Privacy Policy

Thank you for visiting and using CYBX!

CYBX (“we”, “us”, “our”, “cybx.in“, “63SATS Cybertech Limited” “CYBX”, which expressions, unless repugnant to the context thereof, shall include its and/or its subsidiary(ies) and/or affiliate(s)) is committed to protecting the privacy of the users (“you” / “your” / “yourself”) of its Site including sub-sites, platforms, applications, m-web platforms and other platforms, software applications offered by us (collectively, “Applications”) and has provided this privacy policy (“Policy”) to familiarize you with how CYBX collects, uses, handles, processes and discloses your information collected through the Applications.

The terms of the Policy, along with our terms of service available at: cybx.in/terms-conditions (“Terms of Service”), provided herein govern your use of any and all of the Applications and the information accessible on or from these Applications.

This Policy is issued by CYBX as a Data Fiduciary under the applicable law and is intended to inform you, the Data Principal of your rights and our obligations regarding the collection, use, processing, transfer, and protection of your personal data.

This Policy complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

These IT Rules continue to be binding until they are explicitly repealed or superseded by subsequent rules.

This Policy is integrated into our Terms of Service by reference and may be read as part and parcel of the same.

Please read this Policy carefully to understand our policies and practices regarding Data (as defined below) and how we will treat it. If you do not agree with this Policy or the terms contained herein, you should immediately and forthwith cease accessing the Applications and Services, in any manner whatsoever.

This Policy describes the following:

  1. Statement of CYBX’s practices and policies about Data including Personal Data that we directly collect, or you provide to us on or through the use of our Services;
  2. The types of Personal Data that we may collect from you when you access or use our Applications and/or Services;
  3. Purposes for which we collect and process your Personal Data and our practices for collecting, using, maintaining, processing, protecting, and disclosing the Personal Data; and
  4. Security practices and procedures for protecting the privacy of Personal Data.

This Policy applies only to the Personal Data we collect or the Personal Data you provide to CYBX on and through the use of the Applications and the Services.

Collection of Information

The type of Information we collect from you, and further process depends upon your use of the Applications and Services. In general, we collect the following types of data depending on your interaction with our services:

  1. Personal Data to means any data about an individual who is identifiable by or in relation to such data. This includes:
    • Name
    • Email address
    • Mobile phone number
    • Registration or account information
    • Physical address
    • PAN, date of birth, and other identifiers
    • Financial data such as bank account, credit/debit card numbers
    • Passwords or authentication credentials (considered sensitive personal data)
  2. Non-Personal Data which refers to anonymised or aggregated data that cannot identify an individual and includes:
    • Session data
    • Log files
    • Cookies
    • Device/browser metadata
    • Web beacons and analytics information

We use Non-Personal Data to improve the Application’s performance, ensure security, conduct analytics, and measure user engagement, in accordance with the provision of applicable laws, prevailing for the time being in force.

Personal Information and Non-Personal Information is collectively referred to as “Information”.

Your Representation

You represent that all Information you provide is accurate, current, and up-to-date, and that you have obtained all necessary consents and permissions to provide such Information. You further confirm by your informed consent for data processing that providing such Information and its processing by CYBX will not violate any third-party rights, contracts, court orders, or applicable laws.

How we collect your information

We collect Information:

  1. Directly from you when you provide it to us (e.g., while creating an account, filling forms, or contacting us); and/or
  2. Automatically during your use of the Application and Services, including data like IP address, device ID, session logs, and tracking data (e.g., cookies, web beacons);
  3. Through our various automatic data collection processes that collect public information about users/ potential users from the internet; and/or
  4. From third parties with whom you engage to use our Services or who are authorised intermediaries, subject to proper consents and contracts.

We may collect data regarding how you use and interact with the Applications or Services, such as:

  • Search queries
  • Pages visited
  • Links clicked
  • Duration of session
  • Error logs
  • Comments posted
  • Navigation path and timestamps

This activity data, when linked to a user or device, qualifies as Personal Data and will be processed accordingly.

Use of Information

You may be required to provide Personal Data while registering on the Applications. This data will be used for the following purposes in accordance with the provisions of applicable laws:

  1. To provide and fulfil the services you request, including use of Applications and platform functionalities;
  2. To handle your queries, feedback, complaints, customer support, and related communications;
  3. To respond to your requests for information or content;
  4. To notify you about service-related information, changes to terms or policies, or other operational announcements;
  5. To offer you personalised services, content recommendations, and notifications about latest content;
  6. To send you marketing and promotional communications, subject to your consent;
  7. To perform internal audits, analytics, and quality improvement efforts;
  8. To personalise user experience through behavioural targeting, product suggestions, and custom content;
  9. To process subscriptions or purchases through the Application, including payment handling and post-purchase support;
  10. To improve functionality, interface, and overall experience of the Applications;
  11. To protect the integrity, security, and proper functioning of the Applications;
  12. To comply with legal obligations, judicial directions, or assist government authorities where required by applicable law;
  13. To share Personal Data with authorised third-party processors (under lawful contract) for personalisation, analytics, hosting, and related processing tasks.

