Privacy Policy

1. Information We Collect

We collect the following types of data:

a. Website Usage Data

When you or your users interact with websites that have embedded Iterato scripts, we collect:

• Pageviews
• Click activity and engagement metrics
• Console logs
• IP addresses
• User agent strings
• Timestamps

b. Submitted Data

We collect data submitted via:

• Forms on our platform (e.g., feedback forms, contact forms)
• Embedded forms placed by our clients on their websites

c. Analytics and Tracking Tools

We use third-party tools including but not limited to:

• Google Analytics
• Mixpanel

These services may use cookies and similar tracking technologies to collect information about your browsing behavior.

d. Payment Data

Iterato does not store or process any payment or billing information. All payments are securely handled by our Merchant of Record, DODOPayments, who is solely responsible for processing, tax compliance, chargebacks, and payment security.

2. Legal Basis for Processing (GDPR Compliance)

We process personal data only under the following lawful bases:

• Consent (for optional services or communications)
• Contractual necessity (to deliver our services)
• Legal obligation (compliance with applicable laws)
• Legitimate interest (enhancing user experience and product improvement)

3. How We Use Your Data

Your data may be used for:

• Generating analytics and insight dashboards
• Debugging issues via console logs
• Improving product features and recommendations
• Communication regarding service updates or legal changes
• Providing technical and billing support

4. Sharing of Data

We may share limited data with:

• Our service partners (such as analytics providers and hosting services)
• Payment processor DODOPayments for transaction and compliance purposes
• Advertising platforms like Meta, Google, and Snapchat to improve outreach (aggregate/non-identifiable data only)

We do not sell your personal information to third parties.

5. Data Retention

We retain all collected data indefinitely for analytics, diagnostics, and historical reporting purposes unless deletion is explicitly requested by a data subject.

6. Data Subject Rights (Under GDPR and Indian IT Rules)

As a user or data subject, you have the right to:

• Request access to your data
• Request correction or deletion of your data
• Withdraw consent (where applicable)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at founder@iterato.in.

7. Cookies

Iterato scripts set cookies for session control and event tracking. You may disable cookies in your browser; however, certain features of the platform may become unavailable.

8. Data Security

We use secure, encrypted channels for all data transmission and maintain strict access control and monitoring to prevent unauthorized access. All data is stored on secure servers in compliance with applicable data protection laws.

9. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from minors. If we become aware that such information has been collected, we will take steps to delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notifications.

11. Contact Information

For any questions, concerns, or to exercise your data rights:
📧 founder@iterato.in

By using Iterato, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.