Privacy Policy

Your privacy is important to us. This privacy statement explains the personal data Symbiosis Systems & Service Pvt Ltd (“Symbiosis”) processes, how Symbiosis processes it, and for what purposes. Symbiosis offers a wide range of products, including server products used to help operate enterprises worldwide and devices you use in your home. References to Symbiosis products in this statement include Symbiosis services, websites, apps, software, and devices. Please read the product-specific details in this privacy statement, which provide additional relevant information. This statement applies to the interactions Symbiosis has with you and the Symbiosis products and services.

Personal Data We Collect

Symbiosis collects data from you, through our interactions with you and through our products for a variety of purposes, including to operate effectively and provide you with the best experiences with our products. You provide some of this data directly, such as when you create an account, administer your organization’s licensing account, submit a search query, upload a document, sign up for a service, or contact us for support. We get some of it by collecting data about your interactions, use, and experience with our products and communications.

We rely on a variety of legal reasons and permissions (sometimes called “legal bases”) to process data, including with your consent, a balancing of legitimate interests, necessity to enter into and perform contracts, and compliance with legal obligations, for a variety of purposes described below.

We also obtain data from third parties. We protect data obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the data. These third-party sources vary over time and include:

• Data brokers from which we purchase demographic data to supplement the data we collect.
• Services that make user-generated content from their service available to others, such as local business reviews or public social media posts.
• Communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks.
• Service providers that help us determine your device’s location.
• Partners with which we offer co-branded services or engage in joint marketing activities.
• Third parties that deliver experiences through Symbiosis products. Publicly-available sources, such as open public sector, academic, and commercial data sets and other data sources.

If you are an end user of a Symbiosis product or an account provided by your organization to use Symbiosis product, please see section Products Provided By Your Organization for more information.

You have choices when it comes to the technology you use and the data you share. When you are asked to provide personal data, you can decline. Many of our products require some personal data to operate and provide you with a service. If you choose not to provide data required to operate and provide you with a product or feature, you cannot use that product or feature. Likewise, where we need to collect personal data by law or to enter into or carry out a contract with you, and you do not provide the data, we will not be able to enter into the contract; or if this relates to an existing product you’re using, we may have to suspend or cancel it. We will notify you if this is the case at the time. Where providing the data is optional, and you choose not to share personal data, features like personalization that use the data will not work for you.

The data we collect depends on the context of your interactions with Symbiosis and the choices you make (including your privacy settings), the products and features you use, your location, and applicable law.

Name and contact data: Your first and last name, email address, postal address, phone number, and other similar contact data.

Credentials: Passwords, password hints, and similar security information used for authentication and account access.

Demographic data: Data about you such as your age, gender, country, and preferred language.

Payment data: Data to process payments, such as your payment instrument number (such as a credit card number) and the security code associated with your payment instrument.

Subscription and licensing data: Information about your subscriptions, licenses, and other entitlements.

Interactions: Data about your use of Symbiosis products. In some cases, such as search queries, this is data you provide in order to make use of the products. In other cases, such as error reports, this is data we generate. Other examples of interactions data include:

• Device and usage data. Data about your device and the product and features you use, including information about your hardware and software, how our products perform, as well as your settings. For example:
  • Payment and account history. Data about the items you purchase and activities associated with your account.
  • Browse history. Data about the webpages you visit.
  • Device, connectivity, and configuration data. Data about your device, your device configuration, and nearby networks. For example, data about the operating systems and other software installed on your device, including product keys. In addition, IP address, device identifiers (such as the IMEI number for phones), regional and language settings, and information about WLAN access points near your device.
  • Error reports and performance data. Data about the performance of the products and any problems you experience, including error reports. Error reports (sometimes called “crash dumps”) can include details of the software or hardware related to an error, contents of files opened when an error occurred, and data about other software on your device.
  • Troubleshooting and help data. Data you provide when you contact Symbiosis for help, such as the products you use, and other details that help us provide support. For example, contact or authentication data, the content of your chats and other communications with Symbiosis, data about the condition of your device, and the products you use related to your help inquiry. When you contact us, such as for customer support, phone conversations or chat sessions with our representatives may be monitored and recorded.
  • Bot usage data. Interactions with third party bots and skills available through Symbiosis products.
• Interests and favourites. Data about your interests and favourites, such as the sports teams you follow, the programming languages you prefer, the stocks you track, or cities you add to track things like weather or traffic. In addition to those you explicitly provide, your interests and favourites can also be inferred or derived from other data we collect.
• Content consumption data. Information about media content (e.g. video, music, audio, text books, apps, and games) you access through our products.
• Searches and commands. Search queries and commands when you use Symbiosis products with search or related productivity functionality.
• Voice data. Your voice data, sometimes referred to as “voice clips”, such as search queries, commands, or dictation you speak, which may include background sounds.
• Text, inking, and typing data. Text, inking, and typing data and related information. For example, when we collect inking data, we collect information about the placement of your inking instrument on your device.
• Images. Images and related information, such as picture metadata. For example, we collect the image you provide when you take your picture for identification.
• Contacts and relationships. Data about your contacts and relationships if you use a product to share information with others, manage contacts, communicate with others, or improve your productivity.
• Social data. Information about your relationships and interactions between you, other people, and organizations, such as types of engagement (e.g., likes, dislikes, events, etc.) related to people and organizations.
• Location data. Data about your device’s location, which can be either precise or imprecise. For example, we collect location data using Global Navigation Satellite System (GNSS) (e.g., GPS) and data about nearby cell towers and Wi-Fi hotspots. Location can also be inferred from a device’s IP address or data in your account profile that indicates where it is located with less precision, such as at a city or postal code level.
• Other input. Other inputs provided when you use our products. For example, data such as the buttons you press on a controller device, skeletal tracking data, and other sensor data, like the number of steps you take, when you use devices that have applicable sensors. And, at your direction, we also collect financial transaction data from your credit card issuer to provide the service. If you enter into a prize promotion, we collect the data you input into the entry form.

Content: Content of your files and communications you input, upload, receive, create, and control. For example, if you transmit a file, we need to collect the content of that file to display it to you and the other user. If you receive an email, we need to collect the content of that email to display it to you, enable you to reply to it, and store it for you until you choose to delete it. Other content we collect when providing products to you include:

• Communications, including audio, video, text (typed, inked, dictated, or otherwise), in a message, email, call, meeting request, or chat.
• Photos, images, songs, movies, software, and other media or documents you store, retrieve, or otherwise process with our cloud.

Video or recordings: Recordings of events and activities, retail spaces, and other locations. If you enter store locations or other facilities, or attend an event that is recorded, we may process your image and voice data.

Feedback and ratings: Information you provide to us and the content of messages you send to us, such as feedback, survey data, and product reviews you write.

Traffic data. Data generated through your use of communications services. Traffic data indicates with whom you have communicated and when your communications occurred. We will process your traffic data only as required to provide, maintain, and improve our communications services and we do so with your consent.

How We Use Personal Data

Symbiosis uses the data we collect to provide you rich, interactive experiences. In particular, we use data to:

• Provide our products, which includes updating, securing, and troubleshooting, as well as providing support. It also includes sharing data, when it is required to provide the service or carry out the transactions you request.
• Improve and develop our products.
• Personalize our products and make recommendations.
• Advertise and market to you, which includes sending promotional communications, targeting advertising, and presenting you relevant offers.

We also use the data to operate our business, which includes analysing our performance, meeting our legal obligations, developing our workforce, and doing research.

For these purposes, we combine data we collect from different contexts (for example, from your use of two Symbiosis products). However, we have built in technological and procedural safeguards designed to prevent certain data combinations where required by law. For example, where required by law, we store data we collect from you when you are unauthenticated (not signed in) separately from any account information that directly identifies you, such as your name, email address, or phone number.

Our processing of personal data for these purposes includes both automated and manual (human) methods of processing. Our automated methods often are related to and supported by our manual methods. For example, our automated methods include artificial intelligence (AI), which we think of as a set of technologies that enable computers to perceive, learn, reason, and assist in decision-making to solve problems in ways that are similar to what people do. To build, train, and improve the accuracy of our automated methods of processing (including AI), we manually review some of the predictions and inferences produced by the automated methods against the underlying data from which the predictions and inferences were made. This manual review may be conducted by Symbiosis employees or vendors who are working on Symbiosis’ behalf.

When we process personal data about you, we do so with your consent and/or as required to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests of Symbiosis.

More on the purposes of processing:

• Provide our products: We use data to operate our products and provide you with rich, interactive experiences. For example, we process the documents you upload to enable you to retrieve, delete, edit, forward, or otherwise process it, at your direction as part of the service. Or, for example, if you enter a search query, we use that query to display search results to you. Additionally, as communications are a feature of various products, programs, and activities, we use data to contact you. For example, we may contact you by phone or email or other means to inform you when a subscription is ending or discuss your licensing account. We also communicate with you to secure our products, for example by letting you know when product updates are available.
• Product improvement: We use data to continually improve our products, including adding new features or capabilities. For example, we use error reports to improve security features, search queries and clicks to improve the relevancy of the search results, usage data to determine what new features to prioritize.
• Personalization: Many products include personalized features, such as recommendations that enhance your productivity and enjoyment. These features use automated processes to tailor your product experiences based on the data we have about you, such as inferences we make about you and your use of the product, activities, interests, and location. For example, depending on your settings, if you stream movies in a browser on your device, you may see a recommendation for an app that streams more efficiently. If you have an account, with your permission, we can sync your settings on several devices. Many of our products provide controls to disable personalized features.
• Product activation: We use data—such as device and application type, location, and unique device, application, network, and subscription identifiers—to activate products that require activation.
• Product development: We use data to develop new products. For example, we use data, often de-identified, to better understand our customers’ computing and productivity needs which can shape the development of new products.
• Customer support: We use data to troubleshoot and diagnose product problems, repair customers’ devices, and provide other customer care and support services, including to help us provide, improve, and secure the quality of our products, services, and training, and to investigate security incidents. Call recording data may also be used to authenticate or identify you based on your voice to enable Symbiosis to provide support services and investigate security incidents.
• Help secure and troubleshoot: We use data to help secure and troubleshoot our products. This includes using data to protect the security and safety of our products and customers, detecting malware and malicious activities, troubleshooting performance and compatibility issues to help customers get the most out of their experiences, and notifying customers of updates to our products. This may include using automated systems to detect security and safety issues.
• Safety. We use data to protect the safety of our products and our customers. Our security features and products can disrupt the operation of malicious software and notify users if malicious software is found on their devices. For example, some of our products, systematically scan content in an automated manner to identify suspected spam, viruses, abusive actions, or URLs that have been flagged as fraud, phishing, or malware links; and we reserve the right to block delivery of a communication or remove content if it violates our terms.
• Updates. We use data we collect to develop product updates and security patches. For example, we may use information about your device’s capabilities, such as available memory, to provide you a software update or security patch. Updates and patches are intended to maximize your experience with our products, help you protect the privacy and security of your data, provide new features, and evaluate whether your device is ready to process such updates.
• Promotional communications. We use data we collect to deliver promotional communications. You can sign up for email subscriptions and choose whether you wish to receive promotional communications from Symbiosis by email, SMS, physical mail, and telephone.
• Relevant offers. Symbiosis uses data to provide you with relevant and valuable information regarding our products. We analyse data from a variety of sources to predict the information that will be most interesting and relevant to you and deliver such information to you in a variety of ways. For example, we may predict your interest in a product and communicate with you about similar new products you may like.
• Advertising. Symbiosis does not use what you say in email, chat, video calls, or voice mail, or your documents, photos, or other personal files to target ads to you. We use data we collect through our interactions with you, through some of our products, and on third-party web properties, for advertising in our products and on third-party properties. We may use automated processes to help make advertising more relevant to you.
• Prize promotions and events. We use your data to administer prize promotions and events. For example, if you enter into a prize promotion, we may use your data to select a winner and provide the prize to you if you win. Or, if you register for a workshop or an event, we will add your name to the list of expected attendees.
• Transacting commerce. We use data to carry out your transactions with us. For example, we process payment information to provide customers with product subscriptions and use contact information to deliver goods purchased online.
• Reporting and business operations. We use data to analyse our operations and perform business intelligence. This enables us to make informed decisions and report on the performance of our business.
• Protecting rights and property. We use data to detect and prevent fraud, resolve disputes, enforce agreements, and protect our property. For example, we use data to confirm the validity of software licenses to reduce piracy. We may use automated processes to detect and prevent activities that violate our rights and the rights of others, such as fraud.
• Legal compliance. We process data to comply with law. For example, we use the age of our customers to assist us in meeting our obligations to protect children’s privacy. We also process contact information and credentials to help customers exercise their data protection rights.
• Research. With appropriate technical and organizational measures to safeguard individuals’ rights and freedoms, we use data to conduct research, including for public interest and scientific purposes.

Reason We Share Personal Data

We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. For example, we share your content with third parties when you tell us to do so, such as when you send an email to a friend, share photos and documents, or link accounts with another service. If you use a Symbiosis product provided by an organization you are affiliated with, such as an employer, or use an email address provided by such organization to access Symbiosis products, we share certain data, such as interaction data and diagnostic data to enable your organization to manage the products. When you provide payment data to make a purchase, we will share payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction.

In addition, we share personal data among Symbiosis-controlled affiliates and subsidiaries. We also share personal data with vendors or agents working on our behalf for the purposes described in this statement. For example, companies we've hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data to provide those functions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets.

Finally, we will retain, access, transfer, disclose, and preserve personal data, including your content, when we have a good faith belief that doing so is necessary to do any of the following:

• Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies.
• Protect our customers, for example, to prevent spam or attempts to defraud users of our products, or to help prevent the loss of life or serious injury of anyone.
• Operate and maintain the security of our products, including to prevent or stop an attack on our computer systems or networks.
• Protect the rights or property of Symbiosis, including enforcing the terms governing the use of the services—however, if we receive information indicating that someone is using our services to traffic in stolen intellectual or physical property of Symbiosis, we will not inspect a customer's private content ourselves, but we may refer the matter to law enforcement.

Please note that some of our products include links to or otherwise enable you to access products of third parties whose privacy practices differ from those of Symbiosis. If you provide personal data to any of those products, your data is governed by their privacy policies.

How to access and control your personal data

• Control the use of your data for interest-based advertising from Symbiosis by visiting our opt-out feature.
• Choose whether you wish to receive promotional emails, SMS messages, telephone calls, and postal mail from Symbiosis.

Not all personal data processed by Symbiosis can be accessed or controlled via the tools above. If you want to access or control personal data processed by Symbiosis that is not available via the tools above or directly through the Symbiosis products you use, you can always contact Symbiosis at the address given in the Contact Us section or by using our web form.

You can access and control your personal data that Symbiosis has obtained with tools Symbiosis provides to you, which are described below, or by contacting Symbiosis. For instance:

• If Symbiosis obtained your consent to use your personal data, you can withdraw that consent at any time.
• You can request access to, erasure of, and updates to your personal data.
• If you’d like to port your data elsewhere, you can contact Symbiosis for assistance.

You can also object to or restrict the use of your personal data by Symbiosis. For example, you can object at any time to our use of your personal data:

• For direct marketing purposes.
• Where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party.

You may have these rights under applicable laws, but we offer them regardless of your location. In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law.

If your organization, such as your employer, or service provider, provides you with access to and is administering your use of Symbiosis products, contact your organization to learn more about how to access and control your personal data.

Browser based controls

When you use a browser, you can control your personal data using certain features. You can control the data stored by cookies and withdraw consent to cookies by using the browser-based cookie controls described in the Cookies section of this privacy statement.

Cookies And Similar Technologies

Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie. This data often consists of a string of numbers and letters that uniquely identifies your computer, but it can contain other information as well. Some cookies are placed by third parties acting on our behalf. We use cookies and similar technologies to store and honour your preferences and settings, enable you to sign-in, provide interest-based advertising, combat fraud, analyse how our products perform, and fulfil other legitimate purposes described below.

Our use of cookies and similar technologies

Symbiosis uses cookies and similar technologies for several purposes, depending on the context or product, including:

• Storing your preferences and settings. We use cookies to store your preferences and settings on your device, and to enhance your experiences. For example, depending on your settings, if you enter your city or postal code to get local news or weather information, we store that data in a cookie so that you will see the relevant local information when you return to the site. Saving your preferences with cookies, such as your preferred language, prevents you from having to set your preferences repeatedly. If you opt out of interest-based advertising, we store your opt-out preference in a cookie on your device. Similarly, in scenarios where we obtain your consent to place cookies on your device, we store your choice in a cookie.
• Sign-in and authentication. We use cookies to authenticate you. When you sign in to a website using your personal account created on Symbiosis product, we store a unique ID number, and the time you signed in, in an encrypted cookie on your device. This cookie allows you to move from page to page within the site without having to sign in again on each page. You can also save your sign-in information so you do not have to sign in each time you return to the site.
• Security. We use cookies to process information that helps us secure our products, as well as detect fraud and abuse.
• Storing information you provide to a website. We use cookies to remember information you shared. When you provide information to Symbiosis, such as when you add products to a shopping cart, we store the data in a cookie for the purpose of remembering the information.
• Social media. Some of our websites include social media cookies, including those that enable users who are signed in to the social media service to share content via that service.
• Feedback. Symbiosis uses cookies to enable you to provide feedback.
• Interest-based advertising. Symbiosis uses cookies to collect data about your online activity and identify your interests so that we can provide advertising that is most relevant to you. You can opt out of receiving interest-based advertising from Symbiosis as described in the How to access and control your personal data section of this privacy statement.
• Showing advertising. Symbiosis uses cookies to record how many visitors have clicked on an advertisement and to record which advertisements you have seen, for example, so you do not see the same one repeatedly.
• Analytics. We use first- and third-party cookies and other identifiers to gather usage and performance data. For example, we use cookies to count the number of unique visitors to a web page or service and to develop other statistics about the operations of our products.
• Performance. Symbiosis uses cookies to understand and improve how our products perform. For example, we use cookies to gather data that helps with load balancing; this helps us keep our websites remain up and running.

Where required, we obtain your consent prior to placing or using optional cookies that are not (i) strictly necessary to provide the website; or (ii) for the purpose of facilitating a communication. Please see the “How to Control Cookies” section below for more information.

In addition to the cookies Symbiosis sets when you visit our websites, third parties can also set cookies when you visit Symbiosis sites. For example:

• Companies we hire to provide services on our behalf, such as site analytics, place cookies when you visit our sites.
• Companies that deliver content, such as videos or news, or ads on Symbiosis sites, place cookies on their own. These companies use the data they process in accordance with their privacy policies, which may enable these companies to collect and combine information about your activities across websites, apps, or online services.

How to control cookies

Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. To control cookies, refer to the browser’s instructions you are using.

As mentioned above, where required, we obtain your consent before placing or using optional cookies that are not (i) strictly necessary to provide the website; or (ii) for the purpose of facilitating a communication. We separate these optional cookies by purpose, such as for advertising and social media purposes. You may consent to certain categories of optional cookies and not others. You also may adjust your choices by clicking “Manage cookies” in the footer of the website or through the settings made available on the website.

Certain features of Symbiosis products depend on cookies. If you choose to block cookies, you cannot sign in or use some of those features, and preferences that are dependent on cookies will be lost. If you choose to delete cookies, any settings and preferences controlled by those cookies, including advertising preferences, are deleted and will need to be recreated.

Our use of web beacons and analytics services

Some Symbiosis webpages contain electronic tags known as web beacons that we use to help deliver cookies on our websites, count users who have visited those websites, and deliver co-branded products. We also include web beacons or similar technologies in our electronic communications to determine whether you open and act on them.

In addition to placing web beacons on our own websites, we sometimes work with other companies to place our web beacons on their websites or in their advertisements. This helps us to, for example, develop statistics on how often clicking on an advertisement on a Symbiosis website results in a purchase or other action on the advertiser's website. It also allows us to understand your activity on the website of a Symbiosis partner in connection with your use of a Symbiosis product or service.

Finally, Symbiosis products often contain web beacons or similar technologies from third-party analytics providers, which help us compile aggregated statistics about the effectiveness of our promotional campaigns or other operations. These technologies enable the analytics providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across applications, websites, or other products. However, we prohibit these analytics providers from using web beacons on our sites to collect or access information that directly identifies you (such as your name or email address You can opt out of data collection or use by some of these analytics providers by visiting any of the following sites: Adjust, AppsFlyer, Clicktale, Flurry Analytics, Google Analytics (requires you to install a browser add-on), Kissmetrics, Mixpanel, Nielsen, Acuity Ads, WebTrends or Optimizely.

Other similar technologies

In addition to standard cookies and web beacons, our products can also use other similar technologies to store and read data files on your computer. This is typically done to maintain your preferences or to improve speed and performance by storing certain files locally. But, like standard cookies, these technologies can also store a unique identifier for your computer, which can then track behaviour. These technologies include Local Shared Objects (or "Flash cookies") and Silverlight Application Storage.

Local Shared Objects or "Flash cookies." Websites that use Adobe Flash technologies can use Local Shared Objects or "Flash cookies" to store data on your computer. To learn how to manage or block Flash cookies, go to the Flash Player help page.

Products Provided By Your Organization - Notice To End Users

If you use a Symbiosis product with an account provided by an organization you are affiliated with, that organization can:

• Control and administer your Symbiosis product and product account, including controlling privacy-related settings of the product or product account.
• Access and process your data, including the interaction data, diagnostic data, and the contents of your communications and files associated with your Symbiosis product and product accounts.

If you lose access to your account provided by an organisation (in event of change of employment, for example), you may lose access to products and the content associated with those products, including those you acquired on your own behalf, if you used that account to sign in to such products.

Many Symbiosis products are intended for use by organizations. If your organization provides you with access to Symbiosis products, your use of the Symbiosis products is subject to your organization's policies, if any. You should direct your privacy inquiries, including any requests to exercise your data protection rights, to your organization’s administrator. When you use social features in Symbiosis products, other users in your network may see some of your activity. To learn more about the social features and other functionality, please review documentation or help content specific to the Symbiosis product. Symbiosis is not responsible for the privacy or security practices of our customers, which may differ from those set forth in this privacy statement.

When you use a Symbiosis product provided by your organization, Symbiosis’ processing of your personal data in connection with that product is governed by a contract between Symbiosis and your organization. Symbiosis processes your personal data to provide the product to your organization and you. As mentioned above, if you have questions about Symbiosis’ processing of your personal data in connection with providing products to your organization, please contact your organization. If you have questions about Symbiosis’ business operations in connection with providing products to your organization as provided in the Product Terms, please contact Symbiosis as described in the Contact Us section.

Below you will find additional privacy information, such as how we secure your data, where we process your data, and how long we retain your data.

Security Of Personal Data

Symbiosis is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit highly confidential data (such as a credit card number or password) over the internet, we protect it through the use of encryption. Symbiosis complies with applicable data protection laws, including applicable security breach notification laws.

Where We Store And Process Personal Data

Personal data collected by Symbiosis may be stored and processed in India and Singapore, and in any other country where Symbiosis or its affiliates, subsidiaries, or service providers operate facilities. Typically, the primary storage location is in the customer’s region or in Singapore, often with a backup to a data centre in another region. The storage location(s) are chosen in order to operate efficiently, to improve performance, and to create redundancies in order to protect the data in the event of an outage or other problem. We take steps to process the data that we collect under this privacy statement according to this statement’s provisions and the requirements of applicable law.

We transfer personal data from India to other countries, some of which have not yet been determined to have an adequate level of data protection. For example, their laws may not guarantee you the same rights, or there may not be a privacy supervisory authority there that is capable of addressing your complaints. When we engage in such transfers, we use a variety of legal mechanisms to help protect your rights and enable these protections to travel with your data.

If third-party agents process personal data on our behalf in a manner inconsistent with the principles, we remain liable unless we prove we are not responsible for the event giving rise to the damage.

Our Retention Of Personal Data

Symbiosis retains personal data for as long as necessary to provide the products and fulfil the transactions you have requested, or for other legitimate purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types, the context of our interactions with you or your use of products, actual retention periods can vary significantly.

Other criteria used to determine the retention periods include:

• Do customers provide, create, or maintain the data with the expectation we will retain it until they affirmatively remove it?

  Examples include a record you store , or a file you keep in your container. In such cases, we would aim to maintain the data until you actively delete it, such as by marking that file or record as inactive, and then deleting that record or file. Note that there may be other reasons why the data has to be deleted sooner, for example if you exceed limits on how much data can be stored in your account.

• Is there an automated control, that enables the customer to access and delete the personal data at any time?

  If there is not, a shortened data retention time will generally be adopted.

• Is the personal data of a sensitive type?

  If so, a shortened retention time would generally be adopted.

• Has Symbiosis adopted and announced a specific retention period for a certain data type?

  For example, search queries, we de-identify stored queries by removing the entirety of the IP address after 6 months, and cookie IDs and other cross-session identifiers that are used to identify a particular account or device after 18 months.

• Has the user provided consent for a longer retention period?

  If so, we will retain data in accordance with your consent.

• Is Symbiosis subject to a legal, contractual, or similar obligation to retain or delete the data?

  Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data retained for the purposes of litigation. Conversely, if we are required by law to remove unlawful content, we will do so.

Personal Information Processing

We process your personal data in accordance with the Information Technology Act, 2000. This section of our Privacy Statement contains information required by the Information Technology Act and supplements our Privacy Statement.

In the bulleted list below, we outline the categories of personal data we collect, the sources of the personal data, our purposes of processing, and the categories of third-party recipients with whom we share the personal data.

• Name and contact data
  • Sources of personal data: Interactions with users and partners with whom we offer co-branded services
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; respond to customer questions; help, secure, and troubleshoot; and marketing
  • Recipients: Service providers and user-directed entities
• Credentials
  • Sources of personal data: Interactions with users and organizations that represent users
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; authentication and account access; and help, secure and troubleshoot
  • Recipients: Service providers and user-directed entities
• Demographic data
  • Sources of personal data: Interactions with users and purchases from data brokers
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing
  • Recipients: Service providers and user-directed entities
• Payment data
  • Sources of personal data: Interactions with users and financial institutions
  • Purposes of Processing (Collection and Sharing with Third Parties): Transact commerce; process transactions; fulfil orders; help, secure, and troubleshoot; and detect and prevent fraud
  • Recipients: Service providers and user-directed entities
• Subscription and licensing data
  • Sources of personal data: Interactions with users and organizations that represent users
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide, personalize, and activate our products; customer support; help, secure, and troubleshoot; and marketing
  • Recipients: Service providers and user-directed entities
• Interactions
  • Sources of personal data: Interactions with users including data Symbiosis generates through those interactions
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide and personalize our products; product improvement; product development; marketing; and help, secure and troubleshoot
  • Recipients: Service providers and user-directed entities
• Content
  • Sources of personal data: Interactions with users and organizations that represent users
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; safety; and help, secure, and troubleshoot
  • Recipients: Service providers and user-directed entities
• Video or recordings
  • Sources of personal data: Interactions with users and publicly available sources
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; product improvement; product development; marketing; help, secure, and troubleshoot; and safety
  • Recipients: Service providers and user-directed entities
• Feedback and ratings
  • Sources of personal data: Interactions with users
  • Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; product improvement; product development; customer support; and help, secure, and troubleshoot
  • Recipients: Service providers and user-directed entities

While the bulleted list above contains the primary sources and purposes of processing for each category of personal data, we also collect personal data from the sources listed in the Personal data we collect section. Similarly, we process all categories of personal data for the purposes described in the How we use personal data section, such as meeting our legal obligations, developing our workforce, and doing research.

Disclosures of personal data for business or commercial purposes. As indicated in the Reasons we share personal data section, we share personal data with third parties for various business and commercial purposes. The primary business and commercial purposes for which we share personal data are the purposes of processing listed in the table above. However, we share all categories of personal data for the business and commercial purposes in the Reasons we share personal data section.

Advertising. Advertising allows us to provide, support, and improve some of our products. Symbiosis does not use what you say in email, chat, video calls or voice mail, or your documents, photos, or other personal files to target ads to you. We use other data, detailed below, for advertising in our products and on third-party properties. For example:

• Symbiosis may use data we collect to select and deliver some of the ads you see on web properties.
• We may share data we collect with partners, such as Google or Facebook (see below), so that the ads you see in our products and their products are more relevant and valuable to you.
• Advertisers may choose to place our web beacons on their sites, or use similar technologies, in order to allow Symbiosis to collect information on their sites such as activities, purchases, and visits; we use this data on behalf of our advertising customers to provide ads.

The ads that you see may be selected based on data we process about you, such as your interests and favourites, your location, your transactions, how you use our products, your search queries, or the content you view. For example, if you view content about automobiles, we may show advertisements about cars; if you search “biryani in Lucknow”, you may see advertisements in your search results for restaurants in Lucknow.

The ads that you see may also be selected based on other information learned about you over time using demographic data, location data, search queries, interests and favourites, usage data from our products and sites, and the information we collect about you from the sites and apps of our advertisers and partners. We refer to these ads as "personalized advertising" in this statement. To provide personalized advertising, we combine cookies placed on your device using information that we collect (such as IP address) when your browser interacts with our websites. If you opt out of receiving personalized advertising, data associated with these cookies will not be used.

We may use information about you to serve you with personalized advertising when you use Symbiosis services. If you are logged in with your account and have consented to allow our product or service to use your online activity for personalized advertising, you will see offers for products and services based on your online activity while using them.

Further details regarding our advertising-related uses of data include:

• Health-related ad targeting. We provide personalized advertising based on a limited number of standard, non-sensitive health-related interest categories, including allergies, arthritis, cholesterol, cold and flu, diabetes, gastrointestinal health, headache / migraine, healthy eating, healthy heart, men’s health, oral health, osteoporosis, skin health, sleep, and vision / eye care. We will also personalize ads based on custom, non-sensitive health-related interest categories as requested by advertisers.
• Data retention. For personalized advertising, we retain data for no more than 13 months, unless we obtain your consent to retain the data longer.
• Data sharing. In some cases, we share with advertisers reports about the data we have collected on their sites or ads.

Data collected by other advertising companies. Advertisers sometimes include their own web beacons (or those of their other advertising partners) within their advertisements that we display, enabling them to set and read their own cookie. Additionally, Symbiosis partners with third-party ad companies to help provide some of our advertising services, and we also allow other third-party ad companies to display advertisements on our sites. These third parties may place cookies on your computer and collect data about your online activities across websites or online services.

Preview Or Free Of Charge Releases

Symbiosis offers preview, insider, beta or other free-of-charge products and features ("previews") to enable you to evaluate them while providing Symbiosis with data about your use of the product, including feedback and device and usage data. As a result, previews can automatically collect additional data, provide fewer controls, and otherwise employ different privacy and security measures than those typically present in our products. If you participate in previews, we may contact you about your feedback or your interest in continuing to use the product after general release.

Changes To This Privacy Policy

We update this privacy statement when necessary to provide greater transparency or in response to:

• Feedback from customer, regulators, industry, or other stakeholders.
• Changes in our products.
• Changes in our data processing activities or policies.

When we post changes to this statement, we will revise the "last updated" date at the top of the statement and describe the changes on the Change history page. If there are material changes to the statement, such as a change to the purposes of processing of personal data that is not consistent with the purpose for which it was originally collected, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this privacy statement to learn how Symbiosis is protecting your information.