Privacy Policy

Cosmoness ("we", "us") makes Datum, a marketing attribution product, and Zymus, a bulk certificate product. Our office is at M4 806, Amrapali Golf Homes, Greater Noida, Uttar Pradesh 201318, India.

This policy explains what information we collect through cosmoness.com, Datum and Zymus, why we collect it, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the rules made under it.

When you deal with us directly, for example when you email us, call us or hold an account, we decide how your information is used. For that information we are the data fiduciary.

When you put your own data into Datum or Zymus, such as your CRM records or a list of certificate recipients, you decide what goes in and why. We process that data only on your instructions and only to provide the service. For that data you are the data fiduciary and we act as your data processor.

Information you give us. Your name, email address, phone number, company and anything you write when you contact us or set up an account.

Account information. Login details, the people you invite to your account and your settings.

Data in Datum. Data from the sources you connect, which can include ad spend and campaign data from Google Ads, Meta Ads and Google Business Profile, call details from CallRail, deal and contact records from HubSpot or Salesforce, and payment records from Stripe.

Data in Zymus. The recipient lists you upload or connect, usually names, email addresses and course or event details, plus the certificates generated from them and their delivery status.

Technical information. Our hosting provider keeps basic logs such as IP address, browser type and pages requested, to keep the service secure and working. The cosmoness.com website does not use advertising or tracking cookies. Datum and Zymus use only the cookies needed to keep you signed in.

• To provide Datum and Zymus: building your reports, generating and sending your certificates, and hosting verification pages.
• To reply when you contact us, give walkthroughs and set up trial accounts.
• To run your account, including billing and service messages.
• To keep the services secure, prevent abuse and fix problems.
• To meet our legal obligations.

• We never sell your data, or the data you put into our products, to anyone.
• We never use your data to train AI models, ours or anyone else's.
• We never use your data for advertising, and we do not share it with advertisers.
• We never look through your data except when you ask us to help, or when we must to keep the service secure or comply with the law.

Every certificate sent with Zymus carries a QR code that opens a public verification page. That page is public by design, so that anyone holding the certificate can prove it is genuine. It shows the recipient's name, the course or event, the issuer, the issue date and the certificate ID. It does not show the recipient's email address.

Issuers can withdraw a certificate, which takes its verification page down. If you received a certificate and want its page removed, contact the organisation that issued it, or write to us and we will pass your request on.

We share information only in these cases:

• Service providers who help us run the products, such as cloud hosting and email delivery providers. They may use the data only to provide their service to us, under contract.
• The tools you connect. When you connect a service such as Google Ads or HubSpot, data flows between that service and Datum as you set it up.
• When the law requires it, for example in response to a valid order from a court or government authority.
• If Cosmoness is sold or merged, in which case this policy continues to protect your information.

• Data is encrypted in transit and at rest.
• Each customer's data is stored against their own account and kept apart from every other customer's.
• Only the people you invite to your account can see your data in the product.
• Access inside Cosmoness is limited to the people who need it to run and support the service.

We keep your information for as long as your account is open. When you close your account, or ask us to delete your data, we delete it, normally within 30 days. We keep a limited record for longer only where the law requires it, for example invoices for tax purposes. You can disconnect any source in Datum at any time, and we stop collecting from it straight away.

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to delete it, and withdraw any consent you gave;
• nominate another person to exercise these rights on your behalf;
• raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

To use any of these rights, email [email protected]. If your data reached us through one of our customers, for example as a certificate recipient, we may refer your request to that customer, since they decide how your data is used.

Our service providers may store or process data in data centres outside India. Where they do, we use providers that protect data to a standard at least as strong as this policy, and we follow any restrictions on transfers that the Government of India sets.

Cosmoness products are made for businesses and institutions, not for children. We do not knowingly collect personal data from anyone under 18 except where an issuer sends a certificate to a younger student, in which case the issuer is responsible for getting any consent the law requires.

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell account holders by email before it takes effect.

For any question, request or complaint about privacy, contact our Grievance Officer:

Email [email protected]
Phone +91 87550 23705
Post Cosmoness, M4 806, Amrapali Golf Homes, Greater Noida, Uttar Pradesh 201318, India

We will acknowledge your message promptly and aim to resolve it within 30 days.