Who this policy covers
This Privacy Policy applies to Cord4 Technologies Pvt. Ltd. (“Cord4”, “we”, “us”) and every surface we operate — cord4.com, the Ecomsellertool brand, and the products we ship (Seller7, Teamgrid, Brandgrid, Grow8, Basegrid, Ecomglobal). It explains what personal data we collect, why we collect it, and how you can control it.
Client workloads we operate under contract are governed by the separate Data Processing Agreement — where Cord4 acts as processor on data our clients control.
What we collect
We try to collect the minimum necessary to provide and improve our services:
- Account & contact data — name, work email, company, role, phone (when you fill a form, email us, or apply for a job).
- Usage data — pages visited, referrer, device type, approximate location (derived from IP), and anonymised engagement signals via privacy-first analytics.
- Communications — the content of emails, sales calls and support threads you initiate with us.
- Recruitment data — CV, portfolio links and answers to screening questions when you apply for a role.
We do not sell personal data, and we do not run third-party advertising cookies on this site.
Why we process it
- Delivering our services — scoping projects, onboarding, invoicing, support.
- Improving the site — understanding what content is useful and fixing what isn't.
- Recruiting — evaluating applications and keeping you posted on open roles you've expressed interest in.
- Legal & compliance — contracts, tax records, responding to lawful requests.
Legal basis (GDPR, DPDP)
Depending on the data, we rely on contract performance, legitimate interest (operating a business, keeping our systems secure), consent (for marketing emails and non-essential analytics) or legal obligation (tax, statutory record-keeping).
How long we keep it
- Customer & billing records — retained for the length of the engagement plus 7 years for tax compliance.
- Marketing contacts — until you unsubscribe or ask us to delete your record.
- Job applications — retained for up to 24 months in case of future fit, unless you ask us to delete sooner.
- Server & analytics logs — 90 days in hot storage, up to 13 months aggregated.
Your rights
You can access, correct, export, restrict or delete the personal data we hold about you. You can also withdraw consent at any time for processing based on consent.
Email [email protected] and we will respond within 30 days. If you're in the EU/UK or India, you have the right to lodge a complaint with your local supervisory authority.
How we protect it
Transport is encrypted (TLS 1.2+), data at rest is encrypted on all managed services, access is scoped to the smallest set of employees who need it, and every material change to production goes through code review. Full detail is on the security page.
Changes to this policy
We'll update this page when our practices change and note the date at the top. If the changes are material, we'll send a direct notice to active customers.