Privacy Notice

IntelixPulse is an infrastructure and device monitoring service run by Aptivix Technologies, India(“we”). This notice explains what personal data we handle when you use the IntelixPulse website, mobile apps and monitoring agents, why, for how long, who else handles it, and the rights you have under the Digital Personal Data Protection Act, 2023. Version 2026-10-23.

Two roles

• Your account. For the people who sign in to IntelixPulse we decide why and how their data is used: we are the Data Fiduciary.
• What agents collect on your company’s devices. When a company installs our agents on its servers, PCs and laptops, the agents report data that can relate to that company’s staff (see below). For that data the company is the Data Fiduciary and we are its Data Processor: we handle it only to provide the service the company asked for. Staff of a customer company should take questions about it to their employer first; we help the company answer.

What we collect

• Account details: your name, username, email address, mobile number, your company’s name and your role. With Google or Apple sign-in we receive your name, email address (with Apple this may be a private relay address) and an account identifier; never your Google or Apple password.
• Billing details (company administrators who pay online): billing name, email, address, state and GSTIN. Card, UPI and bank details go to Razorpay and never reach us.
• Usage and security records: sign-in times, changes you make (with the IP address they came from), and technical logs kept to keep the service secure.
• From monitoring agents on your company’s devices: device names, IP and MAC addresses, hardware and health readings, installed software, running processes and the account each runs under, and who is signed in to the device and how long it has been idle. A company can switch off collecting who is signed in. Inventory records can name the person a device or licence is assigned to.
• What you monitor: the servers, websites, addresses and ports you add and the results of checks against them.
• On your phone: nothing beyond what you enter. The app does not use your location, camera, microphone, contacts or photos; the Android network tools run on the phone and their results are not sent to us.

We do not sell personal data, show advertising, or let anyone use your data to train AI models.

Why we use it

• To provide the service you or your company signed up for: run checks, show results, run the actions your administrators allow, and send the alerts you chose by email, WhatsApp, Slack or Teams.
• To secure accounts: verify email addresses and mobile numbers with one-time codes, two-step sign-in, and password resets.
• To bill: take payment for paid plans and issue GST invoices.
• AI diagnosis (only where a company’s administrators switch it on): a device’s recent readings and events are sent to an AI model to explain a problem and suggest a fix.
• To tell you about your account: welcome and set-up emails and plan-limit warnings. You can turn off the welcome and set-up emails in your profile.

We rely on your consent, which you give when you create an account or accept this notice, and, for staff of a customer company, on that company’s instructions as their employer. You can withdraw consent at any time (see below); that does not affect what was done before.

Who else handles it

We use these providers only to run IntelixPulse, under contract:

• Amazon Web Services: hosting and database, in Mumbai, India; Amazon CloudFront delivers the website.
• Meta (WhatsApp Business Platform): verification codes and the WhatsApp alerts you choose.
• Microsoft 365: sending email.
• Razorpay: online payments.
• Anthropic (United States): AI diagnosis, only where your company switched it on. Anthropic does not train its models on this data.
• Google and Apple: only if you sign in with them. Slack, Microsoft Teams or a webhook: only if your company sends alerts there.
• Expo: delivers mobile app updates; it does not receive your data.

Data sent to Anthropic, and to Meta, Microsoft, Google or Apple, may be processed outside India, as the Act allows. We disclose data to authorities only where the law requires it.

Who in your company sees it

IntelixPulse is organised by company. People in your company see your name, contact details and the company’s monitoring data according to their role. Other companies never see it. Aptivix Technologies staff see it only to operate and support the service.

How long we keep it

• Your account: while it is active. When you delete it, your name, email, mobile number and sign-in links are removed at once. When a company closes its account, its data is erased within 30 days.
• The activity log of changes (with IP addresses): one year, as the law asks, then deleted.
• One-time codes, unfinished sign-ups and trusted-device records: 30 days after they expire.
• Device readings: detailed metrics for 8 to 31 days, hardware events for a year, daily hardware health summaries for 3 years; who is signed in to a device is replaced at every report.
• GST invoices: 8 years, as tax law requires.
• Backups: 30 days.

Your rights and choices

• See your data: download a copy from your profile (Privacy), or ask us.
• Correct it: change your name, email and mobile number in your profile, or ask us.
• Withdraw consent: turn off WhatsApp alerts or welcome and set-up emails in your profile; delete your account to withdraw it altogether (how).
• Erasure: delete your account, or ask us to erase specific data.
• Nominate someone to exercise these rights for you if you die or cannot act: in your profile.
• Grievances: raise one with us and we will answer within 30 days.

Use the privacy request form, or write to our Grievance Officer at info@aptivix.in. We may need to confirm who you are before acting. If you are not satisfied with our answer you may complain to the Data Protection Board of India.

Security

Traffic is encrypted in transit (HTTPS). Passwords and one-time codes are stored only as salted hashes; licence keys and other secrets you store are encrypted. Administrators can require two-step sign-in. Access to production systems is limited to the staff who run them, and backups are kept on a separate server. If a breach affects your data we will tell you and the Data Protection Board as the law requires.

Children

IntelixPulse is a business service for people aged 18 or over. We do not knowingly handle children’s data.

Changes

When we change this notice we update its version and date. If the change matters, you are asked to read and accept the new notice the next time you sign in.