Privacy Policy & Data Protection

1. Overview & Statutory Compliance

11thhour Technologies operates the executive management platform at https://11thhour.in. We are fundamentally committed to protecting the confidential leadership data, personal information, and strategic corporate workflows of executives and management teams across India and globally.

This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Roles: Data Fiduciary & Data Processor

• Data Fiduciary: Under the DPDP Act 2023, 11thhour acts as a Data Fiduciary regarding the registration, billing, and account authentication credentials of registered Founders, Executives, and Team Members.
• Data Processor: Regarding internal organizational deliverables, tasks, agendas, and private company documents stored within private workspaces, 11thhour acts as a secure Data Processor operating solely on behalf and under instructions of your corporate organization.

3. Information We Collect

• Account & Corporate Identity: Full Name, corporate business email address, phone number, executive designation (e.g. Founder, CEO, CTO, VP), corporate organization name, and city.
• Executive Deliverables: Day planner agendas, timeblocks, task notes, priorities, deadlines, and project statuses created within your workspace.
• Billing & Tax Data: GSTIN (for Indian tax invoicing), billing address, and transaction identifier. (Payment card details and bank credentials are processed directly through PCI-DSS compliant gateways like Razorpay; 11thhour never stores full card details).
• Technical & Telemetry Data: IP address, device type, browser information, and session timestamps for security, fraud prevention, and session management.

5. Founder Public Profile Visibility Controls

We give founders and executives complete sovereign control over their public exposure in the B2B Founder Directory:

• Public Profile Toggle: You can toggle your public profile in the founder directory On or Off at any time from your Profile Settings.
• Direct Phone & Email Privacy: Founders can choose whether their direct phone number and corporate email address are revealed to network peers or hidden.
• Enquiry-Only Connect Mode: When direct contact details are hidden, verified founders must connect with you via a structured Requirement & Enquiry form, protecting your inbox from unsolicited sales pitches while facilitating legitimate business inquiries.

6. Your Rights under the DPDP Act 2023

As a Data Principal under India's DPDP Act, you possess the following enforceable statutory rights:

• Right to Access: You can access a summary of your personal data processed by 11thhour.
• Right to Correction & Erasure: You can update, correct, or request the permanent deletion of your personal data and account records.
• Right of Grievance Redressal: You have the right to readily available means of grievance redressal provided by 11thhour.
• Right to Nominate: You may nominate an individual who, in the event of death or incapacity, shall exercise your rights as a Data Principal.

7. Data Security & Infrastructure

11thhour implements rigorous technical and organizational security measures, including:

• End-to-end TLS 1.3 encryption for data in transit.
• AES-256 encryption for sensitive database fields and credentials at rest.
• Regular automated backups, server firewalls, and least-privilege administrative access controls.
• Secure session tokens and hashed passwords utilizing Bcrypt rounds.