Privacy Policy
Your privacy matters to us. This policy explains how we collect, use, and protect your data.
This Privacy Policy is compliant with the Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology (Amendment) Act 2008.
1. Introduction
Open Key Techlabs Private Limited ("Open Key", "we", "us", or "our") operates the Open Key platform at https://openkey.in. We are committed to protecting the personal data of our users and handling it responsibly, transparently, and in compliance with applicable Indian data protection laws.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how we protect it, and what rights you have over your data. Please read this policy carefully.
By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
2. Data Fiduciary and Data Processor
Open Key Techlabs Private Limited acts as a Data Fiduciary under the DPDP Act 2023 in respect of the personal data of its registered users. In respect of data that business owners collect from their own customers through websites built on the Open Key platform, Open Key acts as a Data Processor on behalf of the business owner who is the Data Fiduciary.
3. What Data We Collect
3.1 Data You Provide Directly
- Name, email address, and mobile number provided during registration.
- Business details including business name, type, address, and description.
- GST number or Udyam Aadhaar registration number for account verification.
- Payment information processed through our payment gateway partners. We do not store full payment card details.
- Content, images, text, and files you upload to create your website.
- Communications you send to us including support requests and feedback.
3.2 Data We Collect Automatically
- Device information including device type, operating system, browser type, and unique device identifiers.
- Log data including IP address, access times, pages viewed, and referring URLs.
- Usage data including how you interact with the Platform, features you use, and time spent.
- Location data at city and state level inferred from your IP address.
- Cookie and tracking data as described in our Cookie Policy.
3.3 Data from Third Parties
- Business verification data from government databases when verifying your GST number or Udyam Aadhaar.
- Payment status information from our payment gateway partners.
4. How We Use Your Data
4.1 To Provide and Operate the Platform
- Creating and managing your Account.
- Enabling you to build, publish, and manage your business website.
- Processing your Subscription payments and issuing invoices.
- Delivering the Build Service when contracted.
- Providing customer support and responding to your enquiries.
4.2 To Improve the Platform
- Analysing usage patterns to understand how the Platform is used and to improve its features and performance.
- Conducting research and development to build new features and services.
- Debugging and resolving technical issues.
4.3 For AI Model Training
Open Key is developing artificial intelligence and machine learning capabilities to improve the Platform. We may use aggregated and anonymised data derived from Platform usage to train, test, and improve our internal AI models. This may include patterns in website structure, content categories, user behaviour on the Platform, and business category information.
Where personal data is used in connection with AI model training, we apply technical measures including anonymisation and aggregation to ensure that individual users cannot be identified. We do not use your personal communications, your customers' personal data, or your financial information for AI training purposes without your explicit consent.
You may opt out of your anonymised data being used for AI model training by contacting us at support@openkey.in. Opting out does not affect your use of the Platform.
4.4 For Marketing and Communications
With your consent given at the time of registration, Open Key may contact you via email, SMS, WhatsApp, and phone for the following purposes:
- Sending updates about the Platform including new features, improvements, and announcements.
- Sending promotional offers, discounts, and information about our paid plans and add-on services.
- Sharing relevant business growth tips, guides, and educational content.
- Conducting surveys and research to improve our services.
You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, by replying STOP to any marketing SMS, or by contacting us at support@openkey.in. Opting out of marketing communications does not affect transactional communications such as payment receipts, account notifications, and support responses.
4.5 For Business Analytics and Reporting
We may use aggregated, non-identifiable information about our user base for business analytics, market research, investor reporting, and promotional purposes. For example, we may report that we have served businesses across a certain number of cities or industries. This data does not identify any individual business or user.
4.6 For Legal and Compliance Purposes
- Complying with applicable laws, regulations, and court orders.
- Enforcing our Terms and Conditions and other policies.
- Protecting the rights, property, and safety of Open Key, our users, and the public.
5. How We Share Your Data
Open Key does not sell your personal data to third parties. We may share your data in the following limited circumstances:
5.1 Service Providers
We share data with third-party service providers who assist us in operating the Platform. These include cloud hosting providers, payment gateway operators, email service providers, SMS gateway providers, WhatsApp Business Solution Providers, analytics tools, and customer support tools. All service providers are bound by contractual obligations to protect your data and use it only for the purposes we specify.
5.2 Business Partners
If you use our Build Service through an authorised agency partner, we share relevant details of your build requirements with that partner to fulfil the service. Agency partners are bound by confidentiality obligations.
5.3 Within the Platform Ecosystem
We may make your business profile information including your business name, category, location, contact details, and website available within the Open Key platform ecosystem to facilitate discovery, connections, and growth opportunities relevant to your business. You may control what information is publicly visible through your Account settings.
5.4 Legal Requirements
We may disclose your data if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Open Key, our users, or the public.
5.5 Business Transfers
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, your data may be transferred to the acquiring entity. We will notify you of any such transfer and the privacy practices that will apply to your data.
6. Data Retention
We retain your personal data for as long as your Account is active or as necessary to provide you with the Services. After your Account is terminated, we retain your data for a period of 3 years unless a longer retention period is required by applicable law or is necessary to resolve disputes or enforce our agreements.
You may request deletion of your personal data at any time. We will action your request within 30 days subject to any legal obligations to retain data.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include encryption of data in transit using SSL/TLS, access controls restricting data access to authorised personnel, regular security assessments, and secure data storage practices.
While we take reasonable precautions, no method of transmission over the internet or method of electronic storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of the breach in accordance with the DPDP Act 2023.
8. Your Rights Under the DPDP Act 2023
As a data principal under the Digital Personal Data Protection Act 2023, you have the following rights:
- Right to Access: You have the right to obtain information about the personal data we process about you and the purposes for which it is processed.
- Right to Correction: You have the right to correct inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You have the right to request deletion of your personal data, subject to our legal obligations to retain data.
- Right to Grievance Redressal: You have the right to raise a grievance with our Grievance Officer regarding our handling of your personal data.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
- Right to Nominate: Under the DPDP Act, you have the right to nominate an individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, please contact our Grievance Officer at support@openkey.in. We will respond to your request within 30 days.
9. Cookies
We use cookies and similar tracking technologies to operate the Platform. Please refer to our Cookie Policy for detailed information about the cookies we use, their purposes, and how you can manage them.
10. Children's Privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data without parental consent, please contact us at support@openkey.in. and we will take steps to delete such data.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. We will notify you of material changes by email to your registered email address at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of the updated policy constitutes your acceptance of the changes.
12. Grievance Officer
In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the details of our Grievance Officer are as follows:
Name: Jigar Padhiyar
Designation: Grievance Officer
Company: Open Key Techlabs Private Limited
Email: support@openkey.in
Website: https://openkey.in
Address: Ahmedabad, Gujarat, India
You may lodge a grievance with our Grievance Officer within 30 days of becoming aware of the issue. We will acknowledge your grievance within 48 hours and resolve it within 30 days of receipt.
13. Contact Us
For any privacy-related questions or concerns:
Privacy Email: privacy@openkey.in
Grievance Email: grievance@openkey.in
General Support: support@openkey.in
Website: https://openkey.in