Privacy Policy — Digitruinx IT and Multimedia Solutions Private Limited

1. What We Collect

We collect information you provide directly to us when you use our services, register for an account, or contact us.

Identity data: Full name, email address, phone number, company name.
Usage data: Pages visited, features used, session duration, IP address, browser type.
Business data: Information you enter into the IT Portal SaaS (invoices, contacts, tickets, HR records).
Communication data: Messages sent via contact forms, support tickets, and email correspondence.
Payment data: Transaction IDs and payment status — we do not store full card numbers (processed by Razorpay).

2. How We Use It

We use collected data for the following purposes:

Providing and improving our services (IT Portal, AI Agents, Web/Mobile development).
Processing payments and sending invoices.
Sending transactional emails (account alerts, OTPs, system notifications).
Responding to support requests and inquiries.
Analysing usage trends to improve product performance.
Legal compliance and dispute resolution.

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

3. Data Storage

Your data is stored securely on Microsoft Azure cloud infrastructure. Where technically feasible, we prioritise India-based data centres (Azure Central India / South India regions) to comply with Indian data localisation guidance.

Business data entered into the IT Portal is tenant-isolated — no cross-tenant data access is possible. All data is encrypted at rest (AES-256) and in transit (TLS 1.3).

Backups are retained for 30 days. You may request deletion at any time (see Section 5).

4. Third-Party Services

We use the following third-party services which may process your data as sub-processors:

Razorpay — Payment processing (PCI-DSS compliant).
Twilio — SMS OTP and transactional messages.
Google Analytics — Website usage analytics (anonymised IP).
Microsoft Azure — Cloud hosting, storage, and AI services.
Anthropic (Claude) — AI agent processing. Inputs may be sent to Anthropic's API.
Google (Gemini) — AI features. Inputs may be processed by Google's API.

Each provider operates under their own privacy policy. We select providers with strong data protection commitments.

5. Your Rights Under DPDP Act 2023

Under India's Digital Personal Data Protection Act 2023, you have the right to:

Access — Request a summary of personal data we hold about you.
Correction — Request correction of inaccurate or incomplete data.
Erasure — Request deletion of your personal data (subject to legal retention obligations).
Grievance redressal — Lodge a complaint with our Grievance Officer (see Section 7).
Nomination — Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any right, email hello@digitruinx.com with the subject "Data Rights Request". We will respond within 30 days.

6. Cookies

We use cookies and similar technologies on our website:

Essential cookies: Required for login sessions and security. Cannot be disabled.
Analytics cookies: Google Analytics tracks usage in aggregate (anonymised). You may opt out via your browser or the Google Analytics opt-out extension.
Preference cookies: Store UI preferences (theme, language).

We do not use advertising or tracking cookies. You can clear cookies via your browser settings at any time.

7. Grievance Officer

In accordance with the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000, the details of our Grievance Officer are as follows:

Name: Aditya Sai
Designation: Founder & Grievance Officer
Company: Digitruinx IT and Multimedia Solutions Private Limited, India
Email: hello@digitruinx.com
Response time: Within 30 days of receipt of complaint.

If you have any concerns about how we process your personal data, please contact the Grievance Officer in the first instance.