Personal Data is retained only for the period necessary for these purposes, after which it is deleted or anonymised as required under the applicable law.

Personal Data posted by you in public sections of the platform (e.g., forums, blogs) is considered public and not protected under this Policy. Likewise, data freely available in the public domain is not considered sensitive.

CYBX may also use Personal Data to verify access rights and provide you appropriate levels of access to its products and services.

Use of Non-Personal Data

Non-Personal Data may be used for analytical purposes, advertising strategy, performance tracking, and demographic assessments. Since this data does not identify individuals, it is not subject to the same restrictions and may be retained or shared without limitation.

Disclosure

CYBX does not sell or rent Personal Information. Personal Information may be disclosed under the following circumstances:

  1. To trusted third parties (e.g., affiliates, cloud vendors, IT service providers) who assist in running our applications. These entities are contractually bound to maintain confidentiality and follow legal safeguards as per prevailing law.
  2. As necessary, to:
    • Comply with Indian or foreign law
    • Respond to court orders or lawful requests by public authorities
    • Enforce our Terms of Service
    • Protect our users, systems, or affiliates
    • Prevent fraud, harm, or pursue remedies in case of breach
  3. The following types of data may be shared under valid consent or contract:
    • Name, email, phone number, PAN, date of birth
    • Device ID, usage logs, location, browser type, operating system

    These are used to personalise the app and conduct lawful analytics.

  4. CYBX may use third-party analytics tools (like Google Analytics) to collect anonymised data (traffic stats, interests, bounce rates), governed by their own cookie/tracking policies.

Information Security and Storage

CYBX uses reasonable security practices, procedures and measures, at the minimum those mandated under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules 2011) and applicable law to safeguard your Personal Data. Such reasonable security measures and safeguards include but are not limited to:

  1. Encryption of Personal Data in transit and at rest;
  2. Logging and monitoring to detect and remediate unauthorized access;
  3. Business continuity and disaster recovery procedures.

These safeguards align with IT Rules 2011, which mandates implementation of reasonable security practices such as ISO/IEC 27001 standards. CYBX also implements security safeguards to prevent personal data breaches.

You acknowledge the inherent risks of data transmission over the internet and agree that CYBX will not be liable for breaches unless caused by gross or wilful negligence.

Your data is primarily stored electronically, though some may be stored physically. Data may be processed or stored outside India but only in compliance with Indian law.

CYBX may enter into an agreement with third parties (in or outside of India) to store your Personal Information with such third parties. CYBX will ensure that such third parties adopt reasonable security standards to safeguard your Personal Information.

Notwithstanding anything contained in this Policy or elsewhere, CYBX shall not be held responsible for any loss, damage or misuse of your Personal Information, if such loss, damage or misuse is attributable to a Force Majeure Event. A “Force Majeure Event” shall mean any event that is beyond the reasonable control of CYBX and shall include, without limitation, sabotage, fire, flood, explosion, acts of God, civil commotion, strikes or industrial action of any kind, riots, insurrection, war, acts of government, computer hacking, unauthorized access to computer data and storage device, computer crashes, breach of security and encryption, etc.

Third Party Websites, Applications and Services

The Application/website may include links to other websites/applications. Such websites/application are governed by their respective privacy policies, which are beyond our control. Once you leave our servers (you can tell where you are by checking the URL in the location bar on your browser), use of any information you provide is governed by the privacy policy of the operator of the website/application you are visiting. That policy may differ from ours. If you can’t find the privacy policy of any of these websites/application via a link from the website’s homepage, you should contact the website/application directly for more information.

Rights available to you

You have the following rights under applicable data protection law, and we will comply with them as required and not violate your rights with respect of your Personal Information when you exercise them:

