Privacy Policy

Applies to UltraDesk, a product of Spectra Technologies India Private Limited, New Delhi, India.

This policy describes what UltraDesk collects, how it is handled, and your rights under India's Digital Personal Data Protection Act (DPDP). It is drafted to reflect how the system actually works.

What we collect

• Account information — your email, company name, and a securely hashed password.
• Machine / connection identifiers — your install's connection ID and machine identifier, used for licensing.
• Session metadata — timestamps and audit records of connection attempts (who connected, granted/denied), for accountability. Not the session content.
• Payment references — for manual UPI payments, your payment reference, amount, and (if provided) GSTIN — to reconcile and issue receipts.

What we CANNOT see

The content of a remote session — your screen, keystrokes, files and voice — is end-to-end encrypted between the two endpoints. When a session relays through our infrastructure to cross a firewall, the relay carries only encrypted bytes. Spectra cannot see your screen or session content.

Session recordings

When session recording is available, recordings are stored locally on the recording party's own machine. Recordings are never stored on or transmitted to Spectra infrastructure.

Where your data is stored

UltraDesk is built in India and hosted in India. The central server, regional edges, and relays run on Indian infrastructure under Indian jurisdiction. Your data does not leave India.

Retention

Account and licensing data are retained while your account is active and for a reasonable period thereafter for legal, tax and accountability purposes. Audit and metering records are retained to support security and dispute resolution. You may request deletion (see rights below).

Your rights under DPDP

• Access — request a copy of your personal data.
• Correction — correct inaccurate data.
• Erasure — request deletion, subject to legal retention obligations.
• Grievance redressal — contact our Grievance Officer: grievance@ultradesk.in.

Cookies

The customer portal uses a single essential session cookie (HttpOnly, Secure, SameSite=Strict) to keep you signed in. No advertising or tracking cookies.

Third parties

Payments are processed by manual UPI reconciliation today (a payment gateway may be added later); transactional email is sent via an SMTP relay. We do not sell your personal data.

Contact

Data fiduciary: Spectra Technologies India Private Limited, New Delhi, India — contact us.