Privacy Policy

1. Introduction

Passdn Technologies ("Passdn," "Antoc," "we," "our," or "us") respects your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, disclose, store, and safeguard personal data when you use Antoc CRM, our websites, and related applications (the "Services").

We process digital personal data in accordance with the Digital Personal Data Protection Act, 2023("DPDP Act") of India and the Digital Personal Data Protection Rules as notified from time to time, along with other applicable laws.

2. Roles under the DPDP Act

• Data Principal: the individual to whom the personal data relates (for example, a CRM user, staff member, or a lead/customer whose details are stored in Antoc).
• Data Fiduciary: the person who determines the purpose and means of processing. For your own Antoc account, billing, and support data, Passdn is the Data Fiduciary. For lead, buyer, WhatsApp, KYC, and similar customer data that you enter into Antoc, you (the business using Antoc) are the Data Fiduciary.
• Data Processor: for customer/lead data that you store in Antoc, Passdn processes that data on your instructions as a Data Processor.

3. Information We Collect

We collect personal data that is necessary for a lawful purpose connected with the Services:

• Account and business information: name, email, phone number, business name, address, GST or billing details, and login credentials.
• CRM / customer data you store: lead and buyer name, phone, email, address, PAN or other KYC documents, property preferences, enquiry source, remarks, site-visit details, payment and demand records, and uploaded documents.
• Communications: WhatsApp and other channel conversations, call logs (where you enable call tracking), emails sent through the platform, and support tickets.
• Location Data: with your consent, approximate or precise location to offer place or property-related features.
• Usage Data: search history, preferences, interaction logs, device information, IP address, and browser type, used to operate, secure, and improve the Services.
• Cookies and Tracking Technologies: cookies, analytics tags, and similar technologies for personalization, security, and analytics. See our Cookie Policy.
• Mobile App Permissions (Antoc CRM):Our CRM mobile app may request optional permissions solely to enable call-tracking features and improve user experience. These permissions are not mandatory for basic app functionality and can be managed in your device settings.
  • Call Log: Access to phone numbers, duration, type, and timestamps — used only to auto-log customer calls within your CRM.
  • Phone State: Access to call events (start/end) for real-time detection and linking of calls to CRM leads.
  • Contacts: Access to contact names (optional) — used only to display caller names in CRM call logs.

  All collected data is transmitted using encryption in transit (HTTPS), stored with reasonable security safeguards, and never used for advertising or sold to any third parties.

4. Lawful purpose, notice, and consent

Under the DPDP Act, we process personal data for a lawful purpose and, where required, based on consent or another ground permitted by law (for example, to provide a service you have requested, to comply with law, or for employment-related processing of staff accounts).

• We tell you what personal data is collected and why (this notice, in-product notices, and account/sign-up flows).
• We use personal data only for the stated or legitimate purpose, or a purpose reasonably incidental to it (purpose limitation).
• Where processing is based on consent, you may withdraw consent. Withdrawal does not affect processing already completed lawfully, and some features may stop working.
• If you use Antoc to store your customers' data, you must provide them an appropriate notice and obtain consent (or another lawful basis) before collecting or uploading their personal data, including WhatsApp messages, KYC documents, and call records.

5. How We Use Your Information

• Provide, operate, maintain, and support Antoc CRM and related Services
• Create and manage accounts, subscriptions, and billing
• Enable lead, property, WhatsApp, post-sale, attendance, and reporting features you choose to use
• Personalize recommendations based on preferences and location (where enabled)
• Improve and develop new features and capabilities
• Communicate with you, including updates, security alerts, and support
• Analyze usage and ensure platform security, fraud prevention, and access control
• Comply with the DPDP Act and other applicable laws and regulations

6. Information Sharing and Disclosure

We do not sell your personal data. Your information may be shared only with:

• Service Providers (Data Processors): trusted vendors who host, send messages, process payments, or otherwise help operate the Services, under appropriate contracts.
• Legal Authorities: if required to comply with laws, a lawful request, or to protect rights and safety.
• Business Transfers: if our company merges or transfers ownership, data may be included, subject to this policy and applicable law.

7. Data Security

We implement reasonable security safeguards as required under the DPDP Act to protect personal data against unauthorized access, alteration, loss, or destruction. These include encryption in transit, access controls for staff, authentication, and monitoring. No method of transmission or storage is completely secure.

8. Data retention and deletion

We retain personal data only as long as needed for the purpose for which it was collected, to provide the Services, to meet legal, tax, or accounting requirements, or to resolve disputes. When you delete an account or request erasure, we delete or anonymize personal data except where retention is required or permitted by law. CRM customers may delete or correct lead and buyer records they control inside Antoc.

9. Your rights as a Data Principal

Subject to the DPDP Act, you have the right to:

• Access a summary of the personal data we process about you and the processing activities
• Request correction, completion, or updating of inaccurate or incomplete personal data
• Request erasure of personal data when it is no longer necessary or consent is withdrawn
• Withdraw consent where processing is based on consent
• Nominate another person to exercise these rights in the event of death or incapacity, as provided by law
• Seek grievance redressal

If your personal data was stored in Antoc by a business (for example, you are a lead), please contact that business first; they are the Data Fiduciary. You may also contact us using the details below. We will respond as required by applicable law.

10. Children’s data

The DPDP Act treats a person under 18 years of age as a child. Antoc CRM is intended for businesses and adult users. We do not knowingly offer the Services to children or collect children's personal data. You must not upload personal data of children into Antoc unless you have verifiable parental/guardian consent and a lawful purpose as required by the DPDP Act.

11. Personal data breaches

If a personal data breach occurs that we are required to report, we will notify the Data Protection Board of India and affected Data Principals in the manner and timelines prescribed under the DPDP Act and applicable rules, and we will take reasonable steps to mitigate harm.

12. Cross-border transfers

Personal data may be processed or stored on servers in India or in other countries where our processors operate, subject to the DPDP Act (including any government restrictions on transfer to specified countries). By using the Services, you acknowledge such processing as described in this policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be posted on this page and, where appropriate, notified through the website or app. The "Last updated" date shows the latest revision.