Effective Date: April 1, 2026 Last Updated: May 4, 2026

This Privacy Policy describes how INDUS Technology, Inc. (“INDUS,” “we,” “us,” or “our”) collects, uses, and protects information in connection with the INDI (Intelligent Network for Data Integration) platform (“INDI” or the “Platform”).

INDI is an internal business platform. Access is restricted to INDUS employees and authorized contractors with guest access. This Policy applies to those authorized users.

1. Information We Collect

Account and Authentication Information

When you access INDI, we collect identity and authentication information through INDUS single sign-on, including your name, work email address, role, and access permissions.

User-Provided Content

INDI processes documents, text inputs, and other content that you upload, generate, or interact with on the Platform as part of your authorized work.

SMS Opt-In Information

If you choose to opt in to SMS notifications, we collect: – Your mobile phone number – The date, time, and method of your opt-in – Your notification preferences – A record of messages sent to you, delivery status, and any opt-out actions (such as replying STOP)

Usage and Technical Information

We automatically collect operational data such as access logs, IP addresses, browser and device information, timestamps, and feature usage. This information is used for security, troubleshooting, and Platform improvement.

2. How We Use Information

We use the information described above to:

  • Authenticate users and control access to INDI;
  • Operate the Platform’s features, including AI-assisted document processing, retrieval, and generation;
  • Send SMS notifications to users who have opted in (e.g., overdue report reminders, new assignment alerts, and similar operational notifications);
  • Maintain the security, integrity, and performance of the Platform;
  • Comply with INDUS contractual, legal, and regulatory obligations; and
  • Investigate and respond to security incidents or policy violations.

3. SMS Program Details

INDI sends SMS notifications only to authorized users who have explicitly opted in within INDI. The SMS program supports operational use cases such as:

  • Reminders for overdue reports
  • Notifications of new task or project assignments
  • Other internal team notifications (as the Platform expands)

Message frequency varies based on your role, assignments, and activity. Message and data rates may apply. You can opt out of SMS notifications at any time by adjusting your INDI notification preferences or by replying STOP to any SMS message. Reply HELP for assistance or contact indi-support@industechnology.com.

We do not share, sell, or rent mobile phone numbers or SMS opt-in information to third parties for marketing purposes. SMS-related data is used solely to operate the notification program and meet our recordkeeping obligations.

4. How We Share Information

INDI is an internal platform. Information processed by INDI is not shared externally except in the following limited circumstances:

  • Service providers: We use Microsoft Azure (hosting), Amazon Web Services (AI inference via Amazon Bedrock), and an SMS delivery provider (AWS End User Messaging) to operate the Platform. These providers process information on our behalf under contractual confidentiality and security obligations.
  • Legal and regulatory: We may disclose information when required by law, regulation, valid legal process, or applicable government contract.
  • INDUS business operations: Information may be shared internally with authorized INDUS personnel as necessary for platform administration, security, audit, HR, or contract performance.

We do not sell personal information.

5. Data Hosting and Security

INDI is hosted on Microsoft Azure infrastructure within INDUS-controlled tenants in the United States. The hosting environment is FedRAMP Moderate and CMMC Level 2 compliant.

We apply administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These include access controls, encryption in transit and at rest, audit logging, and security monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

6. Data Retention

We retain information for as long as necessary to operate the Platform, meet INDUS contractual and legal obligations, and support legitimate business needs. Specific retention periods vary by data type and applicable contract requirements. SMS opt-in records, message logs, and opt-out records are retained for a minimum of four (4) years after the last message sent or opt-out, consistent with industry practice and applicable telecommunications regulations.

When information is no longer needed, it is deleted, archived, or de-identified in accordance with INDUS data handling procedures.

7. Your Choices

  • SMS opt-in and opt-out: SMS notifications are strictly opt-in. You can change your preferences at any time within INDI or by replying STOP to a message.
  • Account access and corrections: To request access to or correction of information about you, contact indi-support@industechnology.com or your INDUS HR or IT representative.
  • Account closure: Your INDI access is tied to your INDUS employment or contractor relationship. Access ends when that relationship ends or when access is no longer required.

8. Children’s Privacy

INDI is an internal business platform. It is not directed to and is not intended for use by anyone under the age of 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or by other reasonable means. The “Last Updated” date at the top of this Policy indicates when it was most recently revised.

10. Contact

Questions, requests, or concerns about this Privacy Policy or your information should be directed to:

INDI Support indi-support@industechnology.com

INDI is an internal platform of INDUS Technology, Inc. This Privacy Policy applies only to the INDI Platform and not to other INDUS systems or websites.