At a glance
- You can browse our website without giving us any personal data.
- If you request a demo or write to us, we use your details only to respond and follow up on that request.
- We do not sell your personal data, and we do not use it for advertising profiles.
- We do not use advertising or cross-site tracking cookies on this website.
- You can access, correct or erase your data, or withdraw consent, at any time by writing to us.
- Our Grievance Officer will respond to complaints, and you may escalate to the Data Protection Board of India.
Who we are
This website is operated by Aaren Technologies Private Limited, a company incorporated in India, doing business as Wekalp (“Wekalp”, “we”, “us”, “our”).
For personal data collected through this website and in our own business dealings, Wekalp is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) — that is, we decide why and how that data is processed.
CIN: U72900MH2022PTC381944
Scope of this policy
This policy applies to digital personal data of individuals (“you”, the Data Principal) that we collect through:
- our website, www.wekalp.com, and its sub-pages;
- forms, emails, phone calls and messages you send us;
- meetings, demos, events and other business interactions with us; and
- job applications sent to us.
It also applies to personal data collected offline that is later digitised. It does not govern data that our enterprise customers load into the Wekalp platform — see Section 15.
This policy is published in compliance with the DPDP Act and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), and, to the extent they continue to apply, the Information Technology Act, 2000 and the rules made under it.
Personal data we collect and why
We collect only the personal data we need for a specified purpose. The table below lists each category, the purpose it serves, and the basis on which we process it.
| Personal data | When we collect it | Specified purpose | Basis |
|---|---|---|---|
| Email address | When you submit the “Schedule Demo” or triage request form | To contact you about your request, schedule a demo or working session, and follow up on it | Consent |
| Name, email, phone number, company, job title, and the content of your message | When you email, call or message us, or meet us at an event or demo | To respond to your enquiry, provide information, prepare proposals and manage our business relationship | Consent, or voluntary provision for a specified purpose (Section 7(a), DPDP Act) |
| Business contact details of customer, partner and vendor representatives | During contracting and delivery of services | To perform and administer contracts, invoice, provide support and communicate about the engagement | Voluntary provision for a specified purpose; compliance with law |
| Updates and news about Wekalp | Only if you opt in | To send you product updates, articles and event invitations | Consent (you can opt out at any time) |
| CV / résumé, education, work history, contact details, and any other details you choose to share | When you apply for a role or send us your profile | To assess your application, contact you and run our hiring process | Consent, or voluntary provision for a specified purpose |
| IP address, browser and device type, pages requested, date and time, referring URL | Automatically, when you visit the website (server and CDN logs) | To deliver the website, keep it secure, detect and prevent abuse, and troubleshoot | Legitimate use — compliance with law and reasonable security safeguards |
We do not ask for, and request that you do not send us, sensitive information such as passwords, financial account details, health data, biometric data, or government identity numbers through this website.
We will not use your personal data for a purpose that is materially different from those listed above without first giving you a fresh notice and, where required, obtaining your consent.
Consent and legitimate uses
Under the DPDP Act we may process your personal data only (a) with your consent, or (b) for certain legitimate uses set out in Section 7 of the Act.
Consent
Where we rely on consent, it will be free, specific, informed, unconditional and unambiguous, given through a clear affirmative action (such as submitting a form after reading the notice beside it). Consent is limited to the purpose stated at the time.
Legitimate uses
We may process personal data without separate consent where the DPDP Act permits it, including:
- where you voluntarily provide your data for a specified purpose and have not said you do not consent to its use (for example, emailing us a question so we can answer it);
- to comply with any law, judgment, decree or order in force in India;
- to respond to a medical emergency or ensure safety during a disaster or breakdown of public order; and
- for other purposes permitted under Section 7 of the DPDP Act.
Consent Managers
Once Consent Managers are registered with the Data Protection Board of India, you may also give, manage, review and withdraw your consent to us through a registered Consent Manager.
Who we share your data with
We do not sell your personal data. We share it only as described below, and only to the extent necessary.
Data Processors (service providers)
We use trusted service providers who process personal data on our behalf, under written contracts that require them to protect it and use it only on our instructions. These include:
| Category | What they do for us | Data involved |
|---|---|---|
| Cloud hosting and content delivery | Hosting and securely serving this website (Amazon Web Services) | Technical and log data |
| Form delivery service | Delivering demo-request form submissions to our inbox (Web3Forms) | Email address and request details |
| Email and productivity tools | Receiving, storing and responding to your correspondence | Contact details and message content |
| Professional advisers | Legal, audit, accounting and tax advice | Only what is needed for the matter |
Other disclosures
- Legal and regulatory: to government authorities, courts, law enforcement or regulators where required by law or a lawful order.
- Protecting rights: where reasonably necessary to protect our rights, property or safety, or those of our users or others, including fraud prevention.
- Business transfers: in connection with a merger, acquisition, restructuring or sale of assets, in which case the recipient will be bound to use your data consistently with this policy.
- With your consent: to any other party, where you have asked us to.
Transfers outside India
Some of our service providers may store or process personal data on servers located outside India. Section 16 of the DPDP Act permits such transfers except to countries or territories restricted by notification of the Central Government.
We will not transfer your personal data to any restricted country or territory, and we will comply with any conditions the Central Government prescribes for cross-border transfers. Wherever your data is processed, we require the same standard of protection described in this policy.
How long we keep your data
We keep personal data only for as long as it is needed for the purpose it was collected for, or as required by law. When it is no longer needed, we erase it or irreversibly anonymise it, and we instruct our Data Processors to do the same.
| Data | Retention period |
|---|---|
| Demo requests and enquiries | 24 months from our last interaction, unless a business relationship follows or you ask us to erase it sooner |
| Customer, partner and vendor contacts | For the duration of the relationship, and thereafter for as long as required under applicable tax, company and contract law (typically 8 years) |
| Job applications | 12 months from the close of the hiring process, unless you are hired or ask us to erase it sooner |
| Server, security and processing logs | At least one year, as required under the DPDP Rules, and no longer than necessary thereafter |
| Records of consent and of rights requests | As long as needed to demonstrate compliance with the DPDP Act |
Where the DPDP Rules require us to notify you before erasing your data, we will do so at least 48 hours in advance.
How we protect your data
We take reasonable security safeguards to prevent personal data breaches, including:
- encryption of data in transit (HTTPS/TLS) and, where supported, at rest;
- role-based access controls, so only authorised personnel who need the data can access it;
- logging and monitoring of access to systems that hold personal data;
- contractual security obligations on our Data Processors; and
- regular review of our security practices.
If a breach occurs
If we become aware of a personal data breach, we will inform affected individuals without delay and notify the Data Protection Board of India, as required by the DPDP Act and DPDP Rules. Our notice to you will describe what happened, the likely consequences, the steps we are taking, the measures you can take to protect yourself, and whom to contact.
No method of transmission over the internet or electronic storage is completely secure. If you believe your interaction with us is no longer secure, please contact us immediately.
Cookies and third-party content
This website does not use advertising, analytics-profiling or cross-site tracking cookies. We may use strictly necessary technologies required for the website to function and be delivered securely.
To display the website, your browser loads fonts from Google Fonts, which means your IP address and browser information are sent to Google. Some pages link to videos hosted on YouTube; if you follow those links, YouTube’s own privacy policy applies.
If we introduce analytics or other non-essential cookies in future, we will update this section and ask for your consent before setting them.
This website may link to third-party websites. We are not responsible for their privacy practices, and we encourage you to read their policies.
Children’s personal data
Our website and services are intended for businesses and professionals, not for children. Under the DPDP Act, a “child” is anyone under 18 years of age.
We do not knowingly collect personal data of children. If you are under 18, please do not submit personal data to us. If we learn that we have collected a child’s personal data without verifiable consent of a parent or lawful guardian, we will delete it. We do not track, behaviourally monitor or target advertising at children.
Your rights
As a Data Principal, you have the following rights under the DPDP Act and DPDP Rules:
Access information
Obtain a summary of the personal data we process about you and the processing activities, and the identities of other Data Fiduciaries and Processors we have shared it with, along with a description of what was shared.
Correction & erasure
Ask us to correct inaccurate or misleading data, complete incomplete data, update data, or erase data that is no longer needed for its purpose (unless we must retain it by law).
Grievance redressal
Have a readily available means to raise a grievance with us about our processing of your data, and receive a response.
Nominate
Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
How to exercise your rights
Email tech@wekalp.com with the subject line “Data Principal Request”, stating which right you wish to exercise. We may need to verify your identity before acting on your request, using identifiers such as the email address you used with us.
We will acknowledge your request promptly and respond within the time period prescribed under the DPDP Rules. Exercising your rights is free of charge.
Withdrawing your consent
Where we process your data on the basis of consent, you can withdraw it at any time — as easily as you gave it — by:
- emailing tech@wekalp.com with the subject “Withdraw Consent”; or
- clicking “unsubscribe” in any update email we send you; or
- through a registered Consent Manager, once available.
Once you withdraw consent, we and our Data Processors will stop processing your data for that purpose within a reasonable time and erase it unless we are required to retain it by law. Withdrawal does not affect processing carried out before withdrawal. If you withdraw consent, we may not be able to continue providing the related service (for example, following up on a demo request).
Grievances and the Data Protection Board
If you have a concern or complaint about how we handle your personal data, please contact our Grievance Officer first:
Email: devarsh@wekalp.com
We will acknowledge your grievance and resolve it within the period prescribed under the DPDP Rules.
If you are not satisfied with our response, or we do not respond within that period, you may file a complaint with the Data Protection Board of India in the manner it prescribes. Under Section 13(3) of the DPDP Act, you should first exhaust the grievance redressal process with us before approaching the Board.
Your duties as a Data Principal
Section 15 of the DPDP Act asks Data Principals, when exercising their rights, to:
- comply with applicable laws;
- not impersonate another person when providing personal data;
- not suppress material information when providing personal data for any document or proof issued by the State;
- not register a false or frivolous grievance or complaint; and
- provide only verifiably authentic information when requesting correction or erasure.
Data processed within the Wekalp platform
Our enterprise customers use the Wekalp platform and services to process their own business data, which may include personal data. For that data, the customer is the Data Fiduciary and Wekalp acts as a Data Processor, processing it only on the customer’s documented instructions and under our contract with them.
If your personal data is held in a Wekalp customer’s environment and you want to exercise your rights, please contact that organisation directly. If you contact us, we will refer your request to the relevant customer and support them in responding.
Changes to this policy
We may update this policy to reflect changes in our practices, technology or legal requirements. We will post the updated policy on this page and revise the “Last updated” date above. If a change is material — for example, a new purpose for processing your data — we will notify you by email or through a prominent notice on the website and, where required, seek your consent again.
Contact us
For questions about this policy or how we process your personal data, please contact:
Privacy contact
Aaren Technologies Private Limited (Wekalp)
Email: tech@wekalp.com
Phone: +91 998-664-1115
CIN: U72900MH2022PTC381944