Trust centre
Your data, protected and in your control.
How we secure our products, how we handle personal data, and the terms you use them under — in plain language.
Security at Expontra
Strong sign-in
Passkeys first, authenticator-app codes as a second factor, one-time recovery codes. Re-confirmation before sensitive actions.Encryption
TLS 1.3 in transit, HSTS on every domain, and encryption at rest for databases, files and backups.Tamper-proof records
Issued invoices and approved documents are locked by the database itself; every change is written to an append-only audit trail.Least access
Role-based permissions in every product. Staff access to customer data is limited, named and logged.Privacy policy
This policy explains how Expontra Technologies Private Limited (“Expontra”, “we”) handles personal data when you visit our websites or use CertOpz, DineOpz, Expontra ID and Expontra Billing. It is written to meet India’s Digital Personal Data Protection Act, 2023, and the UAE’s Federal Decree-Law No. 45 of 2021 on personal data protection.
What we collect
- Account data — name, work email, phone, role, and sign-in credentials (passkeys and authenticator secrets are stored only in protected form).
- Business data you enter — customers, items, orders, cases, documents and invoices. You control this data; we process it on your behalf.
- Enquiries — what you send us through forms, email or chat.
- Technical data — device, browser and security logs needed to keep the service safe.
Why we use it
To provide and secure the service, bill for it, support you, meet legal and tax obligations, and — only with your consent — send product news. We do not sell personal data, and we do not use your business data to advertise to anyone.
Who we share it with
Only with service providers that help us run the products (such as cloud hosting, email delivery and payment processing), under written contracts, and with authorities where the law requires it.
How long we keep it
For as long as your account is active, then for the period tax and accounting law requires for invoices and records. Website enquiries that don’t become customers are deleted after 24 months.
Your rights
You can ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you. Write to privacy@expontra.com; we’ll respond within the period the law sets. You may also complain to the Data Protection Board of India or the UAE Data Office.
Terms of service
- Subscription. Plans renew automatically for the same term unless either party gives 30 days’ written notice before renewal.
- Payment. Invoices are due within 15 days. Taxes apply as shown on the invoice.
- Your data. You own the business data you put into our products. You can export it during your subscription; after it ends we keep it for a short grace period and then delete it.
- Acceptable use. Don’t misuse the service, attempt to break its security, or use it for unlawful activity.
- Availability and support. We work to keep the products available and supported as described in your plan and support level.
- Liability. Each party’s liability is limited as set out in the full Terms.
- Law. These terms are governed by the laws of India, with the courts of Andhra Pradesh having jurisdiction.
Responsible disclosure
If you believe you’ve found a security issue in any Expontra product or website, email security@expontra.com with the steps to reproduce it. Please give us reasonable time to fix it before sharing it publicly, don’t access or change other people’s data, and don’t run tests that degrade the service.
We’ll acknowledge your report, keep you updated while we fix it, and credit you if you wish. We won’t take legal action against good-faith research that follows these rules. Our contact details are also published at /.well-known/security.txt.
Expontra Technologies Private Limited · CIN U62099AP2026PTC125487 · Plot No. 29, Old SBI Colony, Ramachandra Nagar, Anantapur 515001, Andhra Pradesh, India