Privacy Policy

1. Introduction

This Privacy Policy explains how Shri Sai Technology (“SST”, “we”, “our”, or “us”) collects, uses, shares, and protects information when you use our website at https://sstus.net (the “Website”) and our digital marketing services, including SEO automation, content management, and social media distribution on behalf of our clients (the “Services”).

We are committed to protecting your privacy and handling your data transparently and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and other relevant privacy regulations.

By using our Website or Services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

Shri Sai Technology is a digital marketing agency providing search engine optimization (SEO), content automation, and multi-channel distribution services to client organizations. We act as a data processor for our clients and as a data controller for our own business operations.

Data Controller Contact:

• Company: Shri Sai Technology
• Website: https://sstus.net
• Email: sstsupport@sstglobal.net
• Postal address: C-29/39 Naganath Laghu Udyog Sahakari Sanstha, Akkalkot Rd, near Yellaling Math, MIDC, Solapur, Maharashtra 413006.

3. Information We Collect

3.1 Information you provide directly

When you contact us, sign up for our Services, or otherwise interact with SST, we may collect:

• Name and contact details (email address, phone number, business address)
• Company name and role
• Billing and payment information (processed via third-party payment providers)
• Communications you send to us
• Information you provide when responding to surveys or marketing

3.2 Information we collect automatically when you visit our Website

When you visit https://sstus.net, we and our third-party analytics providers may automatically collect:

• IP address and approximate geographic location
• Browser type and version, operating system, device type
• Pages viewed, time spent on pages, referring URLs
• Date and time of visits
• Cookies and similar technologies (see Section 8)

3.3 Information we process on behalf of our clients

When delivering Services to our clients, we process the following on their behalf:

• Content authored by or for our clients (articles, social media posts, captions, images, videos)
• Client business information needed to publish content (brand names, target audiences, taxonomy)
• Performance metrics related to published content (impressions, clicks, engagement)
• API credentials and access tokens granted by clients to enable publishing to their owned channels (such as LinkedIn Company Pages, Facebook Pages, Instagram Business accounts, Tumblr blogs, and similar)

We do not access our clients' end users' personal data through these integrations except to the limited extent necessary to deliver Services (for example, retrieving public engagement counts on a client's social media post).

3.4 Information from third-party platforms

When clients connect their social media or content platforms to our Services, we receive limited information from those platforms necessary to publish content, including but not limited to:

• Page or channel identifiers
• Public profile information of the connected accounts
• Authentication tokens (stored securely)
• Post identifiers and public engagement metrics

4. How We Use Information

We use the information we collect for the following purposes:

4.1 To deliver our Services

• Publish, schedule, and distribute content on behalf of our clients
• Authenticate with third-party platforms and maintain integrations
• Generate performance reports and analytics for our clients
• Provide customer support and respond to inquiries

4.2 To operate our business

• Process payments and manage billing
• Communicate about Services, account changes, and updates
• Improve our Services and develop new features
• Conduct internal analytics and research

4.3 To comply with legal obligations

• Respond to lawful requests from public authorities
• Enforce our agreements and protect our legal rights
• Detect, prevent, and address fraud, security, or technical issues

4.4 With your consent

For purposes you have specifically consented to, such as receiving marketing communications.

5. Legal Bases for Processing (UK GDPR / EU GDPR)

Where UK GDPR or EU GDPR applies, our legal bases for processing personal data include:

• Performance of a contract: processing necessary to deliver Services to our clients
• Legitimate interests: improving our Services, securing our systems, and growing our business in ways that do not override your rights
• Legal obligation: compliance with applicable laws
• Consent: for activities where you have given specific, informed consent (such as marketing emails)

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

6. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

6.1 With our clients

When we publish content on behalf of a client, the content and associated metadata are visible to that client through their own administrative interfaces and to the public on platforms where it is published.

6.2 With third-party service providers

We use trusted third-party services to deliver our Services, including but not limited to:

• Social media platforms (LinkedIn, Meta Platforms for Facebook and Instagram, Tumblr, and others) for publishing content
• Cloud infrastructure (hosting providers, content delivery networks)
• Media hosting (Cloudinary or equivalent) for storing media assets used in published content
• Analytics (Matomo, Google Search Console) to measure performance
• Payment processors to handle billing
• Email service providers for transactional and operational communications

Each third-party provider is bound by its own privacy practices and applicable data processing agreements. We encourage you to review the privacy policies of these providers.

6.3 For legal reasons

We may disclose information to comply with valid legal process, protect our rights and the rights of others, prevent fraud, or respond to emergencies.

6.4 Business transfers

If SST is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

7. International Data Transfers

SST is based in [insert SST country of registration]. The information we collect may be transferred to, stored, and processed in countries other than your own, including countries where data protection laws may differ from those in your jurisdiction.

When we transfer personal data outside the United Kingdom or European Economic Area, we rely on appropriate safeguards, such as:

• Standard Contractual Clauses approved by the relevant authorities
• Adequacy decisions issued by the UK or European Commission
• Other lawful transfer mechanisms

8. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to:

• Remember your preferences
• Analyze how visitors use our Website
• Improve performance and user experience

You can control cookies through your browser settings. Disabling cookies may limit some functionality of the Website.

We do not currently use cookies for advertising purposes. If this changes, we will update this Policy and obtain consent where required by law.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

• Client account data: retained for the duration of the client relationship and up to 7 years after termination for legal and accounting purposes
• Published content metadata: retained indefinitely as part of historical performance records, unless the client requests deletion
• Website visitor analytics: retained for up to 13 months
• Marketing communications: retained until you unsubscribe or for 3 years of inactivity, whichever is sooner

When personal data is no longer needed, we will securely delete or anonymize it.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate or incomplete data
• Erasure: ask us to delete your personal data (subject to legal exceptions)
• Restriction: ask us to limit how we process your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on our legitimate interests
• Withdraw consent: where processing is based on consent
• Lodge a complaint:with your local data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk)

To exercise your rights, contact us at sstsupport@sstglobal.net. We will respond within one month of receiving your request, as required by applicable law.

11. Children's Privacy

Our Services are not directed to children under the age of 13 (or 16 in the EU and UK). We do not knowingly collect personal data from children.

Some of our clients operate in education-related industries, including tutoring services. When we process content for these clients, our integrations interact with the clients' platforms and not directly with the children the content is intended to serve. Parental consent and any direct collection of children's data is the responsibility of our clients on their own platforms.

If you believe we have inadvertently collected personal data from a child, please contact us at sstsupport@sstglobal.net and we will delete it promptly.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit using TLS
• Encrypted storage of authentication tokens and credentials
• Access controls limiting data access to authorized personnel
• Regular security reviews and patching
• Incident response procedures

No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.

13. Third-Party Links

Our Website and content distributed through our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this Policy
• Notify clients and registered users via email where the changes affect them materially
• Where required by law, obtain renewed consent

We encourage you to review this Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

• Shri Sai Technology
• Email: sstsupport@sstglobal.net
• Postal address: C-29/39 Naganath Laghu Udyog Sahakari Sanstha, Akkalkot Rd, near Yellaling Math, MIDC, Solapur, Maharashtra 413006.

If you are located in the UK or EU, you also have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at https://ico.org.uk.