Your data, plainly explained.

01Who we are

This website, agneyasolutions.com, is run by Agneya IT Solutions, a software design and engineering company based in Surat, Gujarat 395001, India. In this policy, “Agneya”, “we” and “us” mean Agneya IT Solutions, and “you” means anyone who visits the site or contacts us through it.

For the personal data described here, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act): we decide why and how it is processed. You are the Data Principal. This policy also follows the Information Technology Act, 2000 and the rules made under it.

This policy covers the website and enquiries made through it. Work we do for clients is covered by the agreement for that project. See client project data.

02What we collect

What you give us

When you send the “Tell us what you need” form on our homepage, we receive:

• Name and email address (required)
• Company and phone number (optional)
• Your message and the services you selected
• The page you sent the form from

If you email or call us directly, we receive whatever you choose to include, along with your email address or phone number.

What is collected automatically

• Usage data through Google Analytics: pages visited, time on page, referring site, approximate location (city level), device and browser type.
• Technical logs kept by our hosting provider: IP address, request time and browser details, used to deliver the site and protect it from abuse.

We do not ask for, and do not want, sensitive data such as passwords, financial account details, health information, government ID numbers or biometric data through this website. Please do not put it in the form.

03Why we use it

• To answer your enquiry. We use your contact details and message to reply, scope the work you asked about and send you a proposal. This is based on your consent, which you give by ticking the box on the form and sending it.
• To run and improve the site. We look at analytics in aggregate to see which pages help people and which do not.
• To keep the site secure. We use technical logs and a hidden spam trap on the form to block bots and abuse.
• To meet legal obligations. If you become a client, we keep records needed for tax and accounting law.

We will not send you marketing emails or newsletters unless you separately ask for them. We do not make automated decisions about you, and we do not use your enquiry to train AI models.

Visitors in the EU and UK: under the GDPR, we rely on your consent for enquiries, and on our legitimate interest in running a secure, working website for analytics and logs.

04Cookies and analytics

The site itself does not set advertising or tracking cookies. The one exception is Google Analytics 4, which sets first-party cookies (named _ga and _ga_*) so it can tell new visitors from returning ones. They last up to two years.

We do not use Google Analytics data to identify you, and we do not use it for advertising.

To opt out, you can block cookies in your browser settings or install Google’s Analytics opt-out add-on. The site works the same either way.

05Who we share it with

We do not sell, rent or trade personal data. We share it only with the service providers (Data Processors) that run parts of the website for us. Each