Privacy Policy

Who is responsible

iTeamX is run by its operator, who is the “Data Fiduciary” for your data on this service under the Digital Personal Data Protection Act, 2023. You can reach us at https://iteamx.com. Our grievance officer for personal data is https://iteamx.com.

When a school or business uses iTeamX for its own students, parents or clients, it is the Data Fiduciary for them and decides what it does with their details; we process them on its behalf.

What we collect

• Account details: name, email, password (stored only as a one-way hash), time zone, language, and your two-step login settings if you turn it on.
• Booking details that guests give: name, email, time zone, notes and answers to the host’s questions.
• Meetings: times, titles and the room link. Audio and video pass through our server live and are not stored unless the host presses Record.
• Recordings, made only when a host presses Record. Everyone in the meeting sees a “Recording” sign while it runs.
• Meeting chat, poll answers and the whiteboard, saved so the host can see them afterwards.
• Calendar links you connect, and your calendar’s busy times (not event titles or details).
• Technical data needed to run the service safely: IP address, browser type and sign-in times. We use them to stop abuse and keep the service working.

Why we use it

• To provide the service you asked for: booking pages, meetings, emails, reminders and recordings. This is needed to perform our agreement with you.
• To keep accounts and meetings secure, and to prevent fraud and abuse.
• To meet legal obligations.
• We do not sell personal data, show advertising, or use tracking or analytics cookies.

Cookies

We use only the cookies needed to work: one that keeps you signed in, and one that remembers your language. No advertising or tracking cookies.

Where your data is kept

Everything is stored on our own server. We do not use outside cloud storage, analytics or advertising services. Emails are sent through our mail provider, and browser notifications go through your browser maker’s push service (for example Google, Apple, Mozilla or Microsoft) in encrypted form.

Only if you choose to: when you give a mobile number for reminders, the message goes through WhatsApp (Meta); when a host connects a Google or Microsoft calendar, we read their busy times from it and add their meetings to it. Online payments go through Razorpay, which handles card, UPI and bank details; we never see them. AI meeting notes are made on our own server; recordings are not sent to any outside AI service.

We transfer personal data outside India only where the law allows.

How long we keep it

• Recordings: deleted automatically after 30 days, or sooner when the host deletes them.
• Meeting chat, polls and whiteboards: deleted after 90 days.
• Bookings and meetings: kept while the account exists, so hosts can see their history.
• Accounts: until you delete your account. Database backups are kept for up to 14 days.

Your rights

Under the DPDP Act you can ask for a summary of the data we hold about you, have it corrected, completed or erased, withdraw your consent at any time, and nominate someone to act for you. Signed-in users can change their details and delete their account themselves in Account settings. Guests can cancel a booking from the link in their email. For anything else, write to our grievance officer, https://iteamx.com; we will reply within 30 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Security

Connections are encrypted (HTTPS). Passwords are stored as one-way hashes. Two-step login is available. Access to the server is restricted, and workspaces cannot see each other’s data. If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.

Children

Accounts are for adults. Schools that use iTeamX may add students and their parents’ details; before a child’s details are used, the school asks a parent or guardian for verifiable consent, as the DPDP Act requires, and the parent can withdraw it. We never track children, build profiles of them or show them advertising.

Changes

If we change this policy in a way that matters, we will say so on this page and, for big changes, by email.