Home
ElyAgents

Last updated · 17 May 2026

Privacy Policy

How ElyAgents collects, uses, stores, and protects information when you visit this site or use our products, ElySpace PMS, School ERP, ElyHMS, JK Tour CRM, ElyIPTV Billing, ElyWA, and ElySpace Hosting.

1. Who we are

ElyAgents is a software suite operated by ElySpace, a private business established in 2018 with its operations based in Kashmir, India. We build and run six production SaaS products and a growing line of AI agents for small and mid-sized businesses. References in this document to "ElyAgents", "we", "us", or "our" mean the ElySpace team and its affiliates that operate the ElyAgents platform.

This policy explains what personal data we process, why we process it, how long we keep it, who we share it with, and the rights you have over your information. It applies to the ElyAgents website (elyagents.com), customer accounts, and any product or service that links to this policy.

2. The data we collect

We try to collect the minimum information needed to run the service you signed up for. The categories below cover everything we handle.

  • Account data: name, business name, email, phone number, role, and login credentials.
  • Billing data: billing address, GSTIN where applicable, last four digits of the card, and invoice history. Card numbers are handled directly by our payment processor and never stored on our servers.
  • Customer content: the data you and your team put into ElyAgents products, patient records in ElyHMS, students in School ERP, stock in ElySpace PMS, subscriber lists in ElyIPTV Billing, and so on. You are the controller of this data; we process it on your instructions.
  • Usage data: IP address, browser, device, pages visited, feature usage, and request timestamps. Used for security, abuse prevention, and product improvement.
  • Support data: messages, screenshots, and attachments you send to contact@elyagents.com or via in-app chat.

3. How we use it

  • To deliver, maintain, and support the products you subscribe to.
  • To bill you, prevent fraud, and meet our tax and accounting obligations.
  • To investigate abuse, debug issues, and protect customers from malicious activity.
  • To send service messages (renewal reminders, downtime notices, security alerts).
  • To send product updates and offers, you can opt out at any time from any such email.

We do not sell personal data. We do not train AI models on your customer content. We do not use customer content for advertising.

4. Who we share with

We share data only with vendors who help us run the service, and only the minimum needed. Each sub-processor is bound by a written data-processing agreement.

  • Hosting & infrastructure: AWS, Hetzner, and our managed cPanel/VPS providers.
  • Payments: Razorpay, Stripe, and any PCI-DSS certified processor we operate with locally.
  • Communication: transactional email and SMS providers used for OTPs, invoices, and alerts.
  • Analytics & error reporting: aggregated, privacy-preserving tools used to monitor uptime and crashes.
  • Legal: when required by a valid court order or to protect rights, safety, or property.

5. How long we keep it

Customer content is retained for the life of your subscription and for 30 days after cancellation, after which it is permanently deleted from primary systems and within 90 days from encrypted backups. Invoices and tax records are retained for eight years as required by Indian law. Logs are retained for 90 days.

6. Your rights

Depending on where you live, you have some or all of the following rights:

  • Access, request a copy of the personal data we hold about you.
  • Correction, ask us to fix data that is wrong or incomplete.
  • Deletion, ask us to delete your account and the data linked to it.
  • Portability, receive your data in a structured, machine-readable format.
  • Objection, object to processing for direct marketing at any time.

To exercise any of these rights, write to contact@elyagents.com. We respond within 30 days.

7. Security

We follow industry-standard controls: TLS in transit, AES-256 at rest, role-based access on production systems, least-privilege admin access, daily encrypted backups, and an annual third-party security audit (most recent: 2026). No system is perfectly secure, so we also publish a vulnerability disclosure address at contact@elyagents.com.

8. Cookies

We use a small number of first-party cookies for authentication, session state, and basic analytics. We do not use cookies for cross-site advertising. You can clear or block cookies in your browser at any time; some features may stop working if you do.

9. Children

ElyAgents products are sold to businesses, not consumers, and are not directed at children under 18. School ERP processes student data on behalf of the school as the controller; we never collect that data directly from a child.

10. International transfers

Our primary infrastructure is hosted in India. Where backup or analytics processing happens outside India, we use providers that contractually commit to equivalent protection.

11. Changes

If we change this policy in a material way, we will email account owners at least 14 days before the change takes effect. The "Last updated" date at the top of this page always reflects the latest revision.

12. Contact

Questions, complaints, or requests under this policy: