Privacy Policy | Operlity

Last Updated: May 2026

1. Introduction

Operlity Technologies Private Limited ("Operlity", "we", "our", or "us") is committed to protecting the privacy and security of personal data collected from visitors to our website, users of our platform, and partners we work with.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have in relation to your personal data — wherever you are located in the world.

This policy applies to:

Website visitors — individuals who visit operlity.com and its associated pages.
Platform users — individuals who access and use the Operlity GRC platform.
Partners — resellers, distributors, managed service providers, system integrators, and other organizations that participate in the Operlity Partner Program.

By using our website or platform, or by entering into a partner relationship with us, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Operlity Technologies Private Limited
Bangalore, Karnataka, India

Operlity is the data controller for personal data collected through our website and in connection with our partner program. For personal data processed through our GRC platform on behalf of our customers, Operlity acts as a data processor — processing personal data in accordance with our customers' instructions and the terms of our Data Processing Agreement.

For privacy-related enquiries, please contact us at privacy@operlity.com.

3. Personal Data We Collect

3.1 Website visitors

When you visit operlity.com, we may collect:

Usage data — pages visited, time spent, referring URLs, browser type, device type, and IP address.
Contact form data — name, work email, company name, job title, country, phone number, and message content when you submit a contact or demo request form.
Cookie data — information collected through cookies and similar tracking technologies as described in our Cookie Policy.

3.2 Platform users

When you use the Operlity GRC platform, we may collect:

Account data — name, work email address, job title, and organizational affiliation.
Profile data — user preferences, platform settings, and role assignments.
Usage data — features accessed, actions taken, session duration, and platform activity logs.
Communication data — support requests, feedback submissions, and in-platform communications.

3.3 Partners

When you participate in the Operlity Partner Program, we may collect:

Business contact data — names, work email addresses, job titles, and phone numbers of partner organization representatives.
Business data — company name, address, registration details, and partner tier information.
Commercial data — deal registration information, pipeline data, and partnership performance metrics.
Portal activity data — access logs and activity within the Operlity Partner Portal.

3.4 Customer data processed on behalf of platform customers

When Operlity processes personal data through its GRC platform on behalf of its customers, Operlity acts as a data processor. The customer is the data controller for such data and is responsible for ensuring the lawful basis for processing. Operlity processes such data only in accordance with the customer's instructions and the terms of the applicable Data Processing Agreement.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

Purpose	Legal basis
To respond to contact and demo requests	Legitimate interests / Consent
To provide and operate the Operlity platform	Contract performance
To manage partner relationships and the partner program	Contract performance
To send product updates, news, and marketing communications	Legitimate interests / Consent
To improve our website, platform, and services	Legitimate interests
To ensure the security of our platform and prevent fraud	Legitimate interests / Legal obligation
To comply with legal and regulatory obligations	Legal obligation
To enforce our Terms of Use and other agreements	Legitimate interests / Contract performance

We do not sell your personal data to third parties. We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyze website traffic, and support our marketing activities.

We use the following categories of cookies:

Strictly necessary cookies — essential for the website to function; cannot be disabled.
Analytics cookies — help us understand how visitors interact with our website.
Marketing cookies — used to deliver relevant advertising and track campaign effectiveness.

You can manage your cookie preferences through our cookie consent banner when you first visit our website, or by adjusting your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

6. Who We Share Your Personal Data With

We may share your personal data with the following categories of recipients:

Service providers

We engage trusted third party service providers to support our operations — including cloud infrastructure providers, email communications platforms, CRM systems, and analytics tools. These providers process personal data on our behalf under contractual data processing agreements and are not permitted to use your data for their own purposes.

Partner organizations

Where you have expressed interest in working with an Operlity channel partner, we may share your contact details with the relevant partner organization for the purpose of following up on your enquiry. We will always inform you before sharing your data with a partner.

Legal and regulatory authorities

We may disclose personal data to law enforcement agencies, regulatory authorities, or other third parties where required by applicable law, court order, or regulatory obligation.

Business transfers

In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the relevant successor organization. We will notify affected individuals of any such transfer in accordance with applicable data protection law.

We do not sell, rent, or trade your personal data with third parties for their own marketing purposes.

7. International Data Transfers

Operlity is headquartered in India and operates globally. Personal data collected through our website, platform, and partner program may be transferred to and processed in countries outside your country of residence — including India, the United Arab Emirates, Saudi Arabia, the United States, and other countries where our service providers operate.

Where we transfer personal data internationally, we implement appropriate safeguards to ensure that your personal data receives an adequate level of protection — including standard contractual clauses, adequacy decisions, and other transfer mechanisms recognized under applicable data protection law.

8. Your Rights

Depending on your location and the applicable data protection law, you may have the following rights in relation to your personal data:

8.1 Rights under GDPR (EU residents)

Right of access — obtain a copy of your personal data.
Right to rectification — correct inaccurate or incomplete personal data.
Right to erasure — request deletion of your personal data.
Right to restriction of processing — limit how we process your personal data.
Right to data portability — receive your personal data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent — where processing is based on consent, withdraw it at any time.

8.2 Rights under DPDPA (Indian residents)

Right to access — obtain information about personal data processed and the processing activities.
Right to correction — correct inaccurate or incomplete personal data.
Right to erasure — request deletion of personal data no longer necessary for the purpose it was collected.
Right to grievance redressal — raise a grievance with Operlity regarding the processing of your personal data.
Right to nominate — nominate another individual to exercise your rights in the event of death or incapacity.

8.3 Rights under UAE PDPL (UAE residents)

Right to access — obtain information about personal data held and how it is processed.
Right to correction — correct inaccurate or incomplete personal data.
Right to erasure — request deletion of personal data where no longer necessary.
Right to object — object to processing of your personal data in certain circumstances.

8.4 Rights under Saudi PDPL (Saudi residents)

Right to access — obtain information about personal data held and the purposes of processing.
Right to correction — correct inaccurate or incomplete personal data.
Right to erasure — request deletion of personal data where processing is no longer necessary.
Right to object — object to processing of your personal data in certain circumstances.

8.5 Rights under CCPA / CPRA (California residents)

Right to know — request disclosure of personal information collected, used, shared, or sold.
Right to deletion — request deletion of personal information collected from you.
Right to correction — request correction of inaccurate personal information.
Right to opt-out — opt out of the sale or sharing of your personal information.
Right to limit use of sensitive personal information — limit the use of sensitive personal information to necessary purposes.
Right to non-discrimination — exercise your privacy rights without discriminatory treatment.

To exercise any of your rights, please contact us at privacy@operlity.com. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

9. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected — including providing our services, maintaining our partner relationships, complying with legal obligations, resolving disputes, and enforcing our agreements.

Specific retention periods vary depending on the category of data and the purpose of processing:

Website visitor data — retained for up to 12 months from collection.
Contact and demo request data — retained for up to 24 months from last interaction.
Platform user data — retained for the duration of the customer relationship plus a reasonable period thereafter as required by law.
Partner data — retained for the duration of the partner relationship plus a reasonable period thereafter as required by law.

When personal data is no longer required, we delete or anonymize it in a secure manner.

10. Data Security

Operlity implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction — including encryption in transit and at rest, role-based access controls, regular security assessments, and employee security training.

While we take the security of your personal data seriously, no transmission over the internet or electronic storage system is completely secure. If you believe your personal data has been compromised, please contact us immediately at privacy@operlity.com.

11. Children's Privacy

Our website and platform are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us at privacy@operlity.com and we will take steps to delete it promptly.

12. Links to Third Party Websites

Our website may contain links to third party websites. This Privacy Policy applies only to operlity.com and the Operlity platform. We are not responsible for the privacy practices of third party websites and encourage you to review their privacy policies before providing any personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our services. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us at:

Operlity Technologies Private Limited
Bangalore, Karnataka, India
privacy@operlity.com