Privacy Policy

We believe privacy is an essential part of a trusted digital experience. Learn how ExaThought collects, uses, and protects your information.

Effective Date: 01 - 05 - 2026

Last Updated: 01 - 05 - 2026

Introduction

ExaThought Technology Consulting Pvt. Ltd. ("ExaThought", "Company", "we", "us", or "our") is committed to protecting the privacy and security of personal information entrusted to us by our clients, partners, website visitors, job applicants, and other stakeholders.

This Privacy Policy describes how we collect, use, process, disclose, store, transfer, and protect personal information when you:

Visit or interact with our website at www.exathought.com
Contact us through our website or other communication channels
Request information about our services
Schedule consultations or meetings
Download resources, reports, or marketing materials
Subscribe to newsletters or other communications
Engage with ExaThought as a client, supplier, business partner, or job applicant
Use any services, solutions, platforms, or applications developed, managed, or operated by ExaThought

By using our website or providing information to us, you acknowledge that you have read and understood this Privacy Policy.

1. About Us

ExaThought Technology Consulting Pvt. Ltd.
Metro Pillar Number 55,
3rd Floor, 308, 100 Feet Road,
Above Domino's, Indira Nagar 1st Stage,
Hoysala Nagar, Indiranagar,
Bengaluru, Karnataka 560038, India

Email: contact@exathought.com

Website: www.exathought.com

2. Information We Collect

Personal Information

Personal information may include:

Name
Business email address
Phone number
Job title
Company name
Industry
Country or region
Business address
Communication preferences
Information voluntarily submitted through forms or correspondence

Website and Technical Information

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device type
Operating system
Approximate geographic location
Website navigation behaviour
Referral sources
Date and time of visits
Session information
Usage patterns and interactions

Marketing and Communication Information

We may collect information when you:

Submit a Contact Us form
Request a consultation
Download resources
Subscribe to newsletters
Register for webinars, events, or campaigns

Recruitment Information

If you apply for employment opportunities with ExaThought, we may collect:

Resume or CV
Employment history
Educational qualifications
Professional certifications
Skills and experience
References
Interview notes
Portfolio information
Other information voluntarily provided during the recruitment process

3. How We Collect Information

Direct Interactions

Contact Us forms
Schedule Consultation forms
Newsletter subscriptions
Resource downloads
Email communications
Business enquiries

Automated Technologies

Cookies
Analytics platforms
Marketing and advertising technologies
Website monitoring tools

Third-Party Sources

Professional networking platforms
Business partners
Referral sources
Publicly available business information

4. Technologies We Use

Our website may use the following technologies:

Google Analytics 4
Google Tag Manager
Microsoft Clarity
LinkedIn Insight Tag
Meta Pixel
HubSpot
Zoho CRM
Microsoft Dynamics

These technologies help us:

Improve website performance and user experience
Understand visitor behaviour
Measure marketing effectiveness
Manage customer relationships
Provide personalised and relevant content

5. How We Use Your Information

Provide requested services and support
Respond to enquiries and business requests
Manage customer and partner relationships
Improve our services, website, and solutions
Send newsletters, updates, and marketing communications
Conduct analytics and performance reporting
Evaluate employment applications
Meet legal, regulatory, and contractual obligations
Protect the security and integrity of our business operations

6. Legal Basis for Processing

Where required by applicable laws, we process personal information based on:

Your consent
Performance of a contract
Compliance with legal obligations
Legitimate business interests
Protection of legal rights and claims

7. Data Controller and Data Processor Roles

ExaThought acts as a Data Controller when processing personal information collected through its website, marketing activities, recruitment activities, and business operations.

ExaThought may act as a Data Processor when handling personal data on behalf of clients under contractual agreements and documented instructions.

8. Artificial Intelligence and Data Processing

ExaThought delivers services involving Artificial Intelligence (AI), Machine Learning, Data Analytics, Generative AI, and Automation technologies.

Client-owned data remains the property of the client.
Confidential information is processed solely for authorised business purposes.
Customer confidential information and personal data will not be used to train publicly available AI models without express written authorization.
Appropriate security and confidentiality measures are maintained throughout project execution.

9. Disclosure of Information

We do not sell personal information.

We may share information with:

Technology and infrastructure service providers
CRM, analytics, and marketing platform providers
Professional advisors including auditors, legal advisors, and consultants
Government authorities where required by law
Parties involved in mergers, acquisitions, or corporate restructuring activities

10. International Data Transfers

ExaThought serves clients across India, the United States, the United Kingdom, and the United Arab Emirates.

Personal information may be transferred, stored, or processed across jurisdictions as required for business operations, client engagements, and service delivery. Appropriate safeguards are implemented to protect personal information during such transfers.

11. Data Security

ExaThought maintains technical, administrative, and organizational safeguards designed to protect personal information.

Role-based access controls
Authentication and authorization measures
Secure development practices
Information security policies and procedures
Employee confidentiality obligations
Security monitoring and incident response processes
Vendor risk assessment practices

ExaThought maintains an Information Security Management System (ISMS) aligned with ISO/IEC 27001:2022 requirements.

12. Data Retention

Marketing enquiries may be retained for up to 36 months from the last interaction.
Recruitment information may be retained for up to 24 months.
Client-related information may be retained as required by contracts and legal obligations.
Information may be retained longer where necessary to establish, exercise, or defend legal claims.

13. Your Rights

Subject to applicable laws, you may have the right to:

Access personal information
Correct inaccurate information
Request deletion of personal information
Restrict processing
Object to certain processing activities
Withdraw consent where applicable
Lodge complaints with applicable regulatory authorities

14. Cookies and Similar Technologies

We use cookies and similar technologies to enhance website functionality, analyse website usage, measure marketing effectiveness, and improve user experience.

You may manage cookie preferences through your browser settings.

15. Third-Party Websites

Our website may contain links to third-party websites. ExaThought is not responsible for the privacy, security, or content practices of third-party websites.

16. Children's Privacy

Our website and services are intended for business and professional users. We do not knowingly collect personal information from individuals under 18 years of age.

17. Compliance with Applicable Laws

ExaThought is committed to complying with applicable privacy and data protection laws, including relevant requirements under the Digital Personal Data Protection Act, 2023 (India) and other applicable international privacy regulations.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page together with the updated revision date.

19. Contact Us

If you have questions regarding this Privacy Policy or would like to exercise your privacy rights, please contact us.