Get a Free WhatsApp Business Account – Includes Onboarding, API Access & Sandbox. Apply Now!
Get a Free WhatsApp Business Account – Includes Onboarding, API Access & Sandbox. Apply Now!
Welcome, and thank you for your interest in Datagen Internet Services Private Limited, our product Authkey (“Authkey,” “we,” or “us”), our website at https://authkey.io/ (the “Site”), and all related websites, and other services provided by us on which a link to this Privacy Policy and Terms and conditions is displayed. This Privacy Policy describes the information that we collect through the Service, how we use and disclose such information, and the steps we take to protect it. By visiting the Site or by purchasing or using the Service, you accept the privacy practices described in this Policy. This Policy is incorporated into, and is subject to, the Authkey’s Terms & Conditions. Capitalized terms used but not defined in this Policy have the meanings given to them in the Authkey Terms & Conditions.
What personal information do we collect from the people who visit our blog, website, or app?
We collect various types of information from or through the Service. The legal bases for Authkey’s processing of Personal Data are primarily that the processing is necessary for providing the Service in accordance with our Terms of Service, and that the processing is carried out in Authkey’s legitimate interests, which are further explained in the section "How do we use your information?" of this Policy. We may also process data upon your consent, asking for it as appropriate.
When you use the Service, as a User or as a Visitor, you may provide, and we may collect Personal Data. Examples of Personal Data include name, email address, mobile phone number, and credit card or other billing information. Personal Data also includes other information, such as geographic area or preferences, when any such information is linked to information that identifies a specific individual. You may provide us with Personal Data in various ways on the Service. For example, when you register for an Account, use the Service, post Client Data, interact with other users of the Service through communication or messaging capabilities, or send us customer-service-related requests.
A Client or User may store or upload Client Data into the Service. Authkey has no direct relationship with the individuals whose Personal Data it hosts as part of Client Data. Each Client is responsible for providing notice to its customers and third parties concerning the purpose for which Client collects their Personal Data and how this Personal Data is processed through the Service as part of Client Data.
When a User or Visitor uses the Service, we may automatically record certain information from the User’s or Visitor’s device by using various types of technology, including cookies, "pixels," or “web beacons." This automatically collected information may include an IP address or other device address or ID, web browser and/or device type, the web pages or sites visited just before or just after using the Service, the pages or other content the User or Visitor views or interacts with on the Service, and the dates and times of the visit, access, or use of the Service. We may also use these technologies to collect information regarding a Visitor's or User's interaction with email messages, such as whether the Visitor or User opens, clicks on, or forwards a message. This information is gathered from all Users and Visitors.
You may be given the option to access or register for the Service through the use of your username and passwords for certain services provided by third parties (each, an “Integrated Service”), such as through the use of your Google account, or otherwise have the option to authorize an Integrated Service to provide Personal Data or other information to us. By authorizing us to connect with an Integrated Service, you authorize us to access and store your name, email addresses, profile picture URL, and other information that the Integrated Service makes available to us, and to use and disclose it in accordance with this Policy. You should check your privacy settings on each Integrated Service to understand what information that Integrated Service makes available to us and make changes as appropriate. Please review each Integrated Service’s terms of use and privacy policies carefully before using their services and connecting to our Service.
We may obtain information, including Personal Data, from third parties and sources other than the Service, such as our partners, advertisers, and Integrated Services. If we combine or associate information from other sources with Personal Data that we collect through the Service, we will treat the combined information as Personal Data in accordance with this Policy.
We use the information, other than Client Data, to operate, maintain, enhance, and provide all features of the Service, to provide the services and information that you request, to respond to comments and questions, and to provide support to users of the Service. We process Client Data solely in accordance with the directions provided by the applicable Client or User.
We use the information to understand and analyze the usage trends and preferences of our Visitors and Users, to improve the Service, and to develop new products, services, features, and functionality.
We may use a Visitor’s or User’s email address or other information, other than Client Data, to contact that Visitor or User:
We use automatically collected information and other information collected on the Service through cookies and similar technologies to:
We use Google Analytics to measure and evaluate access to and traffic on the Public Area of the Site and create user navigation reports for our Site administrators. Google operates independently from us and has its own privacy policy, which we strongly suggest you review. Google may use the information collected through Google Analytics to evaluate Users' and Visitors’ activity on our Site. For more information, see Google Analytics Privacy and Data Sharing.
We take measures to protect the technical information collected by our use of Google Analytics. The data collected will only be used on a need-to-know basis to resolve technical issues, administer the Site, and identify visitor preferences, but in this case, the data will be in a non-identifiable form. We do not use any of this information to identify Visitors or Users.
Except as described in this Policy, we will not intentionally disclose the Personal Data or Client Data that we collect or store on the Service to third parties without the consent of the applicable Visitor, User, or Client. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:
Unrestricted Information: Any information that you voluntarily choose to include in a Public Area of the Service, such as a public profile page, will be available to any Visitor or User who has access to that content.
Service Providers (Sub Processors): We work with third-party service providers who provide website, application development, hosting, maintenance, and other services for us. These third parties may have access to, or process Personal Data or Client Data as part of providing those services for us. We limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and our contracts with them require them to maintain the confidentiality of such information.
We may make certain automatically collected, aggregated, or otherwise non-personally identifiable information available to third parties for various purposes, including:
in the good-faith belief that such action is necessary to comply with applicable laws, respond to a valid court order, judicial or other government subpoena, or warrant, or cooperate with law enforcement or other governmental agencies.
We may disclose Personal Data or other information if required by law or
We also reserve the right to disclose Personal Data or other information that we believe, in good faith, is appropriate or necessary to:
Information about Users and Visitors, including Personal Data, may be disclosed and transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction. This also applies in the event of insolvency, bankruptcy, or receivership, in which information is transferred to one or more third parties as one of our business assets, but only if the recipient of the User or Visitor Data agrees to a Privacy Policy with terms substantially consistent with this Privacy Policy.
Client Data may be physically or electronically transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction. This also applies in the event of insolvency, bankruptcy, or receivership, in which information is transferred to one or more third parties as one of our business assets, for the sole purpose of continuing the operation of the Service. Again, this is subject to the condition that the recipient of the Client Data agrees to a Privacy Policy with terms substantially consistent with this Privacy Policy.
We respect your privacy rights and provide you with reasonable access to the Personal Data that you may have provided through your use of the Services. If you wish to access or amend any other Personal Data we hold about you or request that we delete or transfer any information about you obtained from an Integrated Service, you can contact us at hello@authkey.io to make your request. Upon your request, we will delete or block any references to you in our database.
You can update, correct, or delete your Account information and preferences at any time by accessing your Account settings page on the Service. Please note that while any changes you make will be instantly or reasonably reflected in active user databases, we may retain all information you submit for purposes such as backups, archiving, fraud and abuse prevention, analytics, compliance with legal obligations, or where we reasonably believe we have a legitimate reason to do so.
If you choose not to share certain Personal Data with us, it may impact our ability to provide you with some of the features and functionality of the Service.
We will be sending you informative and promotional notifications related to our services via SMS, Emails, WhatsApp, RCS.
You can opt out of the collection of navigation information about your visit to the Site by Google Analytics using the Google Analytics Opt-out feature.
By signing up, you (the client) provide opt-in consent to Authkey for receiving SMS, voice, email, and WhatsApp messages for authentication, promotional, and service-related purposes.
If you receive unwanted emails from us, you can unsubscribe (opt-out) at any time by following the instructions within the email or by sending an email to hello@authkey.io.
Please note that if you opt out of receiving commercial emails from us or change the nature or frequency of promotional communications you receive from us, it may take up to 5-7 business days to process your request. Even after opting out of receiving commercial messages, you will continue to receive administrative messages from us regarding the Service.
Authkey has no direct relationship with the Client's customers or third parties whose Personal Data it may process on behalf of a Client. An individual seeking access or requesting corrections, amendments, deletion of inaccurate data, or withdrawal of consent for further contact should direct their query to the Client or User with whom they interact directly. If the Client requests Authkey to remove the data, we will respond to the request within thirty (30) days. We will delete, amend, or block access to any Personal Data we store only if we receive a written request from the Client responsible for such Personal Data, unless we have a legal right to retain the data. We reserve the right to keep a copy of such data for archiving purposes or to defend our rights in litigation. Any request concerning Client Data should be sent to hello@authkey.io with the email subject "Data Subject Request" and should include sufficient information for Authkey to identify the Client or its customer or third party and the information to delete or amend.
An external PCI-compliant payment gateway handles all credit card transactions, and we conduct regular vulnerability checks to prevent security issues.
Your personal information is securely stored behind protected networks and is only accessible by a limited number of individuals with special access rights, who are required to maintain the confidentiality of this information. Additionally, all sensitive information you provide is encrypted using industry-standard protocols and is transmitted via TLS/SSL technology. We offer 2FA (2-factor authentication) for every account, providing an extra layer of security for your personal data. This ensures the confidentiality, integrity, and availability of our customers' personal data in case of data loss or security breaches.
In the event of a security breach, we have a policy to conduct an immediate investigation of the incident and report it to the competent data protection authority within 72 hours or less. We also notify all affected data subjects of a high-risk data breach incident.
The Service may contain features or links to websites and services provided by third parties. Any information you provide on third-party sites or services is supplied directly to the operators of those services and is subject to the policies, if any, governing privacy and security set by those operators, even if accessed through the Service. We are not accountable for the content, privacy, and security practices and policies of third-party sites or services to which links or access are provided through the Service. We recommend that you familiarize yourself with the privacy and security policies of third parties before sharing your information with them.
Google's advertising requirements can be summed up by Google's Advertising Principles. They are put in place to provide a positive experience for users.https://support.google.com/adwordspolicy/answer/6008942?hl=en
We have not enabled Google AdSense on our site and we don't plan to do so in future.
If you use Chrome Extensions or Google add-ons developed by Authkey, we may collect data such as your name, email address, through connecting to your Google Account (with your consent). This information won't be displayed to the public nor is it ever shared without your explicit consent. As of today, we don't use login or signup based on your Google Account.
