Login Contact Us Usecases

WHAT IS GDPR?

GDPR or General Data Protection Regulation is regulated to “fit for the digital age” and provides all users to control their personal data shared with the websites. It also simplifies the regulatory environment for businesses so both the users and the businesses can benefit from the digital economy.

PERSONAL DATA COLLECTED UNDER GDPR

Almost every internet service involves the collection and storage of personal data. This can include your name, email address, phone number, credit/debit card number. The definition of personal data has been extended so IP addresses can also be treated as personal data.

The compliance of GDPR within and outside the EU ensures that the personal data is gathered legally, respects the rights of data owners and is not being misused.

GDPR FOR BUSINESSES

GDPR applies to organizations operating within and outside the EU which offer goods/services to customers or businesses. Businesses which fail to protect the collected user data can face penalties. As of 25th May 2018, all businesses are expected to be GDPR compliant.

Kapture Chat GDPR COMPLIANCE

As a global company, Kapture Chat complies with EU-U.S. and Swiss Privacy Shield Frameworks and GDPR. Protecting the personal data of our customers continues to be a priority and we ensure that the collected data is not tampered. While Kapture Chat doesn’t introduce significant new requirements to its security and privacy practices, we do maintain security practices for handling customer content.

DATA CONTROLLERS VS DATA PROCESSORS

To simplify, a data controller refers to a person, authority, agency, or body which alone or jointly determines the purpose of gathering the data and analyzing it. Data processor on the other hand refers to a person, authority, agency, or body that processes gathered data on the behalf of the controller. Kapture Chat ensures that all the data that is being collected is directly form the consumer and third-party website which has been integrated with us.

DATA PROTECTION AND DATA RESIDENCY

The declaration of obligation or non- disclosure/confidentiality agreement applies to data protection, privacy of all shared data, trade secrets as well as social security data privacy. Furthermore, confidentiality agreements for employees and confidentiality agreements for external service providers would be distinguished.

This also helps to protect very real security risks including:

  • Breaches of confidentiality. For instance, information being given out inappropriately.

  • Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.

  • Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.

  • The only people able to access data covered by this policy should be those who need it for their work.

  • Data should not be shared informally. When access to confidential information is required, employees can request it from their line managers.

  • In particular, strong passwords must be used and they should never be shared.

  • Personal data should not be disclosed to unauthorised people, either within the company or externally.

ARTICLE 27 GDPR COMPLIANCE

Information according to Art. 27 EU GDPR
Adjetter Media Network Private Limited is a company located outside of the European Union. In order to comply with Art. 27 juksta.eu has been nominated as our representative in the European Union. If you want to make use of your data privacy rights, please visit: Our public Privacy dashboard.

GDPR Representative Service

Kapture Chat is dedicated to continuously improving the security, technical and organizational measures to better protect the customer data and sensitive information shared with us. We are always evaluating industry standard practices regarding technical data privacy and information security and strive to meet or exceed those standards. Our security programs are comprehensive and dedicated to all facets of safety.

Kapture Chat holds the following trusted security certifications.

HIPPA

We help customers address their HIPAA obligations by leveraging appropriate security configuration options in Kapture Chat.

  • GDPR
  • HIPAA
  • ISO

SECURITY COMPLIANCE

ISO

Kapture Chat is ISO 27001:2013 certified.

The policy and technical and organizational measures provided in this Data Security and Privacy attachment (DSP) apply to Kapture Chat Platform underlying applications, platforms, and management of infrastructure components operated by Kapture Chat.

Data Protection and Data Residency: The declaration of obligation or non- disclosure/confidentiality agreement applies to data protection, privacy of all shared data, trade secrets as well as social security data privacy. Furthermore, confidentiality agreements for employees and confidentiality agreements for external service providers would be distinguished.

This also helps to protect very real security risks including:

  • Breaches of confidentiality. For instance, information being given out inappropriately.

  • Failing to offer choice. For instance, all individuals should be free to choose how the company uses data relating to them.

  • Reputational damage. For instance, the company could suffer if hackers successfully gained access to sensitive data.

  • The only people able to access data covered by this policy should be those who need it for their work.

  • Data should not be shared informally. When access to confidential information is required, employees can request it from their line managers.

  • In particular, strong passwords must be used and they should never be shared.

  • Personal data should not be disclosed to unauthorised people, either within the company or externally.

Security Policies

I. Kapture Chat will maintain and follow IT security policies and practices that are integral to Kapture Chat’s business and mandatory for all Kapture Chat employees, including contract personnel. II. Kapture Chat will review its IT security policies at least annually and amend such policies as Kapture Chat deems reasonable to maintain protection of the Cloud Services and Content processed therein.

Service Integrity

I. Kapture Chat will maintain policies and procedures designed to manage risks associated with the application of changes to its Cloud Services. Prior to implementation, changes to the Cloud Service, including its systems, networks and underlying components, will be documented in a registered change request that includes a description and reason for the change, implementation details and schedule, a risk statement addressing impact to the Cloud Service and its clients, expected outcome, rollback plan, and documented approval by authorized personnel.

II. Kapture Chat will maintain an inventory of all information technology assets used in its operation of the Cloud Service. Kapture Chat will continuously monitor the health and availability of the Cloud Service and underlying components. III. Kapture Chat will maintain measures designed to assess, test, and apply security advisory patches to the Cloud Service and its associated systems, networks, applications, and underlying components within the Cloud Service scope. Upon determining that a security advisory patch is applicable and appropriate, Kapture Chat will implement the patch pursuant to documented severity and risk assessment guidelines. Implementation of security advisory patches will be subject to Kapture Chat change management policy.

Kapture Chat recognizes the importance of maintaining your privacy. We value your privacy and appreciate your trust in us. This Policy describes how we treat user information we collect on https://www.kapturechat.com/ . This Privacy Policy applies to current and former visitors to our website and to our online customers. By visiting and/or using our website, you agree to this Privacy Policy.

Kapture Chat is a property of Adjetter Media Network Private Limited, an Indian Company registered under the Companies Act, 2013 having its registered office at SAS Veer Building, 3M-123/A, First Floor East of NGEF Layout, Kasturi Nagar, Karnataka Bangalore – 560043

This also helps to protect very real security risks including:

This is a summary of our new privacy policy which takes effect on 05/07/2019. It covers every Kapture Chat website that links here and all of the products and services provided by the website.

Our Privacy Commitment

Kapture Chat has never sold your information to someone else for advertising, or made money by showing you other people's ads, and we never will. This has been our mindset and approach since we started. This policy tells you what information we do collect from you, what we do with it, who can access it, and what you can do about it.

KAPTURE CHAT IS COMMITTED TO PROTECT THE INFORMATION YOU PROVIDE US

Account and Sign up : When you sign up for a free trail or any of our services, we will ask for information like your name, contact number, company name, email address and country to complete the sign up process. If you sign up for a free trail account, we do not ask for you to enter your credit card information.

Registration and other form submissions : We collect information that you submit when you

  • Subscribe to our newsletter

  • Submit a form

  • Register for an event, submit a form in order to download any guides or books

  • Submit a form to request customer support.

Testimonials : When we get authorization from you to post testimonials about our products and services on the website, we may add your name, designation and picture. If you want your testimonial to be removed, Please contact us at marketing@kapturecrm.com

HOW WE COLLECT INFORMATION

  • Contact Information : We might collect your name, email, mobile number, phone number and IP address.

  • Information you Post : We collect information you post in a public space on our website or on a third-party social media site belonging to https://www.kapturechat.com/

  • Demographic Information : We may collect demographic information about you or any other information provided by you during the use of our website. We might collect this as a part of a survey also.

  • Other Information : If you use our website, we may collect information about your IP address and the browser you're using. We might look at what site you came from, duration of time spent on our website, pages accessed or what site you visit when you leave us. We might also collect the type of mobile device you are using, or the version of the operating system your computer or device is running.

HOW KAPTURE HANDLES INFORMATION

  • We collect information directly from you when you register for a demo or subscribe. We also collect information if you post a comment on our websites or ask us a question through phone or email.

