Who we are and what this policy covers
This Privacy Policy explains how Blue Copper Technologies Pvt Ltd (“Blue Copper Technologies”, “BCT”, “we”, “us”) collects, uses, shares and protects personal data when you visit bluecoppertech.com, fill in a form or apply for a job through our recruitment channels.
We are a technology company registered in India with our registered office at Module 701, Block 4A, Ecospace Business Park, New Town, Action Area II, Kolkata – 700160. We build and sell enterprise software products (VControl, AktionAI, QubeAI and Impactor) and provide technology services to businesses in India and around the world.
We act as the “Data Fiduciary” for personal data described in this policy, determining why and how your personal data is processed.
We act as the “Controller”. In plain terms, we decide why and how your data is used and remain accountable for its safeguarding.
This policy covers only this website (bluecoppertech.com). AktionAI operates as a separate application with its own website, user login and Privacy Policy, available at aktionai.com/privacy.html. Impactor has its own privacy policy. QubeAI does not currently have a production application or a separate privacy policy.
Customer Product Data: This policy does not cover data we process on behalf of our customers inside our products. For that data, our customer is the Data Fiduciary or controller and we act on their instructions as a Data Processor.
What personal data we collect and how
We collect personal data in three ways: you give it to us, our website records it automatically, or we receive it from a third party.
1. Data you give us
| When | What we collect |
|---|---|
| Contact, demo or quote request forms | Name, work email, phone number, company name, job title, country, and anything you write in the message box. |
| Job applications received by email, careers portal, or external portals (LinkedIn, Naukri) | Name, email, phone, current location, CV or resume, cover letter, work history, education, portfolio or LinkedIn links, and any other details you choose to include. |
2. Data collected automatically
If you accept analytics cookies, Google Analytics records: your approximate location (country and city), device and browser type, operating system, screen size, pages viewed and time spent, links clicked, and the website that referred you.
3. Data from other sources
We may receive data about you from LinkedIn (when you interact with our company page or advertisements), from business data providers supplying publicly available company and contact details for legitimate B2B outreach, and from partners or resellers who refer you to us. We may combine this with data you provide to respond to your business enquiry effectively.
Why we use your data and our legal basis
We use your personal data only for the defined purposes below. The legal basis column explains our lawful reason under India’s DPDP Act and the GDPR. Where we rely on consent, you may withdraw it at any time.
| Purpose | Data Used | Legal Basis (DPDP & GDPR) |
|---|---|---|
| Respond to your enquiry, demo or quote request | Contact form data | Consent (DPDP Act); steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)). |
| Consider your job application and contact you about it | Careers data | Consent (DPDP Act); steps taken at your request before an employment contract (GDPR Art. 6(1)(b)). |
| Understand how the website is used and improve it | Automatically collected data, cookies | Consent, given through the cookie banner (DPDP Act and GDPR Art. 6(1)(a)). |
| Keep website secure, prevent spam/fraud, enforce terms | IP address, device data, logs | Legitimate uses permitted by law (DPDP Act); legitimate interest in cybersecurity (GDPR Art. 6(1)(f)). |
| Meet legal, tax, audit and regulatory obligations | Any relevant data | Legal obligation (DPDP Act & GDPR Art. 6(1)(c)). |
| Send relevant B2B business updates about our products/services | Work contact details from you or business data providers | Consent (DPDP Act); legitimate interest (GDPR Art. 6(1)(f)). You can opt out at any time. |
- We never sell your personal data.
- No Automated Profiling: We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.
- India DPDP Act Notice: Under the DPDP Act, 2023, you have the right to withdraw consent at any time, exercise your rights listed in Section 8 of this policy, and submit a grievance to the Data Protection Board of India. Withdrawing consent does not affect the lawfulness of processing undertaken prior to withdrawal.
Cookies and tracking technologies
Cookies are small text files stored on your device. We ask for your permission through a cookie banner, managed by CookieYes, when you first visit. Until you choose, only strictly necessary cookies are used. You can change your choices at any time using the “Cookie settings” button below or the link in the footer.
| Category | What it does | Tools | Needs consent? |
|---|---|---|---|
| Strictly necessary | Makes the site work: remembers your cookie choice and keeps the Dun & Bradstreet verification badge secure and working. | CookieYes; Dun & Bradstreet | No (Essential) |
| Analytics | Tells us which pages are visited, for how long and from where, so we can improve the site. | Google Analytics 4 via GTM | Yes (Consent required) |
We also use Google Search Console and Bing Webmaster Tools. These tools do not place cookies on your device; they provide summary reports on how bluecoppertech.com appears in search results.
Who we share your data with
We share personal data only with the service providers below (our “Data Processors”), who act strictly on our documented instructions and are legally bound by contracts to safeguard your data. We never sell your data and we never share it with third parties for their own marketing.
| Service Provider | What they do for us | Data they receive |
|---|---|---|
| Google Firebase Hosting & Amazon Web Services (AWS) | Hosts the website and processes form submissions only for forwarding them by email, without storing them in the website’s application database. | Website data and submitted form information |
| Google Workspace | Receives form submissions by encrypted email so that our teams can respond to enquiries. | Contact information and correspondence submitted through forms |
| CookieYes | Shows the cookie banner and keeps an audit record of your cookie choice. | Your cookie choice and basic technical data (such as browser type) |
| Google Search Console & Bing Webmaster Tools | Search performance reports and site health monitoring. | Summary search query data only (no cookies or personal data) |
| Google (Analytics 4, Tag Manager) | Website telemetry and traffic insights, active only after you affirmatively accept analytics cookies. | Visit data linked to a random ID (not your name), only after you accept analytics cookies. If you reject, Google may receive basic anonymous signals without cookies. |
| Dun & Bradstreet | Shows our business verification badge | Basic technical data such as IP address and browser type, used under D&B’s own privacy notice (dnb.co.in/privacy-policy) |
No Website Database Storage: When you submit a form on bluecoppertech.com, your information is transmitted over an encrypted HTTPS connection to an Amazon Web Services (AWS) server in the US East (Ohio) region. It is processed there solely to forward your message to us by email. We do not store form submissions in our website’s application database. The AWS API is used only for email transmission.
Email Delivery: Submissions are delivered by email to our corporate Google Workspace account and retained only as long as necessary to address your enquiry and meet legal or business requirements.
Job Portals: If you apply for an open role through an external portal such as LinkedIn or Naukri, that portal handles your data under its own privacy policy until received by our recruitment team.
Legal Disclosures: We may share data with professional advisers (lawyers, auditors, accountants), with regulators, courts, or law enforcement where required by law, and with a successor entity if Blue Copper Technologies is merged, acquired, or restructured.
Internal Role-Based Access: Within BCT, only staff who strictly require access to perform their duties (e.g., sales for quotes, HR for recruitment) can view your information.
International data transfers
We are headquartered in India. Our website is hosted on Google Firebase and delivered through Google’s global content delivery network (CDN). Form submissions pass through an Amazon Web Services server in the United States (Ohio) solely to be forwarded to us by email. Certain third-party service providers listed in Section 5 process data in other countries, including the United States and the European Union.
For Users in the EU, UK & Switzerland
Where your personal data leaves your region, we protect it using recognised transfer safeguards: the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or an applicable adequacy decision. You may request a copy of relevant safeguards by writing to privacy@bluecoppertech.com.
For Users in India (DPDP Act)
Under the DPDP Act, 2023, we transfer data outside India only to countries that the Central Government has not restricted by notification, and solely to service providers contractually bound to implement appropriate organizational and technical safeguards.
How long we keep your data
We keep personal data only for as long as needed to fulfill the purpose for which it was collected, such as addressing your inquiry, completing recruitment, or satisfying legal, tax, and auditing obligations. We review retained records regularly and securely delete or anonymize data when no longer needed.
| Type of Data | Retention Schedule |
|---|---|
| Enquiries, demo requests and sales leads | Retained as long as needed to respond and follow up, and no longer than 24 months following our last communication with you. If you become a BCT client, the client agreement retention terms supersede this timeline. |
| Job applications and candidate records | Retained as long as needed for the active recruitment cycle, and no longer than 24 months after the position is filled or closed. You may ask us to erase your profile sooner. We retain candidate data for future openings only with your affirmative agreement. |
| Analytics and cookie telemetry | Configured per tool. Google Analytics 4 retains user-level data for 2 months. Individual cookie lifetimes are listed in our Cookie Policy. |
| Records required for statutory, tax, or audit compliance | Retained for the duration stipulated by applicable law, typically up to 8 years under Indian company and tax regulations. |
Your rights and how to exercise them
Wherever you reside, you have meaningful legal rights regarding your personal data. You may request us to:
Confirm whether we process your personal data, receive a summary of processing, and obtain a copy.
Correct inaccurate personal data, update incomplete entries, or complete missing records.
Request deletion of personal data that is no longer required for the purpose or where consent is withdrawn.
Stop receiving marketing, newsletter, or sales outreach emails from us at any time.
Withdraw any consent previously granted as easily as it was given, with immediate effect.
Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
Under the GDPR, you also have the right to restrict processing, object to processing based on legitimate interest, and receive your data in a structured, commonly used and machine-readable format (data portability).
To exercise any right, email privacy@bluecoppertech.com with the subject line “Privacy request” and specify which right you wish to exercise.
- Verification: We may ask you to verify your identity to ensure personal data is never released to unauthorized parties.
- Timeline: We will respond within 30 days, or sooner where statutory deadlines mandate.
- No Fee: We process requests free of charge, unless a request is manifestly unfounded, excessive, or repetitive.
- Non-Discrimination: We will never discriminate against you or treat you differently for exercising your privacy rights.
Grievance Officer and complaints
If you have any question, concern, or grievance regarding how Blue Copper Technologies handles your personal data, please contact our designated Grievance Officer first. We take every complaint seriously and aim to address and resolve it within 30 days.
The Grievance Officer is appointed pursuant to the Information Technology Act, 2000 and rules made thereunder, and serves as our designated point of contact under the Digital Personal Data Protection Act, 2023.
Escalation in India: If we fail to resolve your complaint within statutory timelines or to your satisfaction, you have the right to lodge a formal complaint with the Data Protection Board of India.
Escalation in the UK & EU: If you are in the EU or UK, you also have the right to complain to your national data protection supervisory authority (in the UK, the Information Commissioner’s Office at ico.org.uk). We would appreciate the opportunity to resolve your concern directly first.
Security
We safeguard personal data using technical, administrative, and organizational measures aligned with industry standards and data protection laws:
HTTPS / TLS 1.3 encryption across all website pages and form transmission pipelines.
Strict least-privilege access controls so only vetted staff can access customer inquiries.
Binding Data Processing Agreements (DPAs) with every infrastructure and hosting partner.
Regular security audits, access logging, and periodic reviews of our hosting infrastructure.
No method of transmission over the internet or electronic storage is completely infallible, but we implement rigorous safeguards. In the event of a personal data breach likely to cause harm, we will promptly notify affected individuals and statutory authorities (including the Data Protection Board of India) as mandated by applicable law.
Children
This website is exclusively intended for corporate and business users aged 18 and over. We do not knowingly solicit or collect personal data from anyone under the age of 18.
If you are under 18, please do not use our website or provide any personal information. If you believe that a child has provided us with personal data, please notify us immediately at privacy@bluecoppertech.com, and we will take immediate steps to delete such data from our records.
Links to other websites
Our website contains links to external platforms and services, including LinkedIn, YouTube, client portals, and partner websites. We are not responsible for the privacy practices, content, or policies of third-party websites.
We encourage you to read the privacy notices of any external site you visit before submitting personal data through them.
Changes to this policy
We may revise and update this Privacy Policy periodically to reflect changes in our technology stack, product offerings, or regulatory requirements. The “Last updated” and “Effective date” timestamps at the top indicate when this policy was last revised.
When we make significant changes, we will highlight the update through a prominent notice on bluecoppertech.com or by direct email where we maintain your active contact details. We encourage you to review this page periodically.
Governing law
This Privacy Policy is governed by and construed in accordance with the laws of India. Any dispute, claim, or controversy arising under or relating to this policy shall be subject to the exclusive jurisdiction of the competent courts in Kolkata, West Bengal, India.
This governing law clause does not deprive individuals residing in other jurisdictions (such as the EU or UK) of mandatory consumer or data protection rights granted under their respective local laws.
Contact us
For any privacy inquiries, data subject requests, or regulatory questions, please contact our team:
Blue Copper Technologies Pvt Ltd
Corporate & Registered Office