Privacy Policy

Scope and who is responsible

This draft Privacy Policy describes the proposed approach of UnnatiOS to personal information relating to website visitors, prospective customers, account holders and people who contact our team. References to “we”, “us” and “our” mean the operator of UnnatiOS, whose legal identity must be confirmed before this policy becomes effective.

When a business, agency or educational institution uses UnnatiOS to manage information about its own customers, staff or students, that organisation generally decides the purposes of that processing. Its privacy notice and instructions apply to those activities. The Data Policy explains the proposed responsibilities for customer-managed data.

Information involved

• Enquiries and demos: name, business name, contact details, business requirements and appointment information that you provide.
• Account and administration: account identifiers, authorised users, roles, subscription or billing correspondence and support requests.
• Communications: messages, attachments and other information you choose to share with our team.
• Technical information: device, browser, IP address, access times, logs and identifiers, to the extent collected by the deployed website or platform.
• Customer content: information entered by an organisation into enabled modules, which may include contact, employee or student records.

Do not send passwords, one-time codes, complete payment-card details or unnecessary identity documents through ordinary email or chat.

Purposes of use

The proposed purposes are to answer enquiries, arrange demonstrations, administer accounts, deliver requested features, provide support, maintain service security, manage billing communications and meet applicable legal duties.

Promotional communications should be distinguished from service communications. Information collected for a particular purpose should not be reused for a materially different purpose without the notice, permission or other legal justification required for that use.

Choices and permissions

Where consent is required, it should be requested through an appropriate notice and choice at the point of collection. Simply reading this page does not provide blanket consent to marketing or unrelated data use.

You can ask to stop promotional communications using an available unsubscribe option or by emailing info@unnatios.com. Necessary account, support or transaction messages may still be needed. Withdrawing permission for optional processing should not affect unrelated service features; withdrawing information needed for a requested feature may prevent that feature from operating.

Cookies and connected services

Website and platform functions may involve cookies, local storage, embedded booking tools or third-party resources. The technologies actually deployed, their providers, purposes and expiry periods must be documented before publication of this notice.

Where non-essential analytics or advertising technologies require consent, those technologies should remain inactive until the appropriate choice has been recorded. Browser controls can restrict cookies, although some functions may stop working. External services linked from the website have their own privacy notices.

Sharing and access

Personal information may need to be accessible to authorised personnel, hosting or technology providers, communication providers and other service providers involved in delivering the requested service. Enabled integrations may send information to the provider selected by the account administrator.

Access and disclosure should be limited to a defined purpose and applicable legal or contractual requirements. Disclosure may also be necessary to respond to a valid legal demand or protect against unlawful activity. The actual provider list and any further uses must be verified; this draft makes no unsupported claim about selling data, advertising use or provider model training.

Storage, retention and deletion

Retention should be linked to the purpose of collection, the active customer relationship, contractual obligations, dispute handling and applicable legal requirements. A category-specific retention schedule must be confirmed before this policy is published.

Deletion from active systems may differ from expiry in backups or independently operated integrations. Some records may need to be retained under law or a documented legal hold. No immediate deletion, fixed backup-erasure period or India-only storage commitment is made by this draft.

Security

The proposed policy is to use appropriate technical and organisational safeguards proportionate to the information and risks involved, and to require suitable safeguards from relevant providers. The actual safeguards must be verified against the platform’s implementation.

No online service can guarantee absolute security. Protect your account credentials, use available account security controls and promptly report suspected unauthorised access to our team.

Children and education accounts

UnnatiOS includes education-related tools that may be used by institutions to manage student information. Institutions must determine the applicable requirements for children’s information and obtain the necessary parent, guardian or other lawful authorisation before using those tools.

A student’s institutional use is different from independently entering a commercial contract. Do not assume an education use case removes child-data safeguards or permits unrestricted tracking, advertising or AI processing.

Requests and grievances

To request information about processing, correction, deletion, withdrawal of consent or another right available under applicable law, email info@unnatios.com with the subject “Privacy Request”. Tell us the relevant account or organisation and the nature of your request; do not send unnecessary sensitive documents.

Reasonable verification may be needed to protect the account and other people’s information. If the data is managed by your employer, institution or another customer organisation, contact that organisation first; requests to UnnatiOS may need to be coordinated with its authorised administrator. Applicable response periods and lawful complaint routes must be honoured. The formal grievance officer’s name and contact details must be added before publication.

Policy updates

The published version should state its effective date and identify material changes. Where required, changes to processing need additional notice or consent. This review draft is not yet effective and does not establish that every provision of a newly enacted law is already in force.