This Privacy Policy ("Policy") governs how Shri RC Utilities Pvt. Ltd. ("SRCU", "we", "us", or "our") collects, uses, protects, and governs personal data processed through its software-as-a-service platform, 2tag.in ("Platform"), including any web, mobile, or programmatic interface.

By accessing or using our Platform, you consent to the practices outlined herein. If you do not agree with this Policy, you must not access the Platform.

This Policy applies to the extent permissible under applicable law and supersedes any prior statements or representations related to privacy.

We adhere to the principles of data minimization and purpose limitation, and collect only such information as is lawfully necessary to provide our services.

We may collect the following categories of data:

• Account Data: Contact details (e.g., name, email), credentials, usage preferences.

• Usage Data: Link interactions (e.g., clicks, previews, actions), metadata associated with campaigns.

• Device Data: IP address (where permitted), user-agent, device/browser type, country-level location.

• Communications: Messages you send us via forms, email, or feedback mechanisms.

• Cookies or Local Storage: To maintain session integrity, enhance user experience, and support platform functionality.

We do not intentionally collect sensitive personal data or biometric identifiers.

We process personal data only on lawful bases, including:

• Contractual Necessity: When you sign up or use the Platform.

• Legitimate Interests: For service security, usage optimization, anti-abuse monitoring.

• Consent: When required for specific features (e.g., marketing).

• Legal Compliance: Where obligated to retain or disclose data under applicable laws.

Where multiple grounds apply, the one most favorable to lawfulness is presumed.

Your information may be used to:

• Operate and improve the Platform

• Facilitate analytics and reporting functionality

• Ensure integrity and security of links and usage

• Respond to support requests and service inquiries

• Satisfy contractual or regulatory obligations

We do not sell, lease, or rent personal data to third parties. Any external disclosures are narrowly tailored and contractually governed.

We retain data strictly for as long as necessary to:

• Provide the service

• Maintain records for legal, accounting, or reporting purposes

• Fulfill contractual obligations

Data that is no longer required is securely deleted or anonymized using best-in-class data lifecycle practices.

We may disclose information only under the following circumstances:

• Internal corporate access: Within SRCU and its controlled affiliates, subject to confidentiality.

• Legal obligations: To regulators, courts, or government authorities as required by law.

• Service performance: To selected processors under strict confidentiality and data protection obligations.

No disclosure will be made without ensuring that adequate technical, contractual, and legal safeguards are in place.

We do not publish or disclose operational infrastructure or proprietary vendor usage, except where disclosure is mandated under law.

Where data is transferred outside the jurisdiction of the data subject (e.g., for support, hosting, redundancy), we implement one or more of the following safeguards:

• Model Contract Clauses (Standard Contractual Clauses)

• Intra-group data processing agreements

• Jurisdictional adequacy determinations

• Encryption, pseudonymization, or access control measures

Users acknowledge that the Platform may involve infrastructure components or service optimization that spans international boundaries.

We maintain comprehensive technical and organizational measures aligned with international standards to ensure confidentiality, integrity, and availability of your data. These include but are not limited to:

• Access control (including RBAC and session scoping)

• Encrypted transmission and storage

• Intrusion detection and fraud monitoring systems

• Disaster recovery and incident response protocols

• Internal audits and accountability structures

While no system is invulnerable, our infrastructure is designed to withstand data breaches under most foreseeable threat models.

Subject to applicable laws, you may have rights to:

• Access, correct, or delete your personal data

• Object to or restrict processing

• Withdraw consent (where processing is based on consent)

• Request a copy of data in structured, portable format

• Lodge a complaint with a competent supervisory authority

Requests may be subject to verification, legal exemptions, or operational feasibility. To exercise your rights, contact [email protected].

Our Platform is not intended for individuals under the age of 13 (or as defined by local law). We do not knowingly collect data from children. Any suspected case will result in prompt deletion upon notification.

While we take commercially reasonable measures to protect your data, we are not liable for:

• Unauthorized access beyond our control

• Incidents arising from user-side negligence (e.g., compromised passwords)

• Actions by third-party platforms where you distribute links

Use of the Platform is at your sole risk, and you are responsible for securing access credentials and compliance with local laws when embedding or sharing content tracked via 2tag.in.

We reserve the right to revise this Policy from time to time to reflect legal, technical, or business developments. The most current version will always be available at https://2tag.in/privacy. Where appropriate, users will be notified via email or platform notice.

Continued use of the Platform constitutes your acknowledgment of and consent to the updated Policy.

This Policy shall be governed by and construed in accordance with the laws of India, without regard to conflict of laws principles. Any disputes shall be subject to the exclusive jurisdiction of the competent courts located in Delhi, India.

For any privacy-related concerns or requests, contact:

Legal Department

Shri RC Utilities Pvt. Ltd.

[email protected]