This Privacy Policy explains how Exponentia AI Solutions (“Exponentia”, “we”, “us”, or “our”) collects, uses, stores, and discloses personal data, listed on Microsoft AppSource.
We are committed to protecting the privacy and security of customer and user data. If you have any concerns, please contact us at reach@exponentia.ai
1. Scope of this Policy
This Privacy Policy applies to all individuals who access or use our products, services, websites, applications, APIs, or interact with us through any channel, including via Microsoft AppSource, integrations, demos, support, or marketing activities.
2. What Personal Data We Collect
We collect and process the following categories of personal data as part of providing the handwriting extraction and form processing services:
Document Data: Uploaded forms, scanned handwritten or printed documents
Extracted Information: Names, account numbers, customer IDs, dates of birth, signatures, and other identifiable information extracted using AI
Usage Data: Logs of API calls, timestamps, browser/device info, and usage analytics
Account Data: Admin email, tenant ID, authentication credentials
Support Data: Support tickets, chat logs, error reports
All billing and payment transactions are handled through Microsoft or secure external payment platforms. We do not collect or process any financial or payment information within the app interface.
3. How We Use Personal Data
We use the personal data we collect for purposes necessary to operate, maintain, and improve our products and services. These purposes include, but are not limited to:
Processing user-submitted documents to perform AI-based handwriting and text recognition, data extraction, and content classification;
Delivering outputs through APIs, webhooks, integrations, or automation workflows;
Operating, managing, and optimizing the performance, functionality, and security of our systems, models, and infrastructure;
Training, testing, and enhancing our machine learning models and AI capabilities, in compliance with applicable data protection laws and contractual terms;
Providing user support, responding to inquiries, resolving technical issues, and maintaining service continuity;
Analyzing usage trends, application performance, and customer interaction patterns to improve product design, features, and user experience;
Managing user accounts, authentication, access controls, and licensing status;
Carrying out internal audits, compliance reviews, and security assessments;
Meeting contractual obligations, industry standards, and applicable legal or regulatory requirements, including lawful requests from authorities.
4. Legal Basis for Processing
We process personal data where there is a lawful basis to do so, which may include one or more of the following:
Contractual Necessity: When processing is required to deliver or support the services subscribed to or accessed by the user or customer.
Legitimate Interests: For operating, improving, securing, and optimizing our services.
Consent: Where required under applicable law
Legal Obligation: Where processing is necessary to comply with applicable laws, regulations, or lawful requests from government or regulatory authorities.
We may rely on different legal bases depending on the context and nature of the data and the purpose of its use.
5. Data Sharing and Disclosure
We may share personal data with trusted third parties, including infrastructure providers, support vendors, analytics services, affiliated entities, and legal authorities, strictly for service delivery, support, compliance, or legal purposes. All such sharing is governed by appropriate contractual and security safeguards.
6. Data Storage and Security
We implement reasonable and appropriate technical and organizational measures to protect personal data from unauthorized access, use, loss, or disclosure, in accordance with applicable data protection laws and industry standards.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
Delivering and maintaining the subscribed service
Complying with legal, regulatory, or contractual obligations;
Handling support requests, dispute resolution, or legal claims.
After the applicable retention period, personal data is securely deleted or anonymized in accordance with applicable laws and internal data retention policies.
8. International Data Transfers
Personal data may be processed or stored in jurisdictions outside your own, including but not limited to the United States, European Union, and India. Where cross-border transfers occur, we implement appropriate safeguards in accordance with applicable laws.
9. User Rights
Depending on the laws of your jurisdiction, you may have the right to:
Access the personal data we hold about you;
Access the personal data we hold about you;
Object to certain processing activities;
Withdraw consent, where processing is based on consent;
Lodge a complaint with a relevant data protection authority.
To exercise any of these rights, please contact us at
reach@exponentia.ai. We will respond in accordance with applicable legal timelines.
10. Grievance Redressal & Contact
For privacy-related concerns, complaints, or to exercise your rights, you may contact
Grievance Officer
IT Manager,
Exponentia AI Solutions 1904–1916,
A Wing, Kailas Business Park,
Veer Savarkar Marg, Park Site,
Vikhroli (W), Mumbai – 400079, India
Email:
reach@exponentia.ai
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or regulatory requirements.
By accessing or continuing to use the Exponentia AI Solutions, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. We encourage users to review this Privacy Policy periodically.
