This Privacy Policy explains how EX10 GLOBAL SOLUTIONS LLP, with its registered office in New Delhi, India (“EX10”, “we”, “us”), collects, uses, shares and protects information in connection with NgageConsult (the “Service”).
We are the data controller for the personal information described here. By using the Service, you acknowledge the practices described in this Policy. This Policy should be read together with our Terms of Service.
We do not intentionally collect special categories of personal data, and you should not submit such data as Customer Content unless you are authorised to do so and have a lawful basis.
We use the information we collect to:
Where applicable data-protection law requires a legal basis, we rely on: performance of a contract (to provide the Service you request); legitimate interests (to secure, improve and promote the Service, balanced against your rights); consent (for certain cookies and marketing, which you may withdraw); and compliance with legal obligations.
We work with trusted service providers (“sub-processors”) who process information on our behalf under contractual obligations to protect it and use it only for the purposes we specify. The categories are:
| Category | Purpose |
|---|---|
| Cloud hosting & infrastructure | Hosting the application, databases and storage that run the Service. |
| Payment processing | Securely processing subscription payments and managing billing. Card data is handled directly by the processor. |
| AI model providers | Generating responses to your queries. Content is processed to return answers and is not used to train third-party public models. |
| Product analytics | Understanding feature usage and performance to improve the Service. |
| Error monitoring & logging | Detecting, diagnosing and resolving technical issues. |
| Email & communications | Sending transactional, support and (where permitted) product messages. |
A current list of our sub-processors is available on request by emailing support@ex10.io.
We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how it is used. We use the following categories:
You can control cookies through your browser settings, and where required we will ask for your consent to non-essential cookies. Disabling some cookies may affect how the Service works.
We share information only as described in this Policy, including:
We retain personal information and Customer Content for as long as your account is active and as needed to provide the Service. After account closure or termination, we delete or anonymise Customer Content within a reasonable period — typically within 90 days — unless a longer retention period is required to comply with legal, tax, accounting, or security obligations, or to resolve disputes and enforce our agreements. You may request an export of your Customer Content within 30 days of termination as described in our Terms.
We implement technical and organisational measures designed to protect personal information, including encryption in transit, access controls, authentication, network protection and monitoring. Enterprise plans offer additional controls such as SAML SSO, SCIM provisioning and audit logs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; please keep your account credentials confidential and notify us promptly of any suspected compromise.
Subject to applicable law, you may have the right to:
To exercise any of these rights, email us at support@ex10.io. We will respond within the timeframe required by applicable law and may need to verify your identity. If we process information on behalf of an organisation (as a processor), we will refer your request to that organisation. You also have the right to lodge a complaint with your local data-protection authority.
We and our sub-processors may process information in countries other than your own, including India and other jurisdictions where our providers operate. Where personal information is transferred across borders, we take steps to ensure an adequate level of protection through appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, as required by applicable law.
The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy with a new effective date and, where appropriate, notify you through the Service or by email. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.
For any questions or requests about this Privacy Policy or your personal information, contact us: