Privacy Policy

1. Information We Collect

a. Information you provide directly

• Account registration details: name, email address, phone number, designation.
• Company information: CIN, company name, registered address, directors' details.
• Documents and data uploaded for the purpose of filing (e.g., board resolutions, financial statements).
• DSC (Digital Signature Certificate) credentials used to sign filings.
• Payment information (we do not store full card numbers this is handled by our PCI-compliant payment processor).
• Communications you send to us (support tickets, emails).

b. Information collected automatically

• Log data: IP address, browser type, pages visited, time stamps.
• Device information: operating system, screen resolution.
• Usage data: features accessed, filings initiated, errors encountered.
• Cookies and similar tracking technologies (see Section 7).

c. Information from third parties

• Data fetched from the MCA portal (with your authorisation) including director DINs, company master data, and filing history.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service, including preparing and submitting MCA filings on your behalf.
• Authenticate your identity and prevent fraud.
• Process payments and send billing information.
• Send transactional communications (filing status, deadline reminders, account alerts).
• Send marketing communications where you have consented (you may opt out at any time).
• Comply with legal obligations under Indian law, including record retention requirements under the Companies Act, 2013.
• Respond to your queries and provide customer support.
• Conduct internal analytics to improve product features.

3. Legal Basis for Processing

We process your personal data on the following bases:

• Contract: Processing necessary to provide the Service you have subscribed to.
• Legal obligation: Compliance with applicable Indian laws and regulatory requirements.
• Legitimate interest: Improving the Platform, security monitoring, fraud prevention.
• Consent: Marketing communications (you may withdraw consent at any time).

4. Sharing of Information

We do not sell your personal data. We share it only in the following circumstances:

• MCA and regulatory bodies: Your data and filings are submitted to the MCA portal as part of the core Service.
• Service providers: We use carefully vetted third-party vendors for cloud hosting, payment processing, email delivery, and analytics. These vendors are contractually bound to process data only as instructed by us.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.
• Legal requirements: We may disclose information where required by law, court order, or a government authority in India.

5. Data Retention

We retain your personal data for as long as your account is active and as required by law. Under the Companies Act, 2013 certain statutory records must be retained for a minimum period we honour these requirements. When data is no longer required, we delete or anonymise it securely. You may request deletion of your account data at any time (subject to statutory retention obligations).

6. Data Security

We implement industry-standard security measures including:

• ISO/IEC 27001:2022 certified Information Security Management System (Cert No. 305026072996IS).
• ISO 9001:2015 certified Quality Management System (Cert No. 305026072995Q).
• TLS 1.2+ encryption for all data in transit.
• Encryption at rest for sensitive data including DSC credentials.
• Role-based access controls and audit logs within our infrastructure.
• Regular security assessments and vulnerability scanning.

No system is 100% secure. In the event of a data breach that affects your rights, we will notify you and the relevant authorities in accordance with applicable law.

7. Cookies

We use cookies and similar technologies to:

• Keep you logged in (essential / session cookies).
• Remember your preferences.
• Understand how users navigate the platform (analytics cookies).

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the Service.

8. Your Rights

Subject to applicable law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data (subject to legal retention obligations).
• Portability: Receive your data in a structured, machine-readable format.
• Objection / Withdrawal: Object to certain uses of your data or withdraw consent for marketing at any time.

To exercise any of these rights, email us at privacy@leagully.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected such data, we will delete it promptly.

10. Third-Party Links

The Platform may contain links to third-party websites (e.g., the MCA portal). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Changes to this Policy

We may update this Policy periodically. Material changes will be communicated via email or a prominent notice on the Platform at least 7 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and applicable rules, we have designated a Grievance Officer to address any complaints or concerns:

Grievance Officer
Renard Technologies Private Limited
2nd Floor, Plot No. K-13, Office No. 205, Brij Anukampa,
Ashok Marg, C-Scheme, Jaipur – 302001, Rajasthan, India
Email: privacy@leagully.com
Response time: within 30 days of receipt.