Symetriz Analytics Pvt Ltd ("Symetriz", "we", "us", "our"), CIN U62010PN2025PTC243094, registered in India, operates the Symetriz platform — an AI-agent and cloud deployment automation product for organizations running on Microsoft Azure — together with this website. This policy applies wherever you're located and is designed to reflect obligations under India's Digital Personal Data Protection Act, 2023 (DPDP Act); the EU/EEA General Data Protection Regulation (GDPR) and UK GDPR; the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and other U.S. state privacy laws; Brazil's LGPD; Canada's PIPEDA; Australia's Privacy Act 1988; and China's PIPL, among others listed in full at the end of this page.
Information we collect
Account information. When you register or sign in to the platform (including via Google or Microsoft single sign-on), we collect your name, email address, organization name, and authentication provider details.
Product usage data. Agent conversations, deployment requests, catalog selections, and cart/product activity.
Connected Azure data. If you connect an Azure subscription, we access subscription, resource group, resource, cost, and advisory data you authorize, strictly to power the features you use.
Website form submissions. Contact form: full name, email, phone (optional), company name (optional), topic, and message. Careers form: full name, email, phone (optional), role of interest, LinkedIn URL, message, and an uploaded resume (PDF/DOC/DOCX). Chat lead capture: full name, email, topic, and message. All three include a hidden spam-detection field and a Google reCAPTCHA check.
Submission origin. When you submit the careers form, we record the IP address the submission came from and an approximate location derived from it (city, region, and country). The location is looked up on our own servers using a locally held database, so your IP address is not sent to any other company for this.
Technical data. A randomly generated visitor identifier stored in your browser's local storage, used only to rate-limit our public sales-chat and not tied to your identity; temporary chat-session content stored in session storage and cleared when you close the tab. We do not currently run analytics or advertising cookies on this website.
Sensitive information
We do not intentionally collect sensitive personal information (such as health, biometric, precise geolocation, racial or ethnic origin, religious belief, or sexual orientation data) through this website. The approximate location we derive from an IP address (see "Submission origin" above) is city-level at best and is not precise geolocation. If you choose to include such information voluntarily in a form field or chat message, we use it solely to respond to your inquiry and do not use it for advertising or profiling.
How we use information
- To provide, operate, and secure the platform, including access control.
- To respond to support, sales, and careers inquiries.
- To screen careers submissions and spot abuse, using the IP address and approximate location recorded with them.
- To power our AI sales-concierge chat and generate responses to messages you send it.
- To send account-related email and, where you've agreed, product updates.
- To monitor for abuse, enforce rate limits, and maintain service reliability.
- To improve the platform.
Legal bases for processing (EU/EEA & UK)
Where GDPR or UK GDPR applies, we rely on: your consent (e.g., optional marketing updates), performance of a contract (operating the platform you've signed up for), our legitimate interests (security, abuse prevention, improving the service), and legal obligation where applicable.
You're talking to an AI
Our sales-concierge chat widget is an AI system (built on Anthropic's Claude models), not a human, unless a team member has joined the conversation. We disclose this so you always know when you're talking to a bot, consistent with transparency obligations such as Article 50 of the EU AI Act and comparable U.S. state AI-disclosure laws. You can ask to speak with a person at any time via sales@symetriz.com.
Third parties we share data with
We use a small number of processors to operate the platform, and share only what each needs to do its job:
- Anthropic — processes messages sent to our AI agents, to generate responses.
- Microsoft Azure / Microsoft Graph — hosts connected-subscription data you authorize, and sends account emails.
- Google and Microsoft — as OAuth identity providers, if you sign in that way.
- Google reCAPTCHA — verifies form submissions aren't automated; Google may set its own cookies for this purpose when a form loads.
- Google Maps — shows our registered office location on the Contact page. The map loads with that page, so opening it requests the map from Google.
MaxMind is not on this list because it receives nothing from us: we download its GeoLite2 database and do the approximate-location lookups ourselves. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
We do not sell or share personal information for cross-context behavioral advertising, and we do not share it with third parties for their own marketing purposes. Where you have a legally recognized opt-out preference signal (such as Global Privacy Control) enabled, we honor it as a no-sale/no-share signal.
Cookie Policy
This section is our full cookie policy and forms part of this Privacy Policy. "Cookies" here is used in the broad sense the ePrivacy Directive and India's DPDP Act use it: cookies proper, plus any equivalent storage on your device, including browser local storage and session storage.
We set no advertising, profiling, or cross-site tracking cookies on this website, and we do not run analytics trackers on it today. Nothing in the optional categories below is switched on until you choose it — the consent banner you see on your first visit defaults to everything optional turned off, and closing or ignoring it grants nothing.
What we store, and why
| Name | Category | Purpose | Duration |
|---|---|---|---|
| symetriz_cookie_consent_v1 | Strictly necessary | Remembers your cookie choices so the consent banner doesn't ask on every page. | Local storage — until you clear it or 12 months, whichever is first |
| Visitor identifier (sales chat) | Strictly necessary | A random identifier, not linked to your name or account, used only to rate-limit our public sales chat and block abuse. | Local storage — until you clear your browser data |
| Google reCAPTCHA (_GRECAPTCHA and related) | Strictly necessary | Set by Google when a form loads, to tell human submissions from automated ones. Governed by Google's privacy policy. | Set by Google; typically up to 6 months |
| Google Maps (NID and related) | Third party | Set by Google when the map of our registered office loads on our Contact page. The map loads with that page, so this applies whenever you open it. Governed by Google's privacy policy. | Set by Google; typically up to 6 months |
| Platform sign-in cookies | Strictly necessary | Keep you signed in to the authenticated Symetriz platform. Set by that application, not by this marketing site. | Session or as set by the platform |
| symetriz_chat_state_v1 | Functional (optional) | Remembers your sales-chat conversation if you reload the page. Only stored if you allow functional storage; the chat works without it. | Session storage — cleared when you close the tab |
| Analytics | Analytics (optional) | None in use. We run no analytics or advertising trackers on this site. The category exists so that none can be introduced without your consent. | Not applicable |
Managing your choices
You can change or withdraw your choice at any time — withdrawing is exactly as easy as giving consent, and costs you nothing but the convenience described above. Use the link here or in the site footer, on any page.
You can also block or delete cookies and site data in your browser's own settings. If you block strictly necessary storage, forms and sign-in may stop working. Your consent choice is itself recorded in your browser's local storage (under "symetriz_cookie_consent_v1") so we don't ask again on every page — clearing your browser data clears that record too, and we'll ask again on your next visit. We re-ask for consent at least every 12 months, and whenever we add a category.
Third-party cookies
Google reCAPTCHA, embedded on our contact, careers, and chat forms, may set its own cookies when a form loads, under Google's privacy policy rather than ours. We treat reCAPTCHA as strictly necessary: it is the control that keeps our forms and public chat from being abused, and there is no version of these forms we could safely offer without it. The authenticated Symetriz platform (a separate application from this marketing site) uses its own cookies for sign-in and essential functionality; disabling those would prevent sign-in there.
Our Contact page shows our registered office on a Google Map, which loads together with that page. Opening the Contact page therefore requests the map from Google, and Google may set its own cookies at that point under its privacy policy rather than ours. Our registered office address is also written out in plain text on the same page, so you can read it without the map. No other page on this site loads a map.
Do Not Track and Global Privacy Control
This website does not currently respond to browser "Do Not Track" (DNT) signals, as there is no accepted industry standard for how to interpret them. We do honor Global Privacy Control (GPC) as a no-sale/no-share opt-out signal, as noted above.
Third-party links
Our website and blog may link to third-party websites, including partner and reference sites. We are not responsible for the privacy practices of those sites; please review their own policies before providing information to them.
Data retention
We retain account and product-usage data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or dispute-resolution needs. Agent conversation history is retained until you delete it or your account is closed. Careers submissions, including resumes, are retained for as long as reasonably needed to evaluate the application and for a limited period afterward, unless you ask us to delete them sooner. The IP address and approximate location recorded with a careers submission are included only in the notification email to our HR team — they are not stored with the application in our database — and that email is kept for the same period as the application.
Security
We use industry-standard measures — encrypted transport, hashed passwords, scoped service credentials, and role/entitlement-based access control — to protect your information. No system is perfectly secure, and we can't guarantee absolute security.
If a security incident occurs that compromises your personal data, we will notify affected individuals and the relevant regulator (such as India's Data Protection Board or an EU/UK supervisory authority) as required under applicable law, including India's DPDP Act and the GDPR/UK GDPR.
