Data Fiduciary: FOCTTA Privacy Operations Pvt. Ltd. ("FOCTTA").
Lawful basis: Demo Request - pre-contractual measures (DPDPA S.7(d) / GDPR Art. 6(1)(b)). Marketing & Analytics - your consent (DPDPA S.6 / GDPR Art. 6(1)(a)).
Retention: Inquiry data is kept for 24 months from your last contact, after which it is irreversibly deleted unless you become a customer. Marketing data is kept until you withdraw consent. Analytics data is aggregated & pseudonymised after 90 days.
Processors / sub-processors: AWS (cloud infrastructure, ap-south-1), SendGrid (transactional email, US), Slack (internal team notifications, US). All sub-processors are bound by Standard Contractual Clauses for cross-border transfers.
Cross-border transfers: US transfers rely on EU-US Data Privacy Framework (where the recipient is certified) or SCCs + transfer-impact assessment.
Your rights as a Data Principal: Access, Correction, Erasure, Portability, Withdrawal, and Grievance. Exercise any of these through our Preference Centre or by emailing dpo@foctta.com.
Data Protection Officer: Sonal Shah, dpo@foctta.com (designated under DPDPA S.10).
Grievance & appeals: If unsatisfied with our response, you may escalate to the Data Protection Board of India.