PRIVACY POLICY

Effective date: June 2, 2026

This Privacy Policy explains how Systango Group collects, uses, shares, stores and protects personal data when individuals visit or interact with www.systango.com, contact us, submit enquiries, download resources, subscribe to updates, apply for roles, interact with our events, access our content, or otherwise engage with us through the website.

For this Privacy Policy, "Systango", "we", "us" and "our" refer to Systango Group, including Systango Technologies Limited, Systango Ltd, iSystango Ltd, Systango Inc, and their affiliates, subsidiaries, successors and permitted assigns.

This Privacy Policy applies to website visitors, prospective clients, clients, business contacts, vendors, partners, job applicants, newsletter subscribers, event participants, investors, and other individuals who interact with Systango through the website or related digital channels.

Our role

For personal data collected through this website and related website interactions, the relevant Systango Group entity that determines the purposes and means of processing acts as the controller, data fiduciary, or equivalent responsible entity under applicable data protection laws.

Where more than one Systango Group entity jointly determines the purposes and means of processing, such entities may act as joint controllers or equivalent responsible entities to the extent recognised under applicable law.

Where we process personal data on behalf of a client under a separate agreement, statement of work, data processing agreement or similar written arrangement, the relevant client may act as the controller, data fiduciary or equivalent responsible entity, and Systango may act as processor, data processor, service provider or equivalent entity. This Privacy Policy does not override any written client agreement.

Scope of this Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

  • Visits to www.systango.com;
  • Contact, consultation, demo, discovery, proposal, sales and business enquiry forms;
  • Emails sent to Systango addresses published on or linked through the website;
  • Newsletter, blog, whitepaper, event, webinar, resource and marketing interactions;
  • Careers, recruitment and resume submissions;
  • Partner, vendor, investor, marketplace and business development interactions;
  • Website analytics, cookies, pixels, tags and similar technologies;
  • Website security, fraud prevention, administration and legal compliance; and
  • Any other interaction where this Privacy Policy is referenced.

This Privacy Policy does not apply to third-party websites, platforms, marketplaces, social media pages, app stores, cloud marketplaces or external services linked from our website. Those third parties apply their own terms and privacy notices.

Personal data we collect

This may include your name, business email address, personal email address where voluntarily provided, phone number, job title, organisation name, country, city, LinkedIn profile, business address and other contact details.

This may include the details you provide about your project, product, technology requirements, business requirements, timelines, budget range, sector, use case, preferred contact method, meeting preferences, proposal requirements and related correspondence.

This may include your resume, CV, portfolio, work experience, education details, skills, certifications, compensation expectations, notice period, location, work authorisation status, references, interview notes, assessment results, communication records and any other information you voluntarily provide for recruitment purposes.

We do not require applicants to provide sensitive personal data unless necessary for a specific role, legally required, or expressly requested for a legitimate recruitment, employment, compliance or accommodation purpose.

This may include your communication preferences, subscription status, newsletter engagement, event participation, downloaded resources, campaign responses, meeting history, opt-out records and records of our communications with you.

This may include IP address, device identifiers, browser type, operating system, time zone, approximate location derived from IP address, referring URL, pages viewed, session duration, clicks, website navigation patterns, error logs, traffic data, cookies, pixels, tags, analytics identifiers and similar technical information.

This may include files, comments, documents, messages, pitch materials, business requirements, proposal requests, ideas, technical briefs or other content you submit through forms, email, recruitment pages, event pages or other website-linked channels.

Unless separately agreed in writing, you should not submit confidential information, regulated information, sensitive personal data, source code, trade secrets, client data, proprietary business information, personal data of third parties, or information you are not authorised to share.

We may receive or collect business contact information from publicly available sources, business directories, professional networks, referrals, marketplace platforms, event organisers, social media platforms, partner channels, analytics providers, advertising networks, recruitment platforms and other lawful third-party sources.

How we collect personal data

We collect personal data when you:

  • Visit, browse or interact with our website;
  • Fill a contact, consultation, discovery, careers, event, newsletter or resource form;
  • Email us at a Systango address published on or linked through the website;
  • Apply for a role or submit your resume;
  • Subscribe to updates, newsletters, resources or event communications;
  • Interact with our campaigns, case studies, blogs, whitepapers, marketplace listings or social media pages;
  • Schedule a call, meeting or consultation;
  • Communicate with our sales, recruitment, delivery, legal, marketing or leadership teams;
  • Provide information through a third-party marketplace, partner, referral, recruitment or business platform; or
  • Allow cookies, analytics, tags or similar technologies through our website.
Purposes for which we use personal data

We use personal data to respond to enquiries, understand requirements, arrange meetings, provide information, prepare proposals, manage sales discussions, evaluate partnership opportunities and maintain business records.

We use personal data to operate, maintain, secure, test, improve and troubleshoot the website, website forms, content, resources and digital user experience.

We use technical and usage data to understand website traffic, audience engagement, page performance, content effectiveness, campaign performance and demand for our services. Where possible, we use aggregated, de-identified or statistical data.

We may use personal data to send newsletters, service updates, event invitations, thought leadership, whitepapers, case studies, commercial updates and other B2B communications where permitted by applicable law. You may opt out of marketing communications at any time.

We use candidate data to assess applications, communicate with applicants, schedule interviews, conduct assessments, evaluate suitability, verify information where appropriate, maintain recruitment records, consider applicants for future roles where permitted, and comply with employment, immigration, legal and regulatory obligations.

We may use personal data to manage event registration, attendance, reminders, follow-ups, feedback, resource downloads and related communications.

We use personal data to protect our website, systems, users, business, assets and rights, including by detecting abuse, unauthorised access, spam, malicious activity, denial-of-service attacks, scraping, fraud, security incidents and other unlawful or harmful activity.

We use personal data to comply with applicable laws, respond to lawful requests, maintain records, enforce our rights, defend claims, conduct audits, manage corporate transactions, support governance and comply with regulatory, tax, accounting and legal obligations.

We may use personal data for internal administration, reporting, corporate governance, quality control, risk management, finance, audit, investor relations, service development and business continuity.

Legal bases and lawful grounds

Depending on the applicable law and the context of processing, we may process personal data on one or more of the following grounds:

  • Your consent;
  • Performance of a contract or steps taken before entering into a contract;
  • Compliance with legal obligations;
  • Our legitimate interests or the legitimate interests of a third party, where such interests are not overridden by your rights;
  • Legitimate uses recognised under applicable law, including where you voluntarily provide personal data for a specified purpose and have not indicated that you do not consent to its use for that purpose;
  • Establishment, exercise or defence of legal claims; and
  • Any other lawful basis available under applicable data protection law.

Where consent is required, you may withdraw consent at any time by contacting us at cs@systango.com or by using the relevant unsubscribe or preference mechanism. Withdrawal of consent will not affect processing already carried out lawfully before withdrawal. We may continue to process information where another lawful basis applies.

Cookies and similar technologies

We use cookies, pixels, tags, scripts, local storage and similar technologies to operate the website, remember preferences, understand usage, improve performance, measure campaigns, support security and provide relevant content.

Some cookies are necessary for the website to function. Other cookies, such as analytics, advertising, personalisation or third-party cookies, may require consent depending on your location and applicable law.

Please read our Cookie Policy for more details about how we use cookies and how you can manage your choices.

Marketing choices

We may send B2B marketing communications where permitted by law, including where you have requested information, downloaded resources, attended an event, submitted an enquiry, subscribed to updates, interacted with our business channels, or where we otherwise have a lawful basis to contact you.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails, replying with an opt-out request, or contacting cs@systango.com.

Even if you opt out of marketing, we may still send non-marketing communications, including responses to enquiries, service messages, legal notices, security updates, transactional communications, recruitment communications, or communications necessary for an existing relationship.

Recruitment and candidate privacy

If you apply for a role or submit your resume through the website, email or any linked channel, we may process your data to assess your suitability for current and future roles within Systango Group.

Candidate data may be shared internally with recruitment, HR, hiring managers, interviewers, leadership, legal, finance, administration and relevant business teams. It may also be shared with service providers supporting recruitment, assessments, background verification, communication, recordkeeping or compliance.

By submitting your resume or application, you confirm that the information provided is accurate and that you are authorised to share it. If you provide information about referees or other third parties, you confirm that you have informed them and obtained any required permission.

We may retain candidate data for the duration of the recruitment process and for a reasonable period thereafter for recordkeeping, future opportunities, legal compliance, dispute management and talent pipeline purposes, unless you ask us to delete it and we are not required or permitted to retain it.

AI, automation and analytics

We may use analytics and automated tools to support website operations, enquiry management, recruitment administration, marketing operations, security monitoring and internal business processes.

We do not use website visitor data to make decisions that produce legal or similarly significant effects about individuals without an appropriate legal basis, safeguards and human review where required by law.

Where we use aggregated or de-identified information for business insights, service improvement or website improvement, we take reasonable steps to ensure that such information does not directly identify an individual.

When we share personal data

We may share personal data with the following categories of recipients where necessary or appropriate:

  • Systango Group companies, affiliates, subsidiaries and offices in India, the United Kingdom, the United States and other jurisdictions where we operate or may operate;
  • Employees, contractors, consultants and authorised personnel who need access for business, recruitment, support, legal, security, marketing or operational purposes;
  • Service providers who support website operations, hosting, IT, security, analytics, communications, marketing, recruitment, document management and business administration;
  • Professional advisers, auditors, insurers, bankers, legal counsel, tax advisers and consultants;
  • Event partners, marketplace platforms, referral partners, business partners and channel partners, where relevant to your interaction;
  • Law enforcement, courts, regulators, government authorities or other third parties where required or permitted by law;
  • Prospective investors, acquirers, purchasers, lenders, advisers and counterparties in connection with any merger, acquisition, restructuring, financing, sale of assets, investment, due diligence or similar corporate transaction; and
  • Any other party with your consent or as otherwise permitted by applicable law.

We do not sell personal data for money. We may use analytics, cookies and marketing technologies as described in this Privacy Policy and our Cookie Policy, subject to applicable law and available user choices.

International transfers

Systango is an international group. Your personal data may be accessed, stored, transferred or processed in India, the United Kingdom, the United States, the European Union, and other countries where we, our group companies, personnel, service providers, partners or clients operate.

Where applicable law requires transfer safeguards, we will use appropriate mechanisms such as contractual safeguards, standard contractual clauses, UK international data transfer mechanisms, adequacy decisions, intra-group arrangements, consent, necessity-based transfer grounds, or other legally recognised safeguards.

You understand that data protection laws may differ between jurisdictions. We take reasonable steps to protect personal data in accordance with this Privacy Policy and applicable law.

Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may vary depending on the type of data, purpose of processing, nature of relationship, legal requirements, limitation periods, dispute risk, audit requirements, tax or accounting obligations, security needs and operational requirements.

In general:

  • Business enquiry and CRM data may be retained for the duration of the business relationship and a reasonable period thereafter;
  • Marketing data may be retained until you opt out, subject to maintaining suppression records to respect your preferences;
  • Candidate data may be retained for the recruitment process and a reasonable period thereafter for future opportunities, compliance and dispute management;
  • Website logs and analytics data may be retained for operational, security, analytics and legal purposes for a reasonable period; and
  • Legal, contract, audit, tax and compliance records may be retained for the periods required or permitted by applicable law.

When personal data is no longer required, we may delete, anonymise, aggregate, archive or securely retain it where legally permitted.

Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse and destruction.

No website, system, transmission or storage method is completely secure. You are responsible for ensuring that any information you send to us is sent through appropriate channels and does not include unnecessary confidential, sensitive or third-party information.

Data breach and incident response

If we become aware of a personal data breach or security incident involving personal data, we will assess it and take steps required under applicable law. Where legally required, we will notify affected individuals, regulators, clients, authorities or other relevant parties.

We may withhold details where disclosure would create security risk, prejudice investigation, breach law, compromise systems, expose third-party data, or otherwise be inappropriate under applicable law.

Your rights

Depending on your location and applicable law, you may have rights regarding your personal data. These may include the right to:

  • Access personal data we hold about you;
  • Obtain information about processing;
  • Correct inaccurate or incomplete data;
  • Request deletion or erasure;
  • Withdraw consent where processing is based on consent;
  • Object to or restrict certain processing;
  • Request data portability where applicable;
  • Opt out of marketing communications;
  • Nominate another individual to exercise rights where recognised by applicable law;
  • Lodge a grievance or complaint with us; and
  • Complain to a competent data protection authority.

To exercise rights, contact us at cs@systango.com. We may need to verify your identity before processing a request.

We may refuse, restrict, delay or charge for requests where permitted by law, including where requests are manifestly unfounded, excessive, repetitive, fraudulent, legally restricted, technically infeasible, conflict with legal obligations, affect the rights of others, relate to privileged information, or concern data we must retain.

Children

Our website and services are intended for business users and are not directed at children. We do not knowingly collect personal data from children through the website.

If you believe a child has provided personal data to us through the website without appropriate consent or legal basis, please contact cs@systango.com.

Third-party links and platforms

Our website may link to or integrate with third-party websites and platforms, including cloud marketplaces, social media platforms, event platforms, recruitment platforms, analytics providers, video platforms, partner websites and external resources.

We are not responsible for the privacy practices, content, security, availability or legal compliance of third-party websites or platforms. You should review their terms and privacy notices before interacting with them.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, website features, business operations, data practices, group structure or regulatory expectations.

The updated version will be posted on this page with a revised "Last updated" date. Where required by law, we may provide additional notice or seek consent.

Contact us

For privacy questions, rights requests, withdrawals of consent, marketing opt-outs, complaints or grievances, contact:

Systango Group

Email: cs@systango.com

Website: www.systango.com

This email address may also be used to contact the person authorised to respond to privacy-related questions and grievances on behalf of Systango.