Data Protection Officer
We have not appointed a Data Protection Officer, as one is not currently required given our size and the scale of our data processing. All privacy inquiries, including those that would otherwise go to a DPO, can be directed to privacy@symetriz.com.
Where your data is stored
Customer platform data — including the Azure resource inventory, resource groups, management groups, cost data and agent conversation history synchronised from your Azure tenant — is stored in Microsoft Azure in the East US 2 region (United States). Backups and disaster-recovery copies remain within the United States.
Symetriz Analytics Pvt Ltd is registered in India and our personnel access this data from India to operate and support the platform. Access is limited to authorised staff, granted on a least-privilege basis, and recorded in our audit logs.
International data transfers
Symetriz Analytics Pvt Ltd is registered in India. Depending on where you and our processors (Anthropic, Microsoft, Google) are located, your information may be processed outside your home country. Where GDPR/UK GDPR applies, such transfers rely on mechanisms such as the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and Standard Contractual Clauses approved by the European Commission, which our processors represent they use for their own transfers. Under India's DPDP Act, cross-border transfer is permitted except to countries specifically restricted by the Central Government.
Your rights
India (Digital Personal Data Protection Act, 2023)
As a Data Principal, you have the right to: obtain a summary of your personal data and processing activities; request correction, completion, updating, or erasure of your data; withdraw consent at any time; nominate another individual to exercise these rights on your behalf in the event of death or incapacity; and raise a grievance with us before approaching the Data Protection Board of India. Our Grievance Officer can be reached at privacy@symetriz.com. We aim to acknowledge and resolve grievances promptly.
European Economic Area & United Kingdom (GDPR / UK GDPR)
You have the right to access, rectify, erase, or restrict processing of your data; to data portability; to object to processing (including for direct marketing); to not be subject to a decision based solely on automated processing that significantly affects you; and to lodge a complaint with your national data protection authority (or the UK Information Commissioner's Office).
United States (California CCPA/CPRA and other states)
California residents have the right to know what personal information we collect and why, to delete it, to correct it, to opt out of the sale or sharing of it (we don't sell or share it), to limit use of sensitive personal information, and to not be discriminated against for exercising these rights. We do not sell personal information to third parties for their own direct-marketing purposes (California Civil Code §1798.83). We extend equivalent rights to residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive consumer privacy laws.
Brazil, Canada, Australia, and other jurisdictions
We aim to honor comparable rights of access, correction, deletion, objection, and portability for individuals in Brazil (LGPD), Canada (PIPEDA), Australia (Privacy Act 1988), and other jurisdictions with data protection laws, regardless of the specific statutory trigger, on request to privacy@symetriz.com.
To exercise any of the above, contact us at sales@symetriz.com or privacy@symetriz.com. You can also access and update account details directly from Settings inside the product.
Refund and cancellation policy
This section sets out how billing, cancellation, and refunds work for paid Symetriz subscriptions and services. It supplements — and does not replace — the fee and termination terms in our Terms of Service, and any signed order form or statement of work between us takes precedence where the two differ.
How billing works
Symetriz plans are subscriptions billed in advance, monthly or annually, at the rates shown on our Pricing page or in your order form. Adding a plan to the cart is a request, not a binding purchase — our team confirms scope, pricing, and activation with you before any charge is raised.
Cancelling a subscription
You may cancel at any time by writing to sales@symetriz.com. Cancellation takes effect at the end of your current billing period: your plan stays active, and you keep access, until that period ends. We do not pro-rate or refund the unused part of a period that has already started, except where this policy or the law says otherwise.
When we refund
- Billing errors. Duplicate charges, charges after a valid cancellation, or amounts that don't match your agreed plan are refunded in full, always.
- Annual plans, first 14 days. If you are on a first-time annual subscription, you may cancel within 14 days of the start of the term for a full refund of that term's fee.
- Service we could not deliver. If we cannot provision or deliver a paid service you have been charged for, we refund the amount charged for the undelivered service.
- Professional services. One-off engagements — assessments, migrations, foundation setup — are refundable only as set out in the relevant statement of work, since the work is performed to order.
What we don't refund
- Your Azure consumption costs. Microsoft bills you directly for the Azure resources deployed in your own subscription. Those charges are not ours to refund — Symetriz fees cover our platform and services only. Take care with deployment requests: a resource you provision is billable by Microsoft from the moment it exists.
- Monthly subscription periods already under way, where you simply chose to stop using the service.
- Fees for a period in which we suspended or terminated your account for breach of the Terms of Service.
- Taxes and statutory levies already remitted to a tax authority, where we are unable to recover them.
How to request a refund, and how long it takes
Email sales@symetriz.com with your organization name, the invoice or transaction reference, and what went wrong. We aim to acknowledge within 3 business days and to decide within 10 business days. Approved refunds are returned to the original payment method; once we issue the refund, your bank or card issuer typically takes a further 5–10 business days to post it. If we decline a refund, we tell you why, and you can ask us to review that decision.
Nothing in this section limits any non-waivable statutory right you have as a consumer under the law of your country — including India's Consumer Protection Act, 2019, EU and UK consumer legislation, and comparable laws elsewhere.
Children's data and age of consent
Symetriz is a business-to-business product and is not directed at, marketed to, or available to children. "Child" is defined differently across jurisdictions — under 13 under U.S. COPPA, under 16 by GDPR default, and under 18 under India's DPDP Act. Rather than apply a different rule in each country, we apply the strictest one everywhere: you must be 18 or over to use Symetriz. We do not knowingly collect, process, or retain the personal data of anyone under 18.
Why we don't rely on parental consent
India's DPDP Act requires verifiable parental consent before a child's data may be processed, and prohibits tracking, behavioural monitoring, and targeted advertising directed at children altogether. Symetriz has no purpose that would justify processing a child's data, so instead of building a parental-consent mechanism we don't serve under-18s at all. There is no circumstance in which we will process a child's personal data on this website or the platform, with or without a parent's permission.
How we enforce this
- Age confirmation on every form. Our contact form, careers application, and sales-chat lead form each require you to confirm you are 18 or over before the submission will go through.
- Age confirmation before sign-in. The platform sign-in hand-off on this site requires the same confirmation, and account creation in our identity provider is restricted to adults.
- Deletion on discovery. If we learn that we hold data from someone under 18, we delete it and close any associated account, without requiring a request.
- No profiling of minors. We run no behavioural tracking or targeted advertising on this site for any visitor, of any age.
These are attestations, not identity verification — we ask, we act on the answer, and we do not collect date of birth or identity documents from website visitors, because collecting more personal data to police a rule about personal data would defeat the point.
If a minor has given us data
If you are a parent or guardian, or you otherwise believe someone under 18 has provided us information, contact privacy@symetriz.com with enough detail to locate the record. We will delete it and confirm back to you. You do not need to prove a legal relationship to the child to ask us to do this.
Changes to this policy
We may update this policy as the product and our legal obligations evolve. Every update is reflected by the "Last updated" date above; for material changes — such as new categories of data collected or new third parties we share data with — we'll provide more prominent notice, such as a banner on this site or an email to registered users.
Contact us
Symetriz Analytics Pvt Ltd · CIN U62010PN2025PTC243094 · Kumar PalmSpring Towers, A7-1104, NIBM Undri Road, Undri, Pune, Maharashtra, India, 411060 · sales@symetriz.com · privacy@symetriz.com
Regulatory frameworks referenced in this policy
- India — Digital Personal Data Protection Act, 2023
- India — Consumer Protection Act, 2019 (refunds and cancellation)
- European Union/EEA — Regulation (EU) 2016/679 (GDPR)
- United Kingdom — UK GDPR & Data Protection Act 2018
- European Union — ePrivacy Directive 2002/58/EC, as amended (cookies and device storage)
- United States — Children's Online Privacy Protection Act (COPPA)
- United States (California) — CCPA (2018), as amended by the CPRA (2020)
- United States (other states) — Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, and other applicable state privacy statutes
- Brazil — Lei Geral de Proteção de Dados (Law No. 13,709/2018)
- Canada — Personal Information Protection and Electronic Documents Act (PIPEDA)
- Australia — Privacy Act 1988 (Cth) and the Australian Privacy Principles
- China — Personal Information Protection Law (PIPL)
- European Union — AI Act, Regulation (EU) 2024/1689, Article 50 (AI-interaction transparency)
Trademarks
Anthropic, Claude, Microsoft, Microsoft Azure, Microsoft Graph, Google, and reCAPTCHA are trademarks of their respective owners. They are referenced here only to identify the vendor relationships described above and do not imply any endorsement of, or affiliation with, Symetriz beyond those relationships.