Download PDF

Cookies Policy

Created On: September 15, 2025

Last Reviewed On: September 15, 2025

1. Introduction and Scope

Wytmode Cloud Private Limited (“Wytmode”, “we”, “our”, or “us”) uses cookies and similar technologies to operate, secure, and improve our websites, web applications, and services. This Cookies Policy explains what these technologies are, why we use them, and how users can control them across all Wytmode digital properties, including the public marketing sites and authenticated applications for Wytmode Workforce, PlanInsta, and Wytmode Passwords Manager. This Policy applies worldwide and should be read together with the Wytmode Privacy Policy and the Terms of Use to understand how we process personal data that may be collected via these technologies.

This Policy covers all domains and subdomains under our control that link to it, as well as embedded experiences such as in-product help widgets or analytics that may set or read identifiers on your browser or device. It applies whether you access our services as a visitor, trial user, or paying customer, and whether you access them from a desktop browser, a mobile browser, or a web-view inside a mobile app. Where local law imposes stricter requirements, we will comply with those requirements and will adapt consent flows, retention periods, and user controls accordingly.

This Policy is designed for global compliance, including the EU ePrivacy Directive and GDPR, the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Brazil’s LGPD, Canada’s PIPEDA, Singapore’s PDPA, Australia’s Privacy Act, and India’s Digital Personal Data Protection Act, 2023 and rules as notified. If there is any conflict between this Policy and a mandatory local law applicable to your use, the stricter protection for the user shall prevail, and we will implement reasonable technical and organizational measures to honor that standard.

2. What Are Cookies and Similar Technologies

Cookies are small text files placed on your browser or device when you visit a website or use a web application. They are widely used to make websites work, to keep sessions secure, to remember preferences, and to provide aggregated analytics. Some cookies are set by Wytmode (first-party cookies); others are set by third parties whose services we use or embed (third-party cookies). Cookies can be session-based, which expire when you close your browser, or persistent, which remain until they are deleted or expire automatically after a defined period.

We also use related technologies that achieve similar purposes. Local storage and session storage are browser-based mechanisms that store data on your device for preferences, caching, and performance. Web beacons and pixels are small transparent images or code snippets that help us measure engagement with content or emails. Software development kits (SDKs) and application programming interfaces (APIs) may be used within our applications to enable authentication or analytics. Device identifiers and fingerprinting-resistant techniques may be employed strictly to deliver core functionality or security measures, and we avoid techniques that are prohibited or restricted by applicable law.

In this Policy we collectively refer to cookies and similar technologies as “cookies” for simplicity. References to reading, writing, or storing identifiers on your device should be understood to include these related mechanisms where they provide equivalent functionality.

3. Legal Basis and Consent

Our use of cookies is grounded in different legal bases depending on the category of cookie and the jurisdiction. Strictly necessary cookies are essential to provide a service you have requested, such as logging into an account, securing a session, or processing a payment; we use these on the basis of contractual necessity or legitimate interests that are not overridden by your rights and freedoms. Functional, performance, and marketing cookies are used with your consent where required by law. We implement a consent banner and preference manager that presents clear choices, avoids pre-ticked boxes, and allows you to accept, reject, or customize settings at any time.

You may withdraw or change your consent at any point through the cookie settings interface available on our sites and apps. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal, but it may impact features that depend on the cookies you disable. Where a browser or device supports Global Privacy Control (GPC) or comparable mechanisms, we make reasonable efforts to recognize such signals and treat them as opt-out preferences for analytics and marketing cookies in jurisdictions where this is legally required.

4. Categories of Cookies We Use

Strictly necessary cookies enable core functions such as page navigation, session continuity, authentication, load balancing, fraud prevention, and the protection of forms against abuse. Without these cookies, our websites and applications cannot function properly or deliver the features you explicitly request. These cookies do not store information that directly identifies you beyond what is essential to provide the service, and they are generally set to expire within short timeframes consistent with security best practices.

Functional cookies remember choices you make, including language, region, accessibility preferences, and user interface customizations. They help us deliver a consistent and personalized experience across sessions without requiring you to repeatedly configure the same settings. Where feasible, these cookies are scoped to the least amount of data necessary and are retained for limited periods aligned to the preference lifetime or until you delete them or change your settings.

Performance and analytics cookies help us understand how visitors interact with our properties, which pages are most and least popular, how users navigate, and where errors occur. We use this information in aggregate to improve reliability, performance, and usability. Where analytics data could reasonably be used to identify you, we apply techniques such as IP masking, truncation, and pseudonymization and we restrict access on a need-to-know basis. We do not build profiles for unrelated purposes from analytics data without obtaining appropriate consent.

Marketing and measurement cookies support our legitimate business interest in communicating with prospective and existing customers. These cookies may measure the effectiveness of campaigns, prevent duplicate advertising, or limit the frequency with which you see a message. We avoid intrusive tracking and do not sell personal data. In jurisdictions where consent is required for marketing cookies, we will not set them unless you have opted in through our preference manager, and you may opt out at any time.

5. Product-Specific Use of Cookies

For Wytmode Workforce websites and portals, cookies are primarily used to maintain secure sessions for authenticated employer and candidate dashboards, to remember locale preferences, and to measure aggregate usage to improve content and service quality. We may integrate scheduling, calendaring, or support widgets that set their own cookies strictly to provide the requested functionality, and such widgets are governed by agreements that require equivalent privacy safeguards.

For PlanInsta, our business planning software-as-a-service, cookies are used to authenticate users, maintain session state, remember workspace and template preferences, and provide error diagnostics and performance analytics. We design PlanInsta to avoid storing sensitive plan content within cookies or local storage beyond what is technically necessary for caching or offline resilience, and the application encrypts data in transit and applies server-side access controls that do not depend on cookie-resident content.

For Wytmode Passwords Manager, our password storage service, cookies are limited to secure authentication, session continuity, and device trust where you explicitly opt in. Vault secrets, encryption keys, and stored credentials are never written to cookies or browser storage in plaintext. We employ a zero-knowledge design philosophy under which vault contents are encrypted client-side and remain unintelligible to Wytmode’s servers. Session cookies are flagged with HttpOnly, Secure, and appropriate SameSite attributes to reduce exposure to cross-site scripting or request forgery. Disabling strictly necessary cookies for Passwords Manager will prevent login and vault operations from functioning.

6. Data Collected via Cookies

Depending on your settings and the product in use, cookies may collect technical data such as browser type and version, device type and operating system, referring/exit pages, approximate location derived from IP, session identifiers, authentication tokens, error codes, and timestamps. Where analytics is enabled, we may also record page views, click paths, feature usage, and performance metrics such as load times and resource consumption. We do not use cookies to intentionally collect sensitive categories of personal data, and we do not combine cookie-derived data with offline data to build profiles without an appropriate legal basis and transparency.

We retain cookie-related data only for as long as necessary to fulfill the purposes described in this Policy. Session cookies typically expire when your browser is closed or after a security-aligned idle timeout. Persistent cookies have fixed lifetimes that vary by purpose; analytics cookies are commonly retained for periods such as three, six, or twelve months, and marketing cookies may persist for similar or shorter durations depending on consent and jurisdictional limits. We periodically review retention schedules to ensure they remain proportionate, and we shorten or anonymize data where feasible.

7. Third Parties and International Transfers

Some cookies may be set by third parties providing services to us, such as hosting, authentication, performance monitoring, security, analytics, payments, customer support, or embedded content. We select providers that implement robust privacy and security controls, and we bind them by data processing agreements that require compliance with applicable law, restrict onward disclosure, and mandate appropriate safeguards for international transfers. Where cookie-derived data is transferred across borders, including to countries that may not have the same level of data protection as your home jurisdiction, we rely on mechanisms such as Standard Contractual Clauses, adequacy decisions, or equivalent legal tools to protect your data.

Because third-party providers may update their cookies from time to time, we maintain a dynamic registry within our cookie preference manager or help center that describes the categories and typical lifetimes of the cookies that may be set when using our properties. The registry is designed to give you an up-to-date understanding without requiring you to accept cookies for the sole purpose of learning about them, and you can adjust your preferences at any time.

8. Security of Cookies and Similar Technologies

We treat cookie security as a core part of our broader information security program. Where technically supported, we set the Secure attribute on cookies to ensure they are transmitted only over HTTPS, the HttpOnly attribute to reduce exposure to client-side scripts, and the SameSite attribute to limit cross-site request contexts consistent with functional requirements. We minimize the use of long-lived tokens, rotate and invalidate session identifiers after logout or periods of inactivity, and monitor for anomalous usage patterns that may indicate credential stuffing or session hijacking attempts. Organizationally, we limit access to cookie-derived data to personnel with a business need and we log access for auditability.

We regularly evaluate our implementations against evolving browser standards, platform changes, and regulatory guidance. If a vulnerability is identified that could materially impact cookie security or privacy, we follow our incident response procedures, which include assessment, containment, remediation, and, where required by law, notification to affected users and regulators within applicable timeframes.

9. Managing Your Preferences

You can manage your cookie choices through the cookie banner and settings interface presented on our sites and applications. The interface allows you to accept all categories, reject non-essential categories, or configure categories granularly, and your selections are honored on the specific browser and device you used when making them. If you clear your cookies, use a different browser, or change devices, you will need to set your preferences again. In addition to our preference manager, most browsers allow you to block or delete cookies through their settings; please note that disabling strictly necessary cookies will impair core functionality and may prevent you from signing in or completing transactions.

Where supported, we endeavor to recognize Global Privacy Control (GPC) signals and comparable mechanisms and to treat them as opt-out choices for analytics and marketing categories in relevant jurisdictions. For mobile webviews and embedded contexts where browser controls are limited, we provide in-app settings or links to equivalent preference management. If you receive marketing emails from us, you can unsubscribe using the instructions provided in the message; this does not control web cookies, which must be managed through the mechanisms described above.

10. Children’s Use and Age-Related Controls

Our services are not directed to children below the age thresholds set by applicable law, and we do not knowingly place non-essential cookies on the browsers or devices of users who are not legally permitted to provide consent. If we become aware that we have collected cookie-related data from a child in violation of applicable law, we will take steps to delete such data and to disable non-essential cookies for that user. Parents or guardians who believe that their child has interacted with our services in a way that requires attention should contact us using the details in the Contact section so that we may assist promptly.

11. Relationship to Privacy Policy and Your Rights

This Cookies Policy should be read in conjunction with the Wytmode Privacy Policy, which describes in detail how we process personal data, the purposes for which we use it, and the rights available to you under global privacy laws. Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, as well as the right to data portability and to withdraw consent. Requests that involve data collected or derived from cookies will be honored in accordance with the Privacy Policy and applicable law. Exercising these rights will not adversely affect your ability to use strictly necessary cookies required to provide services you request, though it may affect features that depend on optional cookies.

12. Changes to This Policy

We may update this Cookies Policy to reflect changes in our technologies, our use of service providers, browser standards, or legal requirements. When we make material changes, we will provide prominent notice, such as updating the effective date at the top of this page, presenting a banner or in-product notice, or seeking renewed consent where the changes require it. Continued use of our properties after an update signifies your acknowledgment of the revised Policy to the extent permitted by law. We maintain records of prior versions and will make them available upon request where required.

13. Contact Information

If you have questions about this Cookies Policy, about how we use cookies in any Wytmode property, or if you wish to exercise your rights or raise a concern, you may contact us at legal@wytmode.com or by phone at (+91) 8884557972. You may also write to us at our registered office: Wytmode Cloud Private Limited, #63, H Colony, 2nd Main, Indira Nagar, 1st Stage, Bengaluru (Karnataka, India) – 560038. We will review and respond within the timeframes required by applicable law and will work with you to resolve any issue in a fair and transparent manner.