Privacy Policy

This Privacy Policy explains how [CoFind — legal entity name] (“CoFind”, “we”, “us”) handles personal data in connection with the CoFind website (cofind.io) and the CoFind product (app.cofind.io). We are committed to handling personal data in accordance with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable law.

1. What CoFind is — and is not

CoFind is not a data broker. We do not scrape, buy, or fetch personal contact data, and we do not sell personal data to anyone. CoFind is a tool that helps a sales team understand and act on the inbound leads and enquiries they already have. All actions taken in the product are logged and auditable.

2. Who is responsible for your data

Leads and enquiries you bring to CoFind (customer data). When you use CoFind as a customer, you decide why and how the personal data of your leads is processed — you are the Data Fiduciary. CoFind acts as your Data Processor, processing that data only on your documented instructions to provide the service. You are responsible for ensuring you have a lawful basis (such as consent) to process your leads’ personal data and to give it to us.

Website visitors and account holders. For personal data about visitors to our website and holders of a CoFind account, CoFind is the Data Fiduciary, and this policy describes how we handle it.

3. Personal data we process

• Website visitors: basic technical and log data (such as IP address, browser/device type, and pages visited) used to operate and secure the site. [Confirm whether any analytics/cookies are used.]
• Account holders / customers: name, work email, company, role, and billing details needed to provide and bill for the service.
• Lead & enquiry data: the leads, enquiries, and related notes you upload or connect. We process this only as your processor, on your instructions.
• Communications: messages you send us (e.g. to hello@cofind.io) and support correspondence.

4. Why we process it, and our lawful basis

We process personal data to provide, maintain, secure, and improve the service; to process billing; to provide support; and to comply with legal obligations. Our lawful basis is the performance of our contract with you, your consent where required, and other legitimate uses permitted under the DPDP Act. [Confirm the exact bases with counsel.] We do not use lead or enquiry data for any purpose other than providing the service to you.

5. Your rights as a Data Principal

Subject to the DPDP Act, you may:

• access a summary of the personal data we process about you;
• request correction, completion, or updating of that data;
• request erasure of your personal data;
• withdraw consent where processing relies on it;
• nominate another individual to exercise your rights; and
• raise a grievance and have it addressed.

To exercise any of these, contact our Grievance Officer (below). If you are a lead of one of our customers, please direct your request to that customer (the Data Fiduciary); we will assist them as their processor.

6. Sharing and sub-processors

We do not sell personal data. We share it only with service providers who help us run CoFind — such as cloud hosting, our payment gateway, and email delivery — under confidentiality and data-protection terms. [List current sub-processors.]

7. Retention

We keep personal data only for as long as needed for the purposes above or as required by law. Customer lead and enquiry data is retained for the life of your account and deleted or returned on request or on termination, subject to legal retention requirements.

8. Security

We use reasonable technical and organizational safeguards to protect personal data, and maintain an audit log of actions taken in the product. [Summarize key security measures.]

9. International transfers

Where personal data is processed or stored outside India, we do so in accordance with the DPDP Act and applicable transfer restrictions. [Confirm data-hosting locations.]

10. Children

CoFind is a business tool and is not directed to children. We do not knowingly process the personal data of children without verifiable consent of a parent or lawful guardian as required by the DPDP Act.

11. Changes to this policy

We may update this policy from time to time. The current version always lives at cofind.io/privacy, with the “Last updated” date above.

12. Contact & Grievance Officer

For any privacy question or to exercise your rights, contact our Grievance Officer:

• [Grievance Officer name]
• Email: hello@cofind.io
• [Registered address], Bengaluru, India