  • We collect information from you passively. We use tracking tools like Google Analytics, Google Webmaster, browser cookies and web beacons for collecting information about your usage of our website.

  • We get information about you from third parties. For example, if you use an integrated social media feature on our website. The third-party social media site will give us certain information about you. This could include your name and email address.

  • We use information to contact you: We might use the information you provide to contact you for a sales pitch or for other promotional purposes.

  • We use information to respond to your requests or questions. We use your information to check the interaction history and respond to you based upon your questions.

  • We use information to improve our products and services. We might use your information to customize your experience with us. This could include displaying content based upon your preferences.

  • We use information to look at site trends and customer interests. We may use your information to make our website and products better. We may combine information we get from you with information about you we get from third parties.

  • We use information for security purposes. We may use information to protect our company, our customers, or our websites.

  • We use information for marketing purposes. We might send you information about special promotions or offers. We might also tell you about new features or products. These might be our own offers or products we think you might find interesting

  • We use information to send you transactional communications. We might send you emails or SMS about your scheduled demo.

Email Opt-Out

You can opt out of receiving our marketing emails. To stop receiving our promotional emails, please email unsubscribe to . It may take about ten days to process your request.

Article 27 GDPR Compliance

Information according to Art. 27 EU GDPR
Adjetter Media Network Private Limited is a company located outside of the European Union. In order to comply with Art. 27 juksta.eu has been nominated as our representative in the European Union. If you want to make use of your data privacy rights, please visit: Our public Privacy dashboard.

Third Party Sites

If you click on one of the links to third party websites, you may be taken to websites we do not control. This policy does not apply to the privacy practices of those websites. Read the privacy policy of other websites carefully. We are not responsible for these third party sites.

Questions, Concerns or Complaints

If you have any comments or questions regarding our Privacy Policy or if you have any concerns regarding your Privacy, you can contact Kapture’s support at

DATA CENTER PHYSICAL SECURITY

Facilities

Kapture Chat hosts Service Data primarily in AWS data centers that have been certified as ISO 27001, PCI DSS Service Provider Level 1, and/or SOC 2 compliant. Learn more about Compliance at AWS.

AWS infrastructure services include backup power, HVAC systems, and fire suppression equipment to help protect servers and ultimately your data.

On-Site Security

AWS on-site security includes a number of features such as security guards, fencing, security feeds, intrusion detection technology, and other security measures. Learn more about AWS physical security.

Data Hosting Location

KaptureCRM leverages AWS data centers in the United States and Asia Pacific. Customers can choose to locate their Service Data in the US-only or EEA-only (only available for enterprise).

Dedicated Security Team

Our globally distributed Security Team is on call 24/7 to respond to security alerts and events.

Protection Architecture

Our network security architecture consists of multiple security zones. More sensitive systems, like database servers, are protected in our most trusted zones. Other systems are housed in zones commensurate with their sensitivity, depending on function, information classification, and risk. Depending on the zone, additional security monitoring and access controls will apply. DMZs are utilized between the Internet, and internally between the different zones of trust.

Network Vulnerability Scanning

Network security scanning gives us deep insight for quick identification of out-of-compliance or potentially vulnerable systems.

Intrusion Detection and Prevention

Service ingress and egress points are instrumented and monitored to detect anomalous behavior. These systems are configured to generate alerts when incidents and values exceed predetermined thresholds and use regularly updated signatures based on new threats. This includes 24/7 system monitoring.

Threat Intelligence Program

Kapture Chat participates in several threat intelligence sharing programs. We monitor threats posted to these threat intelligence networks and take action based on risk.

Logical Access

Access to Kapture Chat Network is restricted by an explicit need-to-know basis, utilizes least privilege, is frequently audited and monitored, and is controlled by our Operations Team. Employees accessing the Kapture Chat Network are required to use multiple factors of authentication.

Security Incident Response

In case of a system alert, events are escalated to our 24/7 teams providing Operations, Network Engineering, and Security coverage. Employees are trained on security incident response processes, including communication channels and escalation paths.

Encryption in Transit

All communications with Kapture Chat UI and APIs are encrypted via industry standard HTTPS/TLS (TLS 1.2 or higher) over public networks. This makes sure that all traffic between you and Kapture Chat is safe during the transit. Additionally for email, our product leverages opportunistic TLS by default. Transport Layer Security (TLS) encrypts and provides email securely, mitigating eavesdropping between mail servers where peer services support this protocol. Exceptions for encryption may include any use of in-product SMS functionality, any other third-party app, integration, or service subscribers may choose to leverage at their own discretion

Redundancy

Kapture Chat uses service clustering and network redundancies to mitigate single points of failure. Our stern backup regime lets us deliver a high level of service availability, as Service Data is replicated across availability zones.

Disaster Recovery

Kapture Chat’s Disaster Recovery (DR) program guarantees that our services remain available and are easily recoverable after a disaster. We have accomplished this by forming a robust technical environment, creating Disaster Recovery plans and testing activities.

Authentication Security

Our customers can enable Kapture Chat authentication, social media sign-on, and/or enterprise sign-on for end-users as well as agent authentication.

Configurable Password Policy

Kapture Chat native authentication for products that are available through the Admin Center provides the following levels of password security: low, medium, and high. Additionally, custom password rules for agents and admins can be set up. Kapture Chat also allows for several password security levels that apply to end-users as opposed to agents and admins. Only admins can change the password security level.

2-Factor Authentication (2FA)

Kapture Chat native authentication for products available through the Admin Center offers 2-factor (2FA) for agents as well as admins.

Service Credential Storage

Kapture Chat follows safe credential storage best practices by never storing passwords in a human readable format. It is only as the result of a secure, salted, one-way hash.

SECURITY AWARENESS

Policies

Kapture Chat has built a complete set of security policies that covers a wide range of topics. These policies are made available to all or any employees and contractors who have access to Kapture Chat data assets.

Training

All of our employees attend a Security Awareness Training given upon hire and annually thereafter. All engineers in our team receive annual Secure Code Training. The safety team provides additional security awareness updates regularly through email, blog posts, and presentations during internal events.

Background Checks

In accordance with new laws, Kapture performs background checks on all our new employees. These checks are also completed for contractors. The background check includes criminal, education, and employment verification. Cleaning crews are included for checks as well.

Confidentiality Agreements

All new hires at Kapture Chat are required to sign Non-Disclosure and Confidentiality agreements.

WHAT IS SPAM?

Spam refers to unsolicited commercial email. Kapture Chat prohibits the use of its products and services in any way linked with the transmission, distribution or delivery of spam. Any customer found to be using Kapture Chat’s products for sending spam will be found in violation of this policy and our Terms of Service. Consequences for this policy’s violation include immediate account termination in addition to liability for civil, criminal or administrative penalties and damages.

What is Prohibited by Kapture Chat?

In compliance with the US CAN-SPAM Act and other global regulatory acts, Kapture Chat has prohibited the following:

  • Emails that are sent with invalid or forged headers

  • Use of Kapture Chat or other third party domain names to send emails without consent.

  • Subject lines bearing false or misleading information.

  • The use of harvested mailing lists or any list where the recipient has not given their consent before.

  • Any other means of deceptive addressing and misrepresentation.

Anti-Spam Legislation

Global regulations allow many governments to enforce laws with similar requirements. Penalties can include fines and/or jail time. We reserve the right to report the utilization of our services for spam to the relevant authorities necessary to guard our users.

How to Notify Us

If you've received any unsolicited email please notify us immediately at .

If Kapture Chat finds unauthorized or improper use, it may, all of sudden, take action in its sole discretion, including blocking messages from a specific Internet domain, mail server or IP address also as terminating any account found in violation of this policy.

Privacy

We, at Kapture Chat, are committed to your privacy. Please read the Privacy Policy or an explanation of how we collect, use, disclose, transfer, and store your data.

Please visit the General Data Protection Regulation (GDPR) for information on Kapture Chat’s commitment to protecting the personal information of our customers.

Data Security & Service Policy

Our Data Security & Service Policy applies to the Kapture Chat Platform underlying applications, platforms, and management of infrastructure components operated by Kapture Chat. Please read our Data Security & Service Policy for more information.