  • Right to access and correct your Personal Information: If you would like to review or change your Personal Information, you can contact us at support@cybx.in. Upon receiving your request, we will provide you with a summary of your Personal Information, which is being processed by us, and the identities of all other data fiduciaries and processors with whom your Personal Information has been shared, along with a description of the Personal Information so shared.
  • We will take reasonable steps to accurately record the Personal Information you provide and any subsequent updates. We encourage you to review, update and correct the Personal Information that we maintain about you, and you may request that we delete your Personal Information that is inaccurate, incomplete, or irrelevant for the purposes it is being collected or being processed in a way which infringes any applicable legal requirement.
  • Your right to review, update, correct, and delete your Personal Information may be limited (i) if your requests are abusive or unreasonably excessive, (ii) where the rights or safety of another person or persons would be encroached upon, or (iii) if the information or material you request relates to existing or anticipated legal proceedings between you and us, or providing access to you would prejudice negotiations between us or an investigation of possible unlawful activity. Your right to review, update, correct, and delete your Personal Information is subject to our records retention policies and applicable law, including any statutory retention requirements.
  • Right to erasure: You have the right to seek erasure of your Personal Information by us. Please note our Information retention policy, as set below. In accordance with applicable data protection laws, you can ask us to erase your Personal Information where:
    1. you do not believe that we need your Personal Information in order to process it for the purposes set out in this Policy;
    2. if you had given us consent to process your Personal Information, you withdraw that consent, and we cannot otherwise legally process your Personal Information;
    3. you object to our processing, and we do not have any legal basis for continuing to process your Personal Information;
    4. your Personal Information has been processed unlawfully or has not been erased when it should have been; or
    5. Personal Information has to be erased to comply with the law.

    We may continue to process your Personal Information in certain circumstances in accordance with applicable data protection laws, i.e., where we have a legal basis to continue to store or preserve such Personal Information, for example, because it is within our legitimate business interest to do so, such as billing information, information required to be stored by us as per applicable taxation laws in India, etc. Where you have requested the erasure of your Personal Information, we will inform recipients to whom that Personal Information has been disclosed unless this proves impossible or involves disproportionate effort.

    Please note that while we may remove Personal Information which directly identifies you pursuant to a request of right to remove or erase your Personal Information, we may continue to retain and process your Personal Information if the same has been anonymised and cannot be used to identify you.

  • Right to withdraw consent: If you no longer consent to our processing of your Personal Information, you may request that we stop such processing by contacting us at support@cybx.in. Please note that if you withdraw your consent to such processing, for example in respect of the use of cookies, it may not be possible for us to provide all/part of the Services to you.
  • Right to restrict processing: You have the right to restrict or prevent us from processing your Personal Information. In accordance with applicable data protection laws, you may request that we should stop processing your Personal Information if:
    1. you do not think that your Personal Information is being processed correctly;
    2. you believe we no longer need the Personal Information for our processing; or
    3. you have objected to processing because you believe that your interests should override the basis upon which we process your Personal Information.

    If you exercise your right to restrict us from processing your Personal Information, we will continue to process the Personal Information if:

    1. the processing is necessary for the exercise or defence of legal claims;
    2. the processing is necessary for the protection of the rights of other individuals or legal persons;
    3. the processing is necessary for public interest reasons; or
    4. the processing is required to comply with the applicable laws and/or government orders or directions.
  • Right to object: You have the right to object and ask us to stop contacting you with direct marketing. If you would like to object and ask us to stop contacting you with direct marketing, please:
    1. email or write to us, and/or
    2. let us know what method of contact you are not happy with, if you are unhappy with certain ways of contacting you (for example, you may be happy for us to contact you by email but not by telephone).

    We will provide you with information on action taken on a request to stop direct marketing – this may be in the form of a response email confirming that you have ‘unsubscribed’.

  • Right to grievance redressal: In case you have any queries or grievances in relation to any act or omission of CYBX regarding the performance of its obligations in relation to your Personal Information or in relation to your exercise of your rights under the applicable data protection laws and this Policy, you may contact us at support@cybx.in. Your grievance will be addressed within 7 (seven) working days.
  • Right to nominate: In the event of your demise or incapacity, you may nominate any other individual to exercise your rights in accordance with the provisions of the applicable data protection law and this Policy.

Children under the age of 18

Applications and Services is not intended for users under the age of 18. We do not knowingly collect any Personal Information, or data from children under 18 or market to or solicit information from anyone under the age of 18. If we become aware that a person submitting Personal Information is under 18, we will delete such Personal Information as soon as possible. If you believe we might have any information from or about a child under 18, please get in touch with us at support@cybx.in.

Compliance with applicable data protection laws

Personal Data obtained from you may be processed and stored in India or on servers located outside India, as permitted under applicable law. You acknowledge and consent to the collection, use, transfer, and disclosure of your Personal Data in accordance with this Policy and Indian data protection laws. We comply with applicable legal standards and take reasonable security measures as per the provisions of applicable laws, prevailing for the time being in force.

Changes to this Policy

We reserve the right to update this Policy to reflect changes in applicable law, our data practices, or functionality of the Applications. Please review this Policy periodically. If we make any material changes, we will notify you. Continued use of the Services after such changes constitutes acceptance of the updated Policy.

Contact us

If you have any queries relating to the processing/usage of information provided by you or the Privacy Policy, you may contact us at support@cybx.in.