How we handle the information you share with us.

Surya handles information in two distinct contexts. Understanding the line matters:

• +Site & Marketing Data — information collected when you visit suryatechnologies.com, fill out a contact form, request a quote, or correspond with us. This Privacy Policy governs that data.
• +Client Data — information we process on behalf of a client under a signed MSA, SOW, or BAA, including employee records, device assignments, and (where applicable) Protected Health Information. That data is governed by the contract with the client, not this Policy. The client is the data controller; Surya is the processor.

From the website and marketing, we may collect:

• +Identifiers you submit — name, business email, phone, company, role, message content
• +Engagement data — pages viewed, referring URLs, time on page, form interactions
• +Technical data — IP address, browser and device type, approximate location derived from IP, timestamps
• +Communications — emails, calendar invites, and meeting notes related to inquiries

We do not knowingly collect sensitive categories of personal information through the site.

• +Respond to inquiries and prepare quotes or proposals
• +Schedule and run meetings and discovery calls
• +Operate, secure, and improve our website
• +Send relevant operational and (where permitted) marketing communications
• +Comply with legal obligations and enforce our Terms

Where the GDPR or UK GDPR applies, we rely on the following bases: performance of a contract or pre-contractual steps at your request; our legitimate interest in running and improving the business; compliance with legal obligations; and, where required, your consent (which you may withdraw at any time).

We use a small number of first-party and third-party cookies for site functionality and analytics. Analytics providers process visit data to help us understand traffic patterns. You can control cookies through your browser settings; disabling them may affect site functionality.

We share site and marketing information with:

• +Service providers running our website, email, CRM, analytics, and trust center
• +Professional advisors (legal, accounting, insurance)
• +Acquirers or successors in connection with a merger, financing, or sale of assets
• +Authorities where required by law or to protect rights and safety

We do not sell personal information and do not share it for cross-context behavioral advertising.

Surya operates from the United States and works with a delivery team in Bangalore, India. Personal information may be transferred to and processed in those jurisdictions. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

We retain information for as long as needed for the purposes described, to comply with legal obligations, resolve disputes, and enforce agreements. Inquiry records are typically retained for the duration of the commercial relationship plus a reasonable archival period.

Surya's security and privacy practices are aligned to NIST 800-171 and HIPAA. A SOC 2 Type 2 report will be available on August 1, 2026 via our Vanta trust center. No system is perfectly secure; we cannot guarantee absolute security but we work to maintain controls appropriate to the data we handle.

Depending on your location, you may have the right to access, correct, delete, or port your personal information, to object to or restrict processing, and to withdraw consent. To make a request, email sales@suryatechnologies.com. We will verify your identity and respond within the period required by law. You may also have the right to lodge a complaint with your local supervisory authority.

Business Associate Agreements are available for engagements involving Protected Health Information. PHI is never used for our own marketing or analytics.

Our website is directed at businesses. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us so we can delete it.

We may update this Policy from time to time. The current version is posted at this URL with its effective date. Material changes will be communicated through the site or to contacts of record.

Surya Technologies, Inc.
Research Triangle Park, NC 27703
sales@suryatechnologies.com