera footage are also available in case an incident occurs. access transparency, assured workloads, binary authorization, certificate authority service, certificate manager, cloud-asset inventory, GCP on-site security includes a number of features such as security guards, fencing, security feeds, intrusion detection technology, and other security measures. Learn more about GCP physical security. .

Data Hosting Location

Kapture CX leverages GCP data centers in the United States and Asia Pacific. Customers can choose to locate their Service Data in the US-only or EEA-only (only available for enterprise).

Dedicated Security Team

Our globally distributed Security Team is on call 24/7 to respond to security alerts and events.

Protection Architecture

Our network security architecture consists of multiple security zones. More sensitive systems, like database servers, are protected in our most trusted zones. Other systems are housed in zones commensurate with their sensitivity, depending on function, information classification, and risk. Depending on the zone, additional security monitoring and access controls will apply. DMZs are utilized between the Internet, and internally between the different zones of trust.

Network Vulnerability Scanning

Network security scanning gives us deep insight for quick identification of out-of-compliance or potentially vulnerable systems.

Intrusion Detection and Prevention

Service ingress and egress points are instrumented and monitored to detect anomalous behavior. These systems are configured to generate alerts when incidents and values exceed predetermined thresholds and use regularly updated signatures based on new threats. This includes 24/7 system monitoring.

Threat Intelligence Program

Kapture CX participates in several threat intelligence sharing programs. We monitor threats posted to these threat intelligence networks and take action based on risk.

Logical Access

Access to Kapture CX Network is restricted by an explicit need-to-know basis, utilizes least privilege, is frequently audited and monitored, and is controlled by our Operations Team. Employees accessing the Kapture CX Network are required to use multiple factors of authentication.

Security Incident Response

In case of a system alert, events are escalated to our 24/7 teams providing Operations, Network Engineering, and Security coverage. Employees are trained on security incident response processes, including communication channels and escalation paths.

Encryption

Our data security policy is designed to ensure the confidentiality and integrity of data, both at rest and in transit. Data stored within our databases is encrypted using robust cryptographic measures tailored to data categories and customer requirements, with Advanced Encryption Standard (AES) with a 256-bit key encryption method employed for “Strictly Confidential” or “Confidential” data, supplemented by data masking or encoding as needed.

Encryption key management encompasses the generation, length, and storage of cryptographic keys in compliance with legal requirements and identified risks, ensuring secure storage in an encrypted manner to prevent unauthorized access. During transmission across networks, data is encrypted using Transport Layer Security (TLS) version 1.2 or greater, maintaining confidentiality and integrity with the enforcement of secure protocols and valid server certificates, including encryption protocols like WPA3 for Wi-Fi networks.

Cloud components ensure encryption at the storage level, covering files, logs, and backups, providing comprehensive protection for data at rest within the cloud. Credentials are stored using the SHA-256 algorithm in hashed form for enhanced security, while all media containing office information, including laptops and USB drives, is encrypted to safeguard sensitive data.

The use of proprietary encryption algorithms is prohibited unless approved by qualified experts to ensure compliance with security standards. Our data security policy prioritizes the protection of sensitive information, ensuring compliance with industry standards and customer expectations.

Availability & Continuity

The deployed infrastructure at Kapture CX is designed to be easily expandable, enabling the platform to accommodate a growing number of users and their increasing data demands without requiring significant reconfiguration or experiencing downtime. By utilizing auto-scaling database services, the system adjusts its capacity in real time according to usage and demand, ensuring optimal performance and efficiency without the need for manual intervention.

Data Classification and Handling

Our approach to data classification and handling is built on a foundation of stringent criteria, ensuring that every piece of information is categorized accurately based on its sensitivity, value, and the level of protection it requires.

Data Access and Control

We employ a robust data access management framework, ensuring that access to data is governed by strict protocols and role-based access controls. Our policies ensure that data is accessible only to authorized individuals and that such access is closely monitored and regulated.

Data Security Controls

Our commitment to data security is reflected in our comprehensive controls, including:

Data Residence: We strategically deploy databases in regions that comply with local data protection regulations.

Data Isolation: Our multi-tenant architecture ensures that each client’s data is securely segregated.

Data Scalability and Availability: We use scalable, high-availability configurations to minimize downtime and ensure data redundancy.

Data Backup and Restoration: Automated backups and point-in-time recovery options provide robust data protection.

Cryptographic Controls: We apply AES-256 encryption for data at rest and TLS 1.2 or higher for data in transit, alongside cloud-level encryption and secure password hashing.

Data Processing and Protection

Our data processing activities are designed to be lawful, fair, and transparent, adhering strictly to regulatory norms such as GDPR and HIPAA. We employ data minimization principles and ensure the accuracy and integrity of personal data, facilitating data subjects’ rights to access, rectification, and erasure.

Data Removal and Deletion

Upon termination of a customer’s association with our platform, we facilitate the transfer and deletion of their data in compliance with our data retention and privacy policies. We follow industry best practices for data erasure and disposal, ensuring secure destruction of sensitive information.

At our platform, your security and privacy are our top priorities. We are committed to maintaining a secure and trustworthy environment for all our users and stakeholders.

WHAT IS SPAM?

Spam is unsolicited commercial email. Kapture CX prohibits the use of its products and services in any manner associated with the transmission, distribution and delivery of spam. Any customer found to be using Kapture CX’s products for sending spam will be found in violation of this policy and our Terms of Service. Consequences for violation of this policy include immediate account termination as well as liability for civil, criminal or administrative penalties and damages.

What is Prohibited by Kapture CX?

In compliance with the U.S. CAN-SPAM Act and other global regulatory Acts, Kapture CX prohibits the following:

• Emails sent with invalid or forged headers

• Use of Kapture CX or other third party domain name to transmit email without consent.

• Subject lines containing false or misleading information.

• The use of harvested mailing lists or any list where the recipient has not given their prior consent.

• Any other means of deceptive addressing and misrepresentation.

Anti-Spam Legislation

Global regulations empower many governments to enforce laws with similar requirements. Penalties can include fines and/or jail time. We reserve the proper to report the utilization of our services for spam to the relevant authorities necessary to guard our users.

How to Notify Us

If you’ve received any unsolicited email please notify us immediately at legal@kapture.cx.

If Kapture CX finds unauthorized or improper use, it may, all of sudden, take action in its sole discretion, including blocking messages from a specific Internet domain, mail server or IP address also as terminating any account found in violation of this policy.

Privacy

We are committed to your privacy. Please read the Privacy Policy for an explanation of how we collect, use, disclose, transfer, and store your information.

Cookies may be “persistent” or “session” cookies. A persistent cookie consists of a document sent by an online server to a web browser, which is able to be stored by the browser and can stay valid till its set expiry date (unless deleted by the user before the expiry date). A session cookie, on the opposite hand, can expire at the end of the user session, once the web browser is closed.

Data Security & Service Policy

Our Data Security & Service Policy apply to Kapture CX Platform underlying applications, platforms, and management of infrastructure components operated by Kapture CX. Please read our Data Security & Service Policy for more information.

What is Cookie Policy

Kapture CX Cookie Policy explains how we use cookies and similar technologies to acknowledge you when you visit our Websites. If you utilize our websites, we tend to use various website navigation info as well as tracking technologies such as cookies and web beacons to gather and store information from you. Our Cookie Policy explains what cookies are, how we tend to use cookies, how third-parties we tend to may partner with may use cookies on the site, your choices concerning cookies, and more information regarding cookies.

What are Cookies ?

A cookie could be a tiny piece of information stored on the user’s computer by the web browser while browsing the website. Cookies are necessary so that most websites work properly. A basic website can operate while not serving cookies, but most websites need some cookies stored on the user’s computer so that the website remembers the user’s language preference and other preferences that can make your next visit easier and the site more useful to you. Cookies play a vital role. without them, using the web would be a far more frustrating experience. they allow the website owner to tell apart you from other users of the website. Cookies cannot be executed as code or used to deliver viruses and that they cannot enable us to access your hard drive. we cannot browse any info on your hard drive though we store cookies there.

Cookies may be “persistent” or “session” cookies. A persistent cookie consists of a document sent by an online server to a web browser, which is able to be stored by the browser and can stay valid till its set expiry date (unless deleted by the user before the expiry date). A session cookie, on the opposite hand, can expire at the end of the user session, once the web browser is closed.

Cookies don’t contain any info that in person identifies you, however personal info that we tend to store regarding you will be linked, by us, to the information stored in and obtained from cookies.

Cookies set by the website owner are called “first party cookies”. Cookies set by parties other than the website owner are called “third party cookies”. Third-party cookies modify third party features or practicality to be provided on or through the website (e.g. like advertising, interactive content, and analytics). The parties that set these third party cookies will acknowledge your computer both when it visits the website in question and additionally when it visits certain other websites.

Why do We Use Cookies

We use cookies for a number of different reasons. Some cookies are needed for technical reasons so as for our Websites to work whereas some cookies modify us to trace and target the interests of our users to reinforce the experience on our Websites. Some of these cookies are also set once a page is loaded, or once a visitor takes a specific action whereas third party cookies are used for advertising, analytics, and alternative functions.

Most browsers allow you to refuse to just accept cookies. blocking all cookies can, however, have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use certain options on the website.

How to Notify Us

If you have got any queries or issues concerning our cookie policy, please send an email to legal@kapture.cx.

Adjetter Media Network Private Limited, a private company duly incorporated and registered under the Companies Act, 1956, having its principal place of business and registered offices at “B-9, 11th Floor, Brigade Summit, ITPL Main Rd, Brigade Metropolis, Garudachar Palya, Mahadevapura, Bengaluru, Karnataka 560048 (hereinafter referred to as “Kapture CX”, which expression shall, unless repugnant to the context thereof, be deemed to mean and include its successors in interest, managers and permitted assigns) has developed and owns the software known as Kapture CX and all the Intellectual Property Rights associated with it (“Kapture CX”)

Kapture CX is a full featured cloud CRM platform, offered on “demand pay as you go” model; delivers all feature set on web browser and over internet, eliminating any customer side installation and configuration; provides end-to-end solution to the customer, which includes Sales Automation, Operations and customer interaction coming from multiple channels like phone, email, live chat, social media (FB & Twitter) at one place with readily available API’s; Kapture CX REST API ensures that it can integrate into any third-party tool; Live monitoring and dashboards accessible from anywhere using the browser, ensures you have the right control over operation. Kapture CX guarantees an Up-Time of 99.6% and the service shall be available 24 hours a day through the web hosted solution.

You (“Subscriber”) have chosen to avail the Services provided by Kapture CX and your use of the Services is subject to these Terms of Service, which may be updated from time to time (this “Agreement”). You acknowledge and understand that by using the Services, you accept the terms of this Agreement and agree to be bound by them. If the terms laid down here are not acceptable to you, then you may not avail the Services provided by Kapture CX.

Accepting the terms of this Agreement shall mean that Kapture CX shall grant a non-sub-licensable, non-transferable, non-exclusive subscription to access and use Kapture CX, solely for the Subscriber’s internal business purposes. Necessary support will be provided by Kapture CX’s Team from time to time while utilizing the Services. The Subscriber shall be provided with the Services through simple user interface integration. All the data captured shall be provided to the Subscriber in its account and multiple logins can be created to access such account on behalf of the Subscriber

The Subscriber shall be provided with the following services and support (“Services”):

1. CRM Set-up: Kapture CX shall provide log-ids and passwords for the usage of the Kapture CX platform i.e. mobile and web application, upon the Effective Date of this Agreement.

2. Reports: Meeting map, Daily sales report, Deal pipeline, Team-wise activity report, Target vs Achievement report, Attendance report, Deal realtime report.

3. Account Management: Assigning accounts to individual, Option to add additional point of contact.

4. Deal Management:Deal profiling, Adding deal mapping to one account with multiple services, Option to send email, Attach documents at opportunity level, setting follow-ups with call remarks, Dispositions based on the interactions, Deal pipeline.

5. Order Management: Order confirmation once the deal is agreed to sign-up..

6. Attendance management, Geo fencing, Expense management, Creation of customer visit plan.

7. Dashboard creation, dashboard mapping, multiple dashboard on single screen, Option to pull reports.

In addition to the above, the required training shall be provided by Kapture CX’s Team for implementation of the project of the Subscriber. The subscription shall be provided with access to Web, Tablet and Mobile App subject to specifications made by Kapture CX regarding the model of the device used.