Privacy Policy

QYROLAX TECHNOLOGIES PVT LTD — PRIVACY POLICY Last updated: September 18, 2026 1. OVERVIEW Qyrolax Technologies Pvt Ltd ("Qyrolax," "we," "us," or "our") is a software quality assurance and testing services company based in Gurugram, Haryana, India. This Privacy Policy explains what personal data we collect when you visit qyrolax.com, submit an enquiry, apply for a role, chat with us, or interact with our internal CRM platform (panel.qyrolax.com) — and how we use, store, share, and protect that data. This policy applies to visitors to qyrolax.com; prospective clients who submit our "Free QA Assessment" enquiry form; candidates who apply for open roles through our Careers page; visitors who use our website chatbot; and Qyrolax staff who access the CRM to manage client and candidate data. 2. INFORMATION WE COLLECT Enquiry / "Free QA Assessment" form. When you submit the lead form on qyrolax.com, we collect your name, work email, phone number, application URL or staging link (if provided), application type, the testing services you selected, your current QA setup, and any project details you type in. Careers applications. When you apply for a role through our Careers page, we collect your name, contact details, and any other information you submit, along with your uploaded resume/CV file. Website chatbot. Messages you send to the chatbot on qyrolax.com are collected so we can respond to your question or route it to our team. CRM staff accounts. For our own staff who log in to panel.qyrolax.com, we store a login email, a securely hashed password, and session data used to keep you signed in. This data is not linked to visitor or client personal data. Automatically collected data. Like most websites, our servers and hosting provider log standard technical data (such as IP address, browser type, and pages visited) as part of normal operation. As of this policy, we have not built any third-party advertising or marketing trackers into qyrolax.com. If that changes, we will update this section and, where required, ask for your consent first. 3. HOW WE USE YOUR INFORMATION We use the information described above to: - Respond to your enquiry and prepare a QA assessment or quote for our testing services - Evaluate job applications and contact candidates about open roles - Answer chatbot questions and improve how we respond to common questions - Operate and secure the CRM for authorized staff - Send service-related emails — for example, confirming receipt of your enquiry, password resets, or application updates — through our Google Workspace email system - Meet our legal, accounting, and contractual obligations We do not sell personal data to third parties, and we do not use your data for purposes beyond those described here without your consent. 4. LEGAL BASIS AND CONSENT (DPDP ACT, 2023) Under India's Digital Personal Data Protection Act, 2023, Qyrolax acts as a "Data Fiduciary," and you (or the individual whose data is submitted) are the "Data Principal." We process personal data on the following bases: - Consent — for enquiry form submissions, chatbot messages, and job applications, you provide your data voluntarily and give consent by submitting it to us. - Contract / legitimate use — to communicate with existing clients and deliver services under an active engagement. - Legal obligation — where processing is required by applicable law. Where we rely on your consent, you may withdraw it at any time by contacting us (see Section 11). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and may mean we can no longer respond to your enquiry or application. 5. COOKIES AND SESSION DATA qyrolax.com (public site). As of this policy, the public website does not set marketing or advertising cookies that we are aware of. If this changes in the future, we will update this section and, where required, show a cookie consent banner before any non-essential cookie is set. panel.qyrolax.com (CRM). After a staff member logs in, the CRM sets a session cookie used solely to keep them authenticated while using the platform. This cookie is not shared with third parties and is not used to track members of the public. 6. DATA STORAGE, SECURITY AND RETENTION Personal data submitted through the website and CRM is stored in a managed MySQL database hosted by Aiven, accessed over an encrypted (TLS) connection. Uploaded resumes/CVs are stored on our application infrastructure and are only accessible to authorized Qyrolax staff. Access to the CRM is restricted to authenticated staff accounts, protected by a login CAPTCHA and session-based authentication — there is no public access to CRM data. We retain enquiry and application data for as long as reasonably necessary to respond to your enquiry, evaluate your application, or deliver a service engagement, and for a limited period afterward to meet legal, accounting, or dispute-resolution needs, after which it is deleted or anonymised. 7. SHARING WITH THIRD PARTIES AND SUB-PROCESSORS We do not sell your personal data. We share it only with the service providers that help us run qyrolax.com and our CRM, each of which processes data on our behalf: - Google Workspace (Google) — business email; sends and receives service-related email - Aiven — managed database hosting; stores our MySQL database over an encrypted connection - Vercel — application hosting; serves qyrolax.com and processes requests to our servers - GitHub — source code hosting (application code only, not client personal data) We may also disclose personal data where required by law, to enforce our agreements, or to protect the rights, property, or safety of Qyrolax, our clients, or others. 8. YOUR RIGHTS AS A DATA PRINCIPAL Under the DPDP Act, you have the right to: - Access a summary of the personal data we hold about you and how we process it - Request correction, completion, or updating of your personal data - Request erasure of your personal data, unless we are required by law to retain it - Withdraw consent at any time (Section 4) - Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity - Lodge a grievance with our Grievance Officer, and if unresolved, escalate it to the Data Protection Board of India To exercise any of these rights, contact us using the details in Section 11. 9. CHILDREN'S DATA Our services are intended for businesses and working professionals. We do not knowingly collect personal data from individuals under 18. If we learn that we have inadvertently collected such data, we will delete it. If you believe a minor has submitted data to us, please contact us so we can remove it. 10. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time to reflect changes to our services, technology, or legal requirements. The "last updated" date on this page will reflect the most recent revision. Where changes are material, we will take reasonable steps to let affected users know. 11. GRIEVANCE OFFICER AND CONTACT In accordance with the DPDP Act, 2023, our Grievance Officer is: Gaurav Tripathi Qyrolax Technologies Pvt Ltd Gurugram, Haryana, India Email: gaurav@qyrolax.com For general privacy questions, you can also write to info@qyrolax.com. We aim to acknowledge grievances promptly and resolve them within the timelines required under applicable law.