Effective Date: 27 April 2026
Last Updated: 27 April 2026

This Privacy Policy explains how AI EYE, operated by Frog Innovations and its affiliates (collectively, “AI EYE”, “we”, “us”, or “our”), collects, uses, stores, shares, transfers, and protects personal data when individuals or organizations interact with our website, customer portals, cloud services, partner portals, demos, support channels, marketing communications, or related digital services.

This Policy is written for a hybrid environment that includes both business users and individual users. It is intended to support compliance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, and should be read together with our Terms of Use and any service-specific contractual documentation.

1. Who This Policy Applies To

This Policy applies to personal data relating to:

• Website visitors and individuals browsing our public pages;
• Individual consumers or users who contact us, request a demo, or create an account where such access is offered;
• Business customers and prospective customers;
• Employees, contractors, administrators, and authorized users of our customers or partners;
• Resellers, distributors, integrators, vendors, and other channel or service partners;
• Any other person whose personal data is provided to us in connection with our services.

2. Categories of Personal Data We Collect

Depending on the nature of the interaction, we may collect:

• Identity and contact information, such as name, email address, phone number, company name, designation, department, billing or communication address, and account profile details;
• Account and authentication data, such as usernames, encrypted or hashed passwords, login timestamps, session IDs, access roles, and administrator records;
• Communication data, such as messages, emails, form submissions, chat records, support requests, meeting records, call notes, feedback, and survey responses;
• Commercial and relationship data, such as inquiries, quotations, contracts, subscriptions, order information, partner applications, onboarding records, invoices, and transaction history where applicable;
• Technical and usage data, such as IP address, browser type, device details, cookie identifiers, operating system, page views, portal actions, event logs, referral URLs, and performance analytics;
• Notification and escalation data, such as alert recipients, contact persons, escalation trees, message delivery records, and support routing information;
• Data uploaded to portals, dashboards, support systems, and cloud services, including user profiles, tickets, configuration data, reports, and records generated through use of the platform;
• Any other personal data voluntarily provided by you or by an authorized account owner.

Where our services are used by a customer or partner to process personal data of end users, employees, visitors, residents, customers, or other individuals, we may process such data on behalf of that customer or partner, subject to contractual terms.

3. How We Collect Personal Data

We collect personal data:

• Directly from you when you fill out forms, request information, book demos, subscribe to updates, create an account, make a purchase, or communicate with us;
• From your employer, account administrator, reseller, or contracting organization when they register you as a user, contact, or authorized representative;
• Automatically through cookies, logs, SDKs, analytics tools, device data, and portal activity monitoring;
• From partners, service providers, publicly available business sources, and lawful third-party sources involved in onboarding, verification, support, billing, or service delivery.

4. Purposes of Processing

We may process personal data for the following purposes:

• To operate, provide, secure, and administer our website, portals, cloud services, support systems, and partner resources;
• To create and manage user accounts, permissions, subscriptions, and customer or partner relationships;
• To respond to inquiries, schedule demos, process orders, provide support, and communicate with users;
• To generate quotations, contracts, invoices, renewals, and related business records;
• To deliver alerts, incident notifications, updates, service messages, and operational communications;
• To improve website performance, user experience, security, analytics, product functionality, and service quality;
• To send marketing, promotional, and event-related communications, subject to consent and preference controls where required;
• To detect, investigate, and prevent fraud, security incidents, misuse, unauthorized access, or policy violations;
• To comply with legal, tax, regulatory, audit, contractual, and law enforcement requirements;
• To enforce our rights, terms, and agreements.

5. Notices, Consent, and Lawful Basis

Where required by applicable law, we will provide a notice at or before the time of collection describing the personal data collected, the specific purpose of processing, how rights may be exercised, and how a grievance may be raised. Where consent is required, we will seek it through a clear affirmative action.

Depending on the context, personal data may be processed based on consent, voluntary submission for a specified purpose, performance of a contract, compliance with legal obligations, reasonable business requirements, or other lawful grounds available under applicable law.

Where consent is the basis of processing, you may withdraw consent. Withdrawal may affect our ability to provide certain services or continue a specific interaction.

6. Cookies, Tracking, and Analytics

We may use cookies, local storage, pixels, tags, SDKs, and similar technologies for authentication, session management, security, analytics, personalization, performance measurement, and marketing attribution.

You may manage cookies through your browser settings, device controls, or consent interface where available. Disabling some technologies may affect the functionality of the website or portal.

7. Sharing of Personal Data

We do not sell personal data for monetary consideration. We may share personal data with:

• Our affiliates and internal teams for business operations and support;
• Cloud providers, hosting providers, CRM systems, analytics providers, payment processors, messaging vendors, identity providers, support platforms, and other processors acting on our behalf;
• Implementation partners, resellers, integrators, subcontractors, and professional advisers where necessary for service delivery or business operations;
• Account owners, enterprise administrators, resellers, or channel partners who manage access and relationships within their organization;
• Regulators, courts, law enforcement agencies, government bodies, or competent authorities where disclosure is required by law or necessary to protect rights, safety, or security;
• A successor entity or transaction counterparty in connection with a merger, restructuring, investment, or transfer of business assets, subject to appropriate safeguards.

We expect service providers and processors to use personal data only for authorized purposes and to maintain appropriate security controls.

8. Cross-Border Processing and Storage

Personal data may be processed or stored in India or in other jurisdictions through cloud infrastructure, global vendors, affiliates, support systems, or service delivery arrangements. Where personal data is transferred across borders, we will take steps reasonably designed to ensure compliance with applicable law and contractual commitments.

9. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, for the duration of the account or business relationship, for legitimate recordkeeping, and for any further period required under applicable law, tax, audit, dispute resolution, fraud prevention, backup, or security obligations.

Retention periods may differ based on the type of data, the service used, the nature of the relationship, consent status, legal obligations, and operational requirements.

10. Security Measures

We use reasonable administrative, technical, physical, and organizational safeguards to protect personal data from unauthorized access, misuse, loss, destruction, disclosure, or alteration. These measures may include role-based access controls, credential management, logging, encryption where appropriate, network monitoring, vendor oversight, and incident response procedures.

No online platform can guarantee complete security. Users should also protect their credentials and devices.

11. Customer-Controlled and Partner-Controlled Data

Where a business customer, partner, reseller, or administrator uses our services to upload or process personal data of other individuals, that party generally remains responsible for determining the purpose of processing, issuing required notices, obtaining any required consent, and ensuring compliance with applicable privacy, surveillance, employment, or sector-specific laws.

In such cases, AI EYE may act as a processor, service provider, or vendor on behalf of that organization, subject to contractual arrangements.

12. Your Rights

Subject to applicable law and identity verification, you may have the right to:

• Request access to or a summary of personal data being processed about you;
• Request correction, completion, or updating of inaccurate or incomplete personal data;
• Request deletion of personal data where legally permitted;
• Withdraw consent where processing is based on consent;
• Object to certain processing or request restriction where applicable;
• Nominate another person to exercise your rights where applicable under law;
• Raise a grievance regarding the handling of your personal data;
• Approach the competent authority or board where available under law if your grievance is not resolved.

To exercise these rights, contact us using the details below. We may ask for information necessary to verify identity and process the request securely.

13. Children's Privacy

Our services are generally intended for business, professional, or adult users. We do not knowingly collect personal data from children for independent consumer use. If you believe a child has provided personal data to us without proper authorization, please contact us so we can take appropriate action.

14. Third-Party Websites and Services

Our website and services may include links to third-party websites, apps, payment services, plugins, or tools. We are not responsible for the content, privacy practices, or security of those third parties. You should review their policies before providing personal data.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business operations, services, technology, or compliance practices. The updated version will be published with a revised effective date.

16. Grievance and Contact Details

For privacy questions, consent withdrawal, rights requests, complaints, or grievance submissions, please contact:

Email: frog@froginno.com
Frog Innovations Limited
Address: C-23, Sector 80, Phase-2, Noida, Uttar Pradesh, India -201305