Summary
This policy explains how we collect, use and protect personal data through this website (fortemapai.com), the Fortemap AI application and our dealings with customers, trial users, prospects and their contacts. We do not sell personal data. Our privacy practices are designed with GDPR, PDPA (Singapore, Malaysia), UAE PDPL and India DPDP requirements in mind.
Who we are
Fortixa Innovations OPC Pvt. Ltd., a company incorporated in India · CIN U62099UT2026OPC022265 · Registered office: B-2, IT Park, Sahastradhara Road, Dehradun, Uttarakhand – 248001 · contact@fortemapai.com
We are the controller of the personal data described in this policy, except where we process data for a customer as a processor (see below). Fortixa Innovations also runs its company website at fortixainnovations.com, which has its own privacy policy.
Privacy and data protection contact
For any privacy question or request, including as our data protection officer (DPO) contact and grievance contact, email contact@fortemapai.com. We reply within one working day.
What we collect
- What you send us: your name, work email, company, role, message and, on demo requests, your time zone.
- Account and workspace data: name, work email, company, role, sign-in and usage data for your Fortemap workspace, and billing contacts.
- Recruitment data you put into Fortemap: candidate, client and contact records, CVs, notes, documents and messages. For this data your organisation is the controller and we act as its processor (see below).
- Technical data: IP address, browser and device type, and pages visited. Necessary data is collected to run and secure the site; analytics data only with your consent.
Why we use it and our lawful bases
| Purpose | Data | Lawful basis (GDPR) |
|---|---|---|
| Replying to enquiries and demo requests | Contact and message data | Legitimate interests in answering you; steps at your request before a contract |
| Running your Fortemap workspace, support and account messages | Account and usage data | Contract |
| Free trial and onboarding | Account data | Steps at your request before a contract |
| Website analytics (Google Analytics) | Technical data, analytics cookies | Consent, which you can withdraw at any time |
| Keeping the site and services secure, preventing abuse of forms | Technical data | Legitimate interests |
| Meeting legal, tax and accounting duties | Records we must keep | Legal obligation |
Where the law that protects you works mainly on consent, as Singapore's and Malaysia's PDPA, the UAE PDPL and India's DPDP Act often do, we rely on the consent you give when you send us your details, or on an exception that law provides, such as legitimate interests or the performance of a contract.
Data we process for our customers
Recruitment data that a customer puts into Fortemap belongs to that customer, who is its controller. We process it as a processor, only on the customer's documented instructions and under our data processing agreement. Candidates and contacts who want to use their rights over that data should contact the firm that holds it; we help our customers respond. We do not use customer data to train AI models.
Who we share it with
We share personal data only with service providers that help us run our business, such as hosting, email and analytics providers, under contracts that require them to protect it and use it only for us. Google Analytics runs only after you accept analytics cookies. Fonts load from Google Fonts. We may disclose data where the law requires it. Details are available on request: contact@fortemapai.com.
Cross-border transfers
We are incorporated in India and work with people in the Gulf, Southeast Asia and elsewhere, so personal data may be transferred to and processed in countries other than yours. When we transfer personal data, we use the safeguards the applicable law requires, for example the European Commission's standard contractual clauses for data from the EU or EEA, the UK addendum for data from the UK, and contractual protections of a comparable standard for transfers under Singapore's and Malaysia's PDPA and the UAE PDPL. You can ask us for details at contact@fortemapai.com.
How long we keep it
- Enquiries and demo requests that do not lead to work: up to 24 months after our last contact.
- Workspace data: while your subscription is active, then for up to 90 days so you can export it, unless the law requires us to keep it longer.
- Analytics data: as set in Google Analytics (we use the shortest practical retention).
- Your cookie choice: 12 months, then we ask again.
Your rights
Your rights depend on the law that protects you. You can use them free of charge by emailing contact@fortemapai.com. We may ask you to confirm your identity before we act, and we reply within the time the law allows (for example, one month under the GDPR).
| If you are in | Your main rights | Where to complain |
|---|---|---|
| The EU, the EEA or the UK (GDPR / UK GDPR) | Access, rectification, erasure, restriction, data portability, objection (including to direct marketing), withdrawing consent at any time, and not being subject to decisions based solely on automated processing that significantly affect you. | The data protection authority where you live or work. |
| Singapore (PDPA) | Access to your personal data and how it has been used in the past year, correction, and withdrawing consent. | The Personal Data Protection Commission (PDPC). |
| Malaysia (PDPA, as amended in 2024) | Access, correction, withdrawing consent, preventing processing likely to cause damage or distress, preventing direct marketing, and data portability where the law provides it. | The Personal Data Protection Commissioner. |
| The UAE (Federal Decree-Law No. 45 of 2021, PDPL) | Information about processing, access, correction, erasure, restriction, objection, data portability and withdrawing consent. Free zones such as the DIFC and ADGM have their own data protection laws. | The UAE Data Office, or the regulator of your free zone. |
| India (Digital Personal Data Protection Act, 2023) | Access to a summary of your data, correction, completion, updating and erasure, grievance redressal, and nominating someone to act for you. | Us first (grievance contact above), then the Data Protection Board of India. |
Cookies
Strictly necessary cookies keep the site working. Analytics cookies are off until you accept them. See our cookie policy, or to change your choice.
Security
We use technical and organisational measures appropriate to the risk, including access control per mandate, role-based permissions and audit logs in the application. See our security page.
Children
Fortemap and this website are for businesses and are not directed at children.
Changes to this policy
We may update this policy. The date at the top shows the latest version, and we tell workspace admins about material changes by email.
Questions about this document? Email contact@fortemapai.com or use our contact page.