Privacy & Data Protection Policy

1. Information We Collect

When you browse our portal, submit inquiries, or contract our software engineering services, we collect:

• Personal Identifiers: Full name, corporate email address, contact phone number, company name, GSTIN (for billing), and registered physical address.
• Technical & Telemetry Data: IP address, browser type, operating system, device identifiers, referral URLs, pages visited, and interaction timestamps.
• Commercial & Billing Data: Order history, package tiers, transaction reference IDs, and invoicing records. (Note: We do not store raw credit card numbers or banking passwords; all payments are processed through RBI-authorized payment gateways).

2. How We Use Your Information

We process your data strictly for legitimate operational purposes:

• To develop, host, configure, and maintain your web applications and industry portals.
• To execute authorized digital marketing, advertising campaigns, and search engine optimization.
• To deliver automated invoice receipts, renewal notices, and critical security alerts.
• To comply with statutory legal, tax, and regulatory compliance obligations under Indian law.

3. Data Protection & Confidentiality (NDAs)

We treat all proprietary client data, source codes, marketing campaign strategies, and customer lead databases as strictly confidential. All team members operate under rigorous non-disclosure agreements (NDAs). We implement industry-standard encryption protocols (SSL/TLS 1.3 in transit, AES-256 at rest) to prevent unauthorized access.

4. Third-Party Disclosures

We never sell, rent, or trade your personal or business data to third-party data brokers. Data is shared exclusively with verified service infrastructure providers under strict confidentiality:

• Cloud Infrastructure: Managed cloud hosting and database clusters (AWS, DigitalOcean, Microsoft Azure).
• Payment Processors: RBI-compliant payment gateways (Razorpay, Cashfree, Stripe, Paytm).
• Communication Gateways: WhatsApp Cloud API, transactional email providers (SendGrid, AWS SES), and SMS gateways.

5. Your Rights Under DPDP Act 2023

As a data principal, you have the right to access, rectify, update, or request erasure of your personal data maintained in our systems. To exercise these rights or file a grievance, contact our Data Protection Officer at privacy@iample.in.