Privacy Policy

Exeqra is a workflow and business communication platform for organizations and their employees, customers, vendors, contractors, consultants, and partners. This Policy applies to our website, applications, support channels, and related services (collectively, the “Services”).

When an organization subscribes to Exeqra, that organization is normally the controller of the business content it places in the Services, and Exeqra processes that content as its processor/service provider under the customer’s instructions. For account, billing, website, security, and direct relationship data, Exeqra is the controller. If you are an invited participant, please also review the policy of the organization that invited you.

We collect data needed to operate, protect, and improve the Services. The categories depend on how your organization uses Exeqra.

Account and organization data

• Names, work email addresses, phone numbers, roles, authentication details, profile preferences, organization and workspace details.
• Invitations and participant details, including the information an organization supplies for employees, customers, vendors, or other collaborators.
• Subscription, transaction, tax, and billing-contact information. Payment card details are generally processed by payment providers rather than stored by Exeqra.

Customer content

• Workflow configurations, tasks, approvals, requests, forms and responses, documents, uploaded files, records, comments, and messages.
• Notification and delivery history; emails; and, where enabled by a customer, WhatsApp Business conversations and related metadata.
• AI prompts, AI-generated summaries, extractions, drafts, and workflow outputs created through optional AI features.

Technical and support data

• IP address, browser and device information, approximate location inferred from IP, log-in events, audit logs, usage events, cookies, and diagnostics.
• Messages, attachments, and other information included in support requests or feedback.

We use data to provide the Services: create and administer accounts; authenticate users; host and operate workspaces; run workflows, forms, approvals, search, tasks, and documents; route messages; and send notifications requested or configured by customers.

We also use data to provide support, troubleshoot, detect and prevent fraud or abuse, maintain security and backups, enforce our terms, comply with law, process billing, understand aggregated product usage, and improve the reliability and usability of the Services. We do not sell personal information or use customer content for unrelated advertising.

Where applicable law requires a legal basis, we process personal data to perform a contract or take steps at your request; for our legitimate interests in operating, securing, and improving the Services; to comply with legal obligations; and with consent where required. Customers are responsible for establishing an appropriate legal basis for the personal data they submit to the Services and for providing required notices to their participants.

Access to customer content is controlled by the customer’s workspace settings and instructions. We may share data with service providers that help us operate the Services, subject to appropriate contractual safeguards and only as needed. Categories include cloud hosting, database and object-storage providers, email delivery, payment processing, authentication, analytics, customer support, security monitoring, AI, and messaging providers.

We may also disclose data where required by law, to protect rights, safety, and security, in connection with a merger or similar transaction, or with your direction or consent. We do not rent, sell, or share customer content for third parties’ independent marketing.

AI features may summarize conversations, extract information, draft content, improve search, or assist with workflow automation. They are optional. When a customer enables or uses an AI feature, the relevant customer content and prompt may be processed solely to provide that requested feature and to maintain its safety and reliability.

AI output can be incomplete or incorrect. Customers and users must review it before relying on or acting on it. AI output is not legal, financial, medical, employment, or other professional advice. Customers should not submit sensitive personal data to AI features unless they have assessed the feature, obtained any required permissions, and configured the Services appropriately.

If a customer connects WhatsApp Business Platform, the customer expressly authorizes Exeqra to send, receive, store, route, and display WhatsApp Business messages and associated data on the customer’s behalf, only to provide the requested Services. Message content may be visible to the customer’s authorized workspace users and processed through the customer’s configured workflows.

Customers are responsible for obtaining all necessary notices, permissions, and opt-ins; honoring opt-outs; and complying with Meta/WhatsApp terms, policies, template requirements, and applicable law. Exeqra does not use WhatsApp Business conversation content for unrelated purposes.

We use reasonable technical and organizational measures designed to protect data, including encryption in transit, encryption at rest where applicable, authentication, role-based access controls, least-privilege practices, audit logging, infrastructure monitoring, backups, and incident-response processes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please protect your credentials and promptly report suspected unauthorized access to support@exeqra.com.

We retain customer content while the applicable account is active or as instructed by the customer. After closure or deletion, we delete or de-identify data under our retention procedures, subject to legal obligations, dispute resolution, fraud prevention, and backup cycles. Operational, security, and audit logs may be retained for a limited period to protect the Services and investigate incidents. Customers should export any content they need before account closure.

Exeqra is based in India and may process data in India and other countries where we or our service providers operate. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for cross-border transfers, such as contractual protections and comparable measures.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent where processing relies on consent. Workspace users should usually direct requests about customer content to the organization that controls the workspace. You may contact us at support@exeqra.com; we may need to verify your identity. You may also have the right to complain to a relevant data-protection authority.

We use cookies and similar technologies for essential functions such as authentication, security, and preferences, and may use analytics to understand how the Services are used. You can manage cookies through your browser. Blocking essential cookies may prevent parts of the Services from working. Where required, we will seek consent before setting non-essential cookies. See also our Cookie Policy.

The Services are intended for business use and are not directed to children. Do not submit personal data of a child unless you have legal authority and a valid lawful basis to do so. If you believe a child’s data has been provided improperly, contact us and we will review the request.

We may update this Policy to reflect changes to our Services, legal requirements, or practices. We will post the revised version here and update the “Last updated” date; for material changes, we may provide additional notice. Your continued use after the effective date is subject to the updated Policy.

Questions or requests: support@exeqra.com. General business contact: hello@exeqra.com. Website: exeqra.com.