Privacy Policy

Indiquer Global Service Private Limited ("Indiquer", "we", "us", or "our"), with corporate headquarters in Chennai, India, along with its subsidiaries (including Indiquer RCM LLC in the United States and Indiquer Creative Studio UK), provides enterprise software, cloud architecture, business process management, revenue cycle management (RCM), and digital marketing solutions.

This Privacy Policy applies to personal data collected through our public websites (including indiquer.in), enterprise SaaS platforms (Indi360, Findesk, IndiNotes), client portals, and customer communications. By accessing or using our services, you acknowledge that you have read and understood this policy.

We classify the data we collect into four primary categories:

We process personal data based on legitimate business purposes and established lawful grounds:

• Performance of a Contract: Setting up enterprise SaaS instances, managing user accounts, executing software engineering deliverables, and providing continuous technical support.
• Legitimate Interests: Securing our networks from cyber threats, detecting unauthorized access, preventing platform abuse, and optimizing page load speeds and user experience.
• Legal & Regulatory Obligations: Complying with accounting rules, tax filing mandates (GST/TDS in India, IRS filings in the US, HMRC in the UK), and statutory reporting laws.
• Consent: Sending project proposals, technical whitepapers, or marketing newsletters when you have explicitly requested them. Consent can be revoked at any time.

Security is an integral part of our software engineering philosophy. We implement state-of-the-art technical and organizational measures to safeguard your information:

• Encryption Standards: Data in transit is secured using TLS 1.3 encryption. Sensitive database fields and backups are encrypted at rest using AES-256 bit encryption.
• Role-Based Access Control (RBAC): Employee access to production customer databases is strictly restricted to certified engineers requiring access for maintenance, enforced via multi-factor authentication (MFA).
• Infrastructure Hardening: Our servers are hosted in SOC 2 Type II and ISO 27001 certified data center facilities with automated intrusion detection, DDoS mitigation, and daily off-site backups.
• Data Retention Windows: We retain customer contact details only as long as necessary to serve the commercial engagement or comply with statutory record-keeping periods (typically 7 years for financial records).

Indiquer does not sell, rent, or trade your personal information to data brokers or third-party advertisers.

We share personal data solely under strict contractual confidences with:

• Vetted Cloud Infrastructure Providers: Highly reliable cloud partners (AWS, Google Cloud Platform, Hetzner, DigitalOcean) who operate our application hosting environments under formal Data Processing Agreements (DPAs).
• Licensed Payment Processors: PCI-DSS Level 1 compliant processors (Stripe, Razorpay) for transaction billing.
• Professional Legal & Audit Advisors: Statutory chartered accountants, legal counsel, and tax auditors under binding non-disclosure agreements.
• Law Enforcement & Public Authorities: Solely when compelled by a valid court order, subpoena, or applicable statutory law.

Depending on your jurisdiction (such as under the European Union GDPR, the United Kingdom GDPR, or the India Digital Personal Data Protection Act 2023), you hold the following rights:

• Right of Access: Request confirmation of whether your data is being processed, and obtain a machine-readable copy of your personal data.
• Right to Rectification: Request correction of inaccurate, incomplete, or out-of-date records.
• Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your personal records from our databases, subject to statutory retention obligations.
• Right to Restrict Processing: Limit how we process your information during an active dispute or investigation.
• Right to Data Portability: Obtain your data in a structured, commonly used CSV or JSON format.
• Right to Object: Object to automated processing or direct communications.

To exercise any of your privacy rights, submit a formal deletion request, or raise questions regarding our processing practices, please use our self-service portal or contact our Data Protection Officer:

You can also directly file an expedited request on our dedicated Data Deletion Request Page. We will confirm identity and process verified requests within thirty (30) calendar days without charge.