DPDP Act 2023 • GDPR • CCPA Compliant

Privacy Policy

Last verified & updated: August 2026 • Version 1.0

•Verified

1. Legislative Compliance Framework

Johnson Softwares ("we", "us") is committed to transparent and lawful data processing in full accordance with the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (EU) 2016/679 ("GDPR"), and the California Consumer Privacy Act ("CCPA").

2. Information Collection & Purpose Specification

We process personal information solely for specific, legitimate business purposes:

Account & Onboarding Data: Name, company, work email, phone number, and billing credentials to provision dedicated single-tenant CRM workspaces.
Meta WhatsApp Ingestion: Inbound customer inquiries, chat history, and phone numbers processed under documented instructions from the tenant.
Audit & Security Logs: IP addresses, browser user-agents, and timestamped cryptographic click-wrap consent tokens stored for compliance evidence.

3. Data Principal Rights (Under DPDP Act 2023 & GDPR)

As a data principal, you hold statutory rights including:

Right to Access & Summary: Request details of what personal data is processed and shared.
Right to Correction & Erasure: Demand correction of inaccurate information or deletion upon project termination.
Right of Grievance Redressal: Lodge inquiries with our designated Grievance Officer.

4. Database Encryption & Zero Cross-Tenant Sharing

All client CRM data is stored in isolated, single-tenant database instances with AES-256 encryption at rest and TLS 1.3 encryption in transit. We never sell, rent, or cross-monetize customer data or CRM lead records with any third party.

5. Statutory Grievance Officer (India DPDP Act 2023)

Grievance Redressal Officer: Compliance & Legal Cell
Address: MG Road, Brigade Tech District, Bengaluru, Karnataka, India - 560001
Email: [email protected]
Response SLA: Inquiries acknowledged within 24 hours, resolved within 15 business days.