Authkey's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
We may transfer, process, and store Personal Data collected through the Services in centralized databases and with service providers located in the US. The US may not have the same data protection framework as the country from which you may be using the Services. When we transfer Personal Data to the US, we will safeguard it as described in this Privacy Policy and the Terms of Service.
The Service is hosted in the United States or Germany. Regardless of the database being hosted within the European Union, if you choose to use the Service from the EU or other regions of the world with laws governing data collection and use that may differ from US law, please note that you may be transferring your Client Data and Personal Data outside of those regions to the United States for storage and processing by our service providers listed in our Terms of Service. We will adhere to GDPR requirements to ensure adequate protection for the transfer of personal information from Europe to the US. Additionally, we may transfer your data to the US, the EEA, or other countries or regions deemed by the European Commission to provide adequate protection of personal data in connection with data storage and processing to fulfill your requests and operate the Service.
Authkey does not own, control, or directly oversee the utilization of any of the Client Data stored or processed by a Client or User through the Service. Only the Client or Users have the authority to access, retrieve, and govern the use of such Client Data. Authkey has limited awareness of the specific Client Data being stored or made accessible by a Client or User through the Service. Authkey does not directly access this Client Data except when authorized by the Client or when necessary to provide Services to the Client and its Users.
As Authkey neither collects nor determines the usage of any Personal Data within the Client Data, and because it doesn't establish the purposes, methods of collection, or the uses of this Personal Data, Authkey is not operating as a data controller under the European Union's General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). Thus, it does not carry the associated responsibilities stipulated by the GDPR. Authkey should be regarded solely as a data processor on behalf of its Clients and Users concerning any Client Data containing Personal Data that falls under the GDPR's requirements. Except as outlined in this Privacy Policy, Authkey does not independently facilitate the transfer or provision of Client Data containing Personal Data to third parties. This is only done through third-party subcontractors who may process such data on behalf of Authkey while delivering Services to Clients. Such actions are executed or authorized solely by the respective Client or User.
The Client or the User, as per the Regulation, serves as the data controller for any Client Data containing Personal Data. This means that such a party governs the method by which Personal Data is collected and utilized, as well as determining the purposes and means of processing such Personal Data.
Authkey is not accountable for the content of the Personal Data within the Client Data or other information stored on its servers (or subcontractors' servers) based on the Client's or User's discretion. Authkey is also not responsible for how the Client or User manages, discloses, distributes, or otherwise processes such information.
We only retain the Personal Data collected from a User for as long as the User’s account is active or otherwise for a limited period of time as long as we need it to fulfill the purposes for which we have initially collected it, unless otherwise required by law. We will retain and use information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements as follows:
We permit third parties, with whom we have a separate agreement, to use cookies and other technologies for collecting information about your use of the Site. These third parties consist of two categories: (1) business partners who gather information when you view or engage with one of their advertisements on the Site, and (2) advertising networks that collect information about your interests when you view or engage with one of their advertisements.
The data collected by these third parties is employed to make predictions about your interests or preferences. This enables them to display advertisements or promotional material on this Site and on other websites across the Internet, customized to your apparent interests. Business partners and advertising networks that serve interest-based ads on the Services have limited access to a small amount of information regarding your profile and your device. This information is necessary to provide you with advertisements tailored to your apparent interests. They may potentially reuse this limited information on other websites or services.
We do not share any information that could readily identify you, such as your email address, with these third parties. However, these third parties may have access to information related to your device, like your IP or MAC address. We do not possess access to or control over the technologies these third parties use to gather information about your interests. The information practices of these third parties are not covered by this Privacy Policy. Apart from what is discussed in this document, we have no authority over these third parties.
The Fair Information Practices Principles form the backbone of privacy law in the United States and INDIA, and the concepts they encompass have played a significant role in shaping data protection laws worldwide. Understanding the Fair Information Practice Principles and how to implement them is crucial for compliance with the various privacy laws that safeguard personal information.
To align with the Fair Information Practices, we will take the following responsive actions in the event of a data breach: We will notify you via email or through an in-site notification within 7 business days. We also commit to the Individual Redress Principle, which grants individuals the right to legally pursue enforceable rights against data collectors and processors who fail to comply with the law. This principle not only ensures that individuals have enforceable rights against data users but also provides them with recourse to pursue legal action through courts or government agencies to investigate and prosecute non-compliance by data processors.
We may update this Privacy Policy periodically without prior notice. However, it's important to note that we will not introduce changes leading to significant additional uses or disclosures of your personal information without notifying you via email. In addition, we may implement non-significant changes to this Privacy Policy that generally won't have a significant impact on how we use your personal information, and such changes won't require an email notification.
We recommend checking this page regularly for any updates. If you find any non-significant changes to this Privacy Policy unacceptable, please reach out to us immediately. Until the matter is resolved, please refrain from using the Authkey website and any services we provide. Your continued use of our services and the Authkey website after non-significant changes to this Privacy Policy are posted indicates your acceptance of those changes.
If you have any questions or comments about this Privacy Policy or feel that we are not abiding by the terms of this Privacy Policy, please contact our Privacy Agent in any of the following ways: