Last Updated: 6th April 2026
Aroopa respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our website, platform, services, or representatives.
We are committed to transparency and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other global privacy frameworks.
- Users visiting our website: https://www.aroopaapps.com
- Individuals communicating with us via forms, chat, email, or social media
- Clients, prospective clients, job applicants, and business partners
- Any individual whose personal data we process in the course of providing our services
This policy does not apply to third-party websites or services linked from our platform. We encourage you to review their respective privacy policies.
2. Categories of Personal Data We Collect
a. Information You Provide Directly
- Contact Information: Name, email address, phone number, company name
- Professional Details: Job title, department, business interests
- Transactional Information: Billing details, purchase history
- Communications: Support queries, chat messages, feedback, surveys
b. Information Collected Automatically
- Device Information: IP address, browser type, OS, language
- Usage Data: Pages visited, time spent, referring URLs
- Cookies & Tracking Data: Session data, preferences, analytics
c. Information from Third Parties
We may receive data from:
- Public databases
- Marketing and analytics partners
- Social media platforms (based on your interactions)
3. Lawful Basis for Processing (GDPR)
For EU/UK users, we process personal data based on:
- Consent – e.g., newsletters and marketing
- Contractual Necessity – service delivery and support
- Legitimate Interests – analytics, fraud prevention, B2B communication
- Legal Obligations – regulatory and compliance requirements
- Deliver and manage our services
- Respond to inquiries and onboard clients
- Support internal operations (billing, reporting, project management)
- Send marketing communications (with opt-out options)
- Improve website performance and user experience
- Comply with legal and regulatory obligations
5. Sharing and Disclosure of Information
We may share your data with:
- Service Providers – hosting, CRM, email, payment processors
- Analytics & Advertising Partners – e.g., Google, LinkedIn
- Affiliates – for internal business operations
- Legal Authorities – when required by law
- Business Transfers – mergers, acquisitions, restructuring
All third parties are required to maintain confidentiality and implement appropriate security measures.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Enable website functionality
- Analyze usage patterns
- Personalize content and marketing
- Store user preferences
You can manage cookie settings via your browser. Disabling cookies may impact functionality.
7. International Data Transfers
Your data may be processed outside your country of residence.
Where required, we implement safeguards such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Other legally approved mechanisms
We retain personal data only as long as necessary for:
- Service delivery
- Legal and regulatory compliance
- Dispute resolution and enforcement
Data is securely deleted or anonymized when no longer required.
We implement appropriate safeguards, including:
- Encrypted connections (SSL/TLS)
- Role-based access controls
- Regular security audits
- Secure infrastructure and backups
- Employee privacy training
No system is completely secure; please report suspected breaches immediately.
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict or object to processing
- Withdraw consent
- Request data portability
- Opt out of marketing communications
- Lodge complaints with regulatory authorities
11. California Privacy Rights (CCPA/CPRA)
California residents have the right to:
- Know what data is collected and shared
- Request deletion
- Opt out of sale/sharing of personal data
- Non-discrimination
We do not sell personal data in the traditional sense.
Our services are not intended for children under 18. We do not knowingly collect such data.
We may update this Privacy Policy periodically. Changes will be reflected with a revised “Last Updated” date.
- The right to know what personal information is collected, used, and shared
- The right to delete personal data (with some exceptions)
- The right to opt out of the sale or sharing of personal information
- The right to non-discrimination for exercising privacy rights
14. Communications by Aroopa Clients (SaaS Model)
Aroopa Apps operates as a multi-tenant SaaS platform.
Clients are solely responsible for:
- Content and legality of communications
- Targeting and consent management
- Compliance with applicable laws
Aroopa acts strictly as a data processor and technology provider.
We do not control or take responsibility for client communications.
For unsubscribe or data requests:
Contact the originating business directly
Aroopa cannot process such requests on behalf of clients.
d. Compliance Obligations
Clients must comply with:
- CAN-SPAM
- GDPR
- CASL
- CCPA/CPRA
- Other applicable laws
If you cannot identify the sender, contact us at:
compliance@aroopatech.com
15. India Data Protection (DPDP Act, 2023) Compliance
If you are a user located in India, your personal data is processed in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
Depending on the context, Aroopa may act as:
- Data Fiduciary (when we collect data directly)
- Data Processor (when processing data on behalf of our Clients)
b. Your Rights Under DPDP Act
- Access information about your personal data
- Request correction or erasure of your data
- Withdraw consent at any time
- Grievance redressal
- Nominate another person to exercise your rights in case of incapacity
We process personal data based on clear and informed consent, except where processing is required for:
- Legal obligations
- Employment purposes
- Legitimate uses as permitted by law
d. Data Protection Measures\
We implement reasonable security safeguards to prevent:
- Data breaches
- Unauthorized access
- Misuse of personal data
e. Grievance Officer (India)
In accordance with Indian law, you may contact our Grievance Officer:
(Subject: “DPDP Grievance Request”)
We will respond within the timelines prescribed under applicable law.
For concerns or complaints: