Privacy Policy

Last Updated: September 13, 2026

Clousys (“Clousys,” “Company,” “we,” “us,” or “our”) provides the Clousys AI-powered Professional Services Operations Platform, including its Applicant Tracking System (ATS), Human Resource Management (HRMS), Resource Management, and Project Financials modules, together with our related website and services (collectively, the “Services”).

We respect your privacy and are committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit our website, use the Services, communicate with us, or otherwise interact with us.

Please read this Privacy Policy carefully. By accessing or using our website or the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or the Services.

1. Scope of This Policy

This Privacy Policy applies to:

Visitors to our website;

Prospective and current customers who evaluate, purchase, or subscribe to the Services;

Individual users authorized by a customer to access the Platform (e.g., HR administrators, recruiters, project managers, resource managers, and finance users); and

Other individuals who otherwise interact or communicate with us.

This Policy does not apply to Customer Data — that is, personal information about a customer’s own employees, applicants, contractors, or clients that is uploaded to, or processed within, the Platform by our customers in their use of the Services. Where a customer uses the Services to process such data, Clousys acts as a data processor (or service provider, as applicable) on the customer’s instructions, and that processing is governed by our Data Processing Addendum and the agreement between Clousys and the customer, not by this Policy. Individuals with questions about how their personal information is handled within a specific customer’s account should contact that customer (their employer or the relevant organization) directly.

2. Information We Collect

2.1 Information You Provide to Us

We may collect information that you voluntarily provide to us, including when you:

Register for an account, request a demo, or start a trial of the Services;

Complete a form on our website, subscribe to updates, or contact our sales or support teams;

Communicate with us by email, chat, telephone, or otherwise; or

Attend a webinar, event, or otherwise engage with our marketing activities.

This information may include your name, business email address, phone number, job title, company name, and any other information you choose to provide, as well as billing and payment-related information (such as billing address and payment method details) where you purchase a subscription.

2.2 Information Collected Automatically

When you visit our website or use the Services, we and our service providers may automatically collect certain information, including:

IP address, device identifiers, browser type and version, and operating system;

Pages viewed, features used, links clicked, time spent, and referring/exit URLs;

Approximate location information derived from your IP address;

Log, diagnostic, and performance data; and

Information collected through cookies and similar technologies, as described in our Cookie Policy.

2.3 Information from Account Users of the Platform

Where you access the Platform as an authorized user on behalf of a customer (for example, as an employee or contractor of a customer), we collect account-related information such as your name, work email address, role, and login credentials, as provided by the customer or by you in the course of using the Platform. This information is used to provision, authenticate, and administer your access to the Services on the customer’s behalf.

2.4 Information from Other Sources

We may also receive information about you from third parties, such as business partners, resellers, professional networks, or publicly available sources, which we may combine with other information we hold about you.

3. How We Use Your Information

We may use the information described above to:

Provide, operate, maintain, and support the Services and our website;

Create, authenticate, and manage user accounts and provision access to the Platform;

Process transactions, issue invoices, and provide billing support;

Respond to inquiries, provide customer support, and schedule product demonstrations;

Send administrative communications, including updates about the Services, security notices, and changes to our policies;

Send marketing communications where permitted, and allow you to opt out at any time;

Personalize, evaluate, and improve our website, products, and Services;

Analyze usage trends and measure the performance of our website and the Services;

Detect, prevent, and investigate fraud, abuse, unauthorized access, and security incidents;

Enforce our Terms of Service and other agreements; and

Comply with applicable laws, regulations, and legal process, and protect our rights, users, and property.

4. Cookies and Similar Technologies

We use cookies and similar tracking technologies to operate our website, remember your preferences, understand how our website is used, and, where applicable, support marketing activities. You can manage your cookie preferences through your browser settings and, where available, our cookie preference center. For details about the categories of cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

5. Legal Basis for Processing (EEA/UK Users)

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on one or more of the following legal bases to process personal information:

Performance of a contract, where processing is necessary to provide the Services you have requested;

Your consent, which you may withdraw at any time;

Compliance with a legal obligation to which we are subject; and

Our legitimate interests, such as improving and securing our website and the Services, provided these interests are not overridden by your data protection rights.

6. How We Share Information

We do not sell your personal information. We may share the information described in this Policy with:

Subprocessors and service providers who perform services on our behalf, such as cloud hosting, database, analytics, communications, payment, and security providers (see Section 7 below);

Professional advisors, including legal, accounting, and audit providers;

Government authorities, regulators, or law enforcement, where required by applicable law or legal process;

A successor entity in connection with a merger, acquisition, financing, reorganization, or sale of assets; and

Other parties with your consent or at your direction.

7. Subprocessors

We engage trusted third-party subprocessors to help us deliver, host, secure, and support the Services. The table below summarizes the categories of subprocessors we currently use. A current, detailed list of our subprocessors is available on our Subprocessors page and is updated from time to time in accordance with our Data Processing Addendum.

Where required by applicable law or our contractual commitments, we will provide notice of material changes to our subprocessors and applicable mechanisms for customers to raise objections, as further described in our Subprocessors page and Data Processing Addendum.

8. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, comply with our legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests. Retention periods vary depending on the type of information, the purpose for which it was collected, and applicable legal or contractual requirements. When personal information is no longer needed, we will delete, anonymize, or securely isolate it.

9. Data Security

We maintain reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction. These measures may include encryption in transit and at rest, role-based access controls, authentication mechanisms, network security controls, monitoring and logging, and incident response procedures. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Clousys is based in India, and personal information we collect may be processed or stored in India or in other countries where we or our subprocessors operate, which may have data protection laws that differ from those of your home jurisdiction. Where we transfer personal information originating from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been recognized as providing an adequate level of data protection, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

11. Your Privacy Rights

11.1 General Rights

Depending on your location and applicable law, you may have the right to:

Confirm whether we process your personal information, and access a copy of it;

Correct inaccurate or incomplete personal information;

Request deletion of your personal information;

Restrict or object to certain processing, including processing for direct marketing;

Request portability of your personal information;

Withdraw consent at any time, where processing is based on consent; and

Lodge a complaint with a competent data protection authority.

To exercise these rights, please contact us using the details in Section 14. We will not discriminate against you for exercising your privacy rights.

11.2 Notice to California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended, may give you additional rights, including the right to know the categories and specific pieces of personal information we have collected about you, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the “sale” or “sharing” of personal information. Clousys does not sell personal information for monetary consideration. To exercise your California privacy rights, please contact us using the details in Section 14.

11.3 Other Jurisdictions

Residents of certain other jurisdictions (including other U.S. states with comprehensive privacy laws) may have similar rights regarding their personal information. We will honor applicable rights requests in accordance with the law of your jurisdiction.

12. Children's Privacy

Our website and Services are directed to businesses and are not intended for use by children. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have inadvertently collected personal information from a child without appropriate consent, we will take reasonable steps to delete such information.

13. Third-Party Websites and Links

Our website and the Services may contain links to third-party websites, applications, or services that are not owned or controlled by Clousys. We are not responsible for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policies of any third-party services before providing them with personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will revise the “Last Updated” date at the top of this Policy and, where changes are material, provide additional notice as appropriate (such as through our website or by email). We encourage you to review this Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Clousys

Data Protection Contact: Data Protection Officer

Email: connect@clousysbs.com

Website: https://www.clousysbs.com

Governing Law: This Privacy Policy is governed by the laws of India, and any disputes arising under it shall be subject to the exclusive jurisdiction of the courts located in Pune, Maharashtra, India, without prejudice to any rights you may have under mandatory local data protection law.