Privacy Policy

ARZAQ INSIGHTS is currently operated as an unregistered sole proprietorship.

ARZAQ INSIGHTS operates a collection of digital products and platforms under the ARZAQ INSIGHTS ecosystem. For purposes of this Privacy Policy, ARZAQ INSIGHTS primarily provides a centralized account, authentication, identity, and billing infrastructure for its ecosystem.

This Privacy Policy primarily governs information processed through ARZAQ INSIGHTS central services, including:

This Privacy Policy does not automatically govern all information processed inside individual products. Where an ARZAQ INSIGHTS product maintains and processes its own operational data, that product may provide a separate product-specific Privacy Policy.

ARZAQ INSIGHTS provides a centralized account system that allows a user to use one or more ARZAQ accounts across participating products.

A user may maintain and sign in to multiple ARZAQ accounts on the same device and switch between those accounts. Each ARZAQ account represents a separate identity.

The central ARZAQ system is responsible for determining and communicating:

• Who the authenticated user is;
• Which ARZAQ account is being used;
• Authentication status;
• Relevant identity information;
• Authentication and security information; and
• Information required by a participating product to determine the user's access.

Individual products determine their own product-specific roles, permissions, and authorization requirements. ARZAQ INSIGHTS does not use the central account system to determine or control the internal operational permissions of a product unless specifically required for the central authentication or identity service.

A fundamental principle of the ARZAQ ecosystem is separation between central account information and product-specific operational information.

ARZAQ INSIGHTS central services manage authentication, identity, and billing information. Individual products maintain their own operational data.

For example, a product may maintain information relating to its own users, customers, organizations, transactions, content, activities, or other operational functions within that product's systems. Such product-specific data is not automatically part of the ARZAQ central account database.

ARZAQ INSIGHTS does not have access to product-specific operational data through the central ARZAQ account system. Individual products are responsible for handling their own product-specific data in accordance with their applicable privacy policies and terms.

Depending on how you use ARZAQ INSIGHTS services, we may collect the following categories of information.

5.1 Account Information

When you create or manage an ARZAQ account, we may collect:

You should provide accurate information where required for the operation and security of your account.

ARZAQ INSIGHTS supports multiple authentication and account security methods, which may include:

• Email and password authentication
• Phone-based OTP authentication
• Two-factor authentication (2FA) & Authenticator applications
• Passkeys (FIDO2 / WebAuthn)
• Magic-link authentication
• Account recovery mechanisms

We process authentication-related information to authenticate your identity, protect your account, prevent unauthorized access, recover accounts, maintain secure sessions, detect suspicious activity, and maintain service integrity.

You may provide a recovery email address or other recovery information to help recover access to your ARZAQ account.

Recovery information may be used to verify account ownership, send account recovery communications, help prevent unauthorized account takeover, and restore access to your account. You are responsible for maintaining access to your recovery methods and keeping recovery information accurate.

ARZAQ INSIGHTS uses central identity information to allow participating products to recognize an authenticated ARZAQ user.

The central identity layer may communicate relevant information to a participating product so that the product can recognize the authenticated account and establish the appropriate product-specific access. A product may independently maintain additional information about your relationship with that product. ARZAQ INSIGHTS does not use central identity information to automatically obtain or access the product's internal operational database.

To operate and secure your account, ARZAQ INSIGHTS may maintain detailed account activity and security records, including login/logout events, successful and failed authentications, IP addresses, device & client info, session info, 2FA/Passkey events, magic-link events, account recovery events, and security setting updates.

These records may be used for security, troubleshooting, fraud prevention, auditing, account protection, and service operation.

When you access ARZAQ INSIGHTS services, we may collect technical information associated with your connection and device, including IP address, device type, browser/client, operating system, and security metadata.

We use this information primarily to identify unusual login behavior, protect accounts against unauthorized access, investigate incidents, and maintain service reliability.

ARZAQ INSIGHTS uses cookies and similar technologies for authentication, maintaining secure sessions, remembering settings, security, and service functionality.

Some cookies are essential for the operation and security of the central service. Disabling certain cookies may affect the functionality of ARZAQ INSIGHTS services.

ARZAQ INSIGHTS does not rely on third-party analytics platforms to collect analytics from individual products merely because those products participate in the ARZAQ account ecosystem. ARZAQ INSIGHTS operates analytics capabilities developed within its own ecosystem.

Where an analytics capability is used by an individual product, the applicable product-specific privacy documentation governs that processing.

ARZAQ INSIGHTS centrally manages billing and subscription services for products operated within the ARZAQ ecosystem. Invoices, billing records, subscription details, payment status, transaction information, and related financial records may be associated with ARZAQ INSIGHTS.

Billing information may include: Customer name, billing email, purchased product, subscription plan, amount, currency, transaction IDs, invoice data, renewal/cancellation status, and refund records.

ARZAQ INSIGHTS uses trusted payment providers to process transactions securely, currently including:

Payment providers process payment information according to their own privacy policies. ARZAQ INSIGHTS does not directly store complete credit/debit card numbers on its servers; sensitive payment credentials are handled directly by the payment provider.

Subscriptions for ARZAQ ecosystem services may be managed through the central ARZAQ account, enabling you to view status, manage plans, renew, cancel, review invoices, and track payment history.

ARZAQ INSIGHTS does not sell your personal information.

We may disclose information where necessary to operate our services, including with payment providers, cloud hosting providers, technical service providers, legal authorities where legally mandated, and professional advisers.

ARZAQ INSIGHTS uses Amazon Web Services (AWS) infrastructure. Central ARZAQ account and service information may be stored and processed using AWS infrastructure located in the Mumbai region, India.

ARZAQ INSIGHTS implements comprehensive technical and organizational safeguards:

Users are responsible for protecting their credentials, passkeys, authentication devices, and recovery email accounts.

Users can view, edit personal info, update recovery email, manage security methods, review login activity, and download available account logs directly from the central account dashboard.

Users may initiate permanent deletion of their ARZAQ account directly through the account management interface. Upon deletion, account information is permanently removed from active systems.

Although an account may be permanently deleted, certain records may be retained as legally required for financial accounting, tax obligations, dispute resolution, or fraud prevention in accordance with applicable laws.

Information is retained only for as long as necessary for its collection purpose. Account data is retained while active; financial and tax records are retained according to statutory requirements.

This Privacy Policy operates in accordance with applicable Indian laws and global privacy frameworks. If any provision is deemed unenforceable, the remaining provisions remain in effect.