Skip to main content

Privacy Policy

Last updated: 8 October 2026

Introduction

At TAZK SOFTWARE SOLUTIONS PRIVATE LIMITED, including its subsidiaries and affiliated entities ("we," "us," "our," "the Company," "TAZK," "TAZK.IN," "Service," "Site," "Product"), we are committed to safeguarding the privacy of individuals whose personal information ("Personal Data," "Information") we collect and process. This Privacy Policy outlines the Company's practices regarding the collection, use, and protection of Personal Data and other information obtained from visitors ("you," "your," "visitor") to our Site.

Please be advised that your access to and use of the Site and any of our Services are governed by our Terms of Service, available on our homepage. Both this Privacy Policy and the Terms of Service collectively govern your interaction with the Site. By continuing to use the Site, you are deemed to have accepted and agreed to the Terms of Service and this Privacy Policy in full.

Scope of this Privacy Policy

This Privacy Policy covers this Site and the TAZK platform: the web application and the TAZK mobile apps, including the accounts a Customer connects to it (such as Facebook, Google and WhatsApp). It applies to visitors, to Customers and to the people who sign in to the platform for a Customer, and to all information you submit to us through the Site or the platform.

Under GDPR and European Economic Area data protection laws, the Customer who provides End Users access to the Service is the data controller. For data collected via our website or any data processed outside the Service, TAZK.IN acts as the data controller ("Controller").

If you are a Customer of TAZK.IN, meaning you have subscribed to our services and agreed to the applicable Terms of Service, or if you are an employee of a customer who accesses our services through your employer's subscription, this Privacy Policy applies to you together with your agreement with us. For the personal data a Customer enters about its own customers, members, employees and contacts, the Customer decides how it is used and TAZK.IN processes it on the Customer's instructions, as explained under "Our Role: Data We Hold on Behalf of Business Customers" below.

In the event that you have provided information to any third parties via our Site or Services, the privacy policies of those third parties will govern the processing and use of your data, and we disclaim any responsibility for the same.

Data that we Collect and Controls

TAZK.IN collects personal data only for legitimate purposes, either provided directly by the user, automatically obtained, or acquired from third parties. The specifics are as follows:

1. Data Provided by Users:

We may collect the following categories of personal data:

2. Data Automatically Collected:

3. Data from Third Parties:

TAZK.IN ensures that all data is managed in accordance with applicable legal requirements and used exclusively for its intended purposes.

Meta Platforms (Facebook & Instagram)

Where a customer connects their Facebook Page or Meta Ads account to TAZK, we access data from Meta on that customer's instruction and solely to provide the Service:

How we use it. Only to deliver leads into the connecting customer's own CRM workspace, to attribute those leads to the originating ad or form, and — where the customer enables it — to send conversion events back to that customer's own Meta ad account. We act as a data processor; the customer remains the controller of the leads they collect.

What we never do. We do not sell Meta platform data, use it for advertising unrelated to the customer who collected it, combine it across customers, or transfer it to data brokers.

Storage and retention. Meta data is stored in our AWS India region alongside the customer's other CRM records and is retained for as long as that customer's account remains active. Access tokens are encrypted at rest. When the customer disconnects, TAZK deletes its copy at once and also ends the grant at Facebook, unless the same Facebook user still has another TAZK company connected with it.

Disconnecting and deletion. A customer may disconnect at any time from TAZK → Integrations → All Connections → Facebook, or from Facebook → Settings → Business Integrations, which immediately stops any further data flowing. To delete data already received, follow our Data Deletion Instructions or email mail@tazk.in.

WhatsApp Business

Where a customer connects a WhatsApp Business account, we process the phone numbers and message content necessary to send and receive messages on their behalf, under the same terms set out above.

Google (Google Ads, Business Profile and YouTube)

Where a customer signs in with Google and connects its Google Ads account, Google Business Profile or YouTube channel to TAZK, we access Google user data on that customer's instruction and solely to provide the features the customer turns on:

Limited Use. TAZK's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we never do. We use Google user data only to provide and improve the features the customer turned on, and only for that customer. We do not sell it, use it for advertising (other than the customer's own Google Ads features described above), combine it across customers, transfer it to data brokers, or use it to decide anyone's creditworthiness. We do not use it to develop, improve or train artificial intelligence or machine-learning models. Our staff do not read it unless the customer asks us to for support, it is needed for security or to comply with the law, or it has been aggregated and anonymised for internal operations.

AI-suggested replies. When a staff member asks TAZK to suggest a reply to a Google review, the review's stars and text (never the reviewer's name) are sent to TAZK's AI service to draft a reply. A person reviews and edits the draft before anything is posted.

Storage and retention. Google data is stored in our AWS India region alongside the customer's other CRM records. The Google access token is encrypted at rest. Cost figures, the log of conversions sent, posts, reviews and video details are kept with the customer's data for as long as its account remains active, and are deleted with it.

Disconnecting and deletion. A customer can disconnect Google at any time from TAZK → Integrations → All Connections → Connected accounts. TAZK deletes its copy of the access token at once and stops all further access. To also remove TAZK's access on Google's side, remove TAZK at myaccount.google.com/permissions. To delete data already received, follow our Data Deletion Instructions or email mail@tazk.in.

How We Utilize Your Information

At TAZK.IN, we prioritize your privacy and are committed to safeguarding your personal data. We do not sell, share, or transfer your information to third parties without your consent. We use your personal data in accordance with this policy.

When you provide personal data to access our services, we utilize it to facilitate your access, process transactions, respond to inquiries, and address issues related to the services. Additionally, your personal and non-identifiable data may be used to enhance service content and functionality, gain insights into user behaviour, and develop new products, features, and services.

We may use your contact information for administrative purposes, including customer service, and to address issues related to intellectual property, privacy, or defamation associated with content posted on our services.

If you apply for a position and submit your information via an application form or resume, we will use this data to assess your application for current or future job openings at TAZK.IN. This information may be retained in our database for up to five years, unless otherwise specified.

Occasionally, we may contact you with information about our services, updates, promotions, and events that may be of interest to you. If you prefer not to receive such communications, you can opt-out using the provided instructions or contact us directly to request removal from our mailing lists.

We may analyse personal and other information to understand user demographics, interests, and behaviour. This aggregated data, which does not identify individuals, may be shared with affiliates, agents, business partners, or used to describe our services to potential partners and other third parties for lawful purposes.

The uses in this section (including developing new products, marketing, and sharing aggregated data) do not apply to data we receive from Google or Meta when a customer connects those accounts, or to the data a customer enters about its own customers and staff. That data is used only as described under "Meta Platforms", "Google" and "Our Role" in this policy.

Legal Grounds for Processing Personal Data (EEA)

For individuals in the European Economic Area (EEA), the legal basis for our collection and processing of personal data is determined by the nature of the data and the specific context in which it is collected. Typically, our processing activities are grounded in one or more of the following legal bases:

1. Contractual Necessity: We process personal data when it is essential to fulfil a contract with you, or to take steps at your request prior to entering into such a contract.

2. Legitimate Interests: We may process personal data based on our legitimate interests, provided these interests are not overridden by your data protection rights. These legitimate interests may include purposes such as improving our services, conducting direct marketing, and managing our business operations effectively.

3. Consent: Where processing is based on your consent, we will obtain your explicit permission before collecting and processing your data. You retain the right to withdraw this consent at any time, and such withdrawal will not affect the legality of any processing conducted prior to your withdrawal.

4. Legal Obligation: We may be required to process personal data to comply with legal obligations imposed on us.

5. Vital Interests: In certain situations, processing may be necessary to protect your vital interests or those of another individual.

If we rely on legitimate interests as the basis for processing your personal data, and those interests are not specified in this policy, we will provide a detailed explanation of those interests at the time of data collection. This ensures transparency regarding how and why your data is used.

In cases where consent is the legal basis for processing, you have the right to withdraw consent at any time, but this will not affect any processing that has occurred before the withdrawal. If you have any concerns or require further information regarding the legal grounds for processing your personal data, please contact us directly.

Data Sharing and Disclosure

We are committed to maintaining the confidentiality and security of your personal data. We will not sell, rent, or otherwise disclose your personal data to third parties except in the following circumstances:

We ensure that any disclosures of personal data are conducted in accordance with legal requirements and with appropriate safeguards to protect your privacy.

Data Security and Protection

We are committed to ensuring the security and integrity of your personal data. Our robust security framework is designed to prevent unauthorized access, maintain data accuracy, and prevent unauthorized alteration or disclosure. The security measures we implement include:

In the event of a security breach, we will endeavour to promptly notify you through our website or by email, enabling you to take appropriate measures to protect your data.

Our Role: Data We Hold on Behalf of Business Customers

A distinction runs through this policy. For personal data about the people who subscribe to and sign in to our platform, TAZK.IN is the data fiduciary and this policy governs how we use it. But our business customers also enter personal data about their own customers, members, employees and contacts in order to run their businesses. For that data the business customer is the data fiduciary, and TAZK.IN acts only as a data processor on its documented instructions under our agreement with it.

This means we do not decide why that data is collected, what it is used for, or how long it is kept beyond the settings and defaults the platform provides. We do not sell it, and we do not use it to build profiles, to train models, or for our own marketing. Depending on the modules a business uses, the data it asks us to process on its behalf may include names and contact details, addresses, identifiers and images of identity or supporting documents, employment and attendance records, and records of transactions, accounts, balances and communications.

If you are an individual whose data is held by a business that uses our platform and you wish to access, correct or erase it, please contact that business directly — it is the data fiduciary and it holds the relationship with you. If you contact us instead, we will pass your request to that business and assist it in responding; we are generally not permitted to act on such a request ourselves.

Identity Documents and Restricted Identifiers

Some modules allow a business to upload supporting documents, which may include government-issued identity documents. Certain identifiers and documents may be collected or stored only by entities authorised to do so under the law that creates them, and the law may restrict displaying or reproducing the identifier itself.

Accordingly, the platform may refuse particular document types, may require that a document be masked or redacted before it is uploaded, may store only a partial identifier such as the last few digits rather than the full number, and may limit who within a business can view a stored document. These are precautions on our part. It remains the responsibility of the business uploading a document to ensure it is permitted to collect and retain it, and businesses must not upload documents or identifiers they are not permitted to store.

Location Information

Some modules record a location. Where they do, it is a single point attached to a specific business record — for example the place a receipt was issued by a staff member, or the location of a customer's premises so that a visiting staff member can find the address. These are captured by the business's own staff on their own devices, during their work.

We do not operate continuous or background location tracking of any individual, we do not build location histories or movement trails, and we do not collect location from the devices of a business customer's own customers. A point recorded against a record is overwritten or removed rather than accumulated. Location held on behalf of a business customer is subject to that business's retention settings and is deleted with the rest of that customer's data.

Messages Sent for Business Customers

Where a business uses the platform to send messages by SMS, email, messaging application or in-app notification to its own customers or staff, those messages are sent on that business's instructions and on its behalf. We process the recipient's contact details and the message content only to deliver the message and to keep a record of the attempt and its outcome, which the business needs in order to show whether and when it contacted someone. The business is responsible for having any consent the law requires before asking us to send.

Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Upon the expiration of retention periods, data will be securely deleted or anonymized.

For a Facebook or Google account a customer connects, the access token is deleted from TAZK as soon as the customer disconnects. The leads, cost figures and conversion logs already received stay with the customer's data until the customer deletes them or closes its account. Deleted records are removed from the live system at once and from our backups within 30 days.

International Data Transfers

If you are accessing our platform from outside the jurisdiction in which our servers are located, please be aware that your data may be transferred internationally. We take steps to ensure that such transfers comply with applicable data protection laws, including through the use of Standard Contractual Clauses (SCCs) and other appropriate safeguards.

User Rights

You have the following rights concerning your personal data:

Exercise these rights, please contact us at mail@tazk.in

Data Protection for Minors

Our ERP platform is not intended for use by individuals under the age of 16, and we do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will take steps to delete such information.

Changes to this Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Modified" date. Continued use of the platform following such changes constitutes your acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Tazk Software Solutions Private Limited

CIN: U62013TN2025PTC178362

8/65, 1st Floor, Radhakrishnan Street

Velachery, Chennai, Tamil Nadu, India

Pin code - 600042.

Email: mail@tazk.in

Phone: +91 9500000404