Privacy Policy

This Privacy Policy explains how Ekpyros Private Limited ("Ekpyros", "we", "us") collects, uses and protects personal data when you visit ekpyros.com, use the Darwin application, hold an Ekpyros account, or use Trace (together, the "Services"). We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules made under it.

1. Data we collect

• Website. Our hosting provider logs requests (IP address, browser and page) for security and operation. The website uses no cookies, analytics or advertising.
• Darwin. Darwin runs on your device. We do not receive your files, terminal sessions or conversations, and Darwin sends no analytics.
• Ekpyros accounts. If you create an account: your email address, name and profile picture from the sign-in provider you choose; workspace membership, role, plan and credit usage; and sign-in records.
• Trace. For users: name, work email, organisation, role, sign-in and authentication settings, and an audit record of actions taken in Trace.
• Correspondence. Messages you send us and our replies.

2. How we use it

To provide and secure the Services, manage accounts and billing, respond to requests, and meet legal obligations. We do not sell personal data or use it for advertising.

3. Customer data in Trace

Documents and data that an organisation uploads to Trace are processed on that organisation's behalf, under our agreement with it. Requests about such data should be made to the organisation.

4. Third-party agents

Coding agents you run in Darwin (such as Claude Code or Codex) communicate directly with their providers under those providers' terms and privacy policies. Ekpyros does not receive that data.

5. Sharing

We share personal data only with service providers acting for us under contract (hosting, email delivery, payments), with the sign-in provider you choose, where required by law, or with a successor in a business transfer bound by this policy.

6. Storage and transfers

Trace data is stored and processed in India. Account data is stored in region to add. Where a service provider processes data outside India, we do so as permitted by law and under contract.

7. Retention

We keep personal data only as long as needed for the purposes above. Account data is deleted within 30 days of account closure, except where retention is required by law.

8. Security

We protect personal data with appropriate technical and organisational measures. See Security.

9. Your rights

You may request access to, correction, completion, updating or erasure of your personal data, withdraw consent, and nominate another person to exercise your rights. Write to privacy@ekpyros.com. If we do not resolve your concern, you may contact our Grievance Officer and then the Data Protection Board of India.

10. Children

The Services are not directed at anyone under 18, and we do not knowingly collect their personal data.

11. Grievance Officer

name to add, Ekpyros Private Limited, registered office to add. Email: privacy@ekpyros.com.

12. Changes

We may update this policy. Material changes will be notified to account holders before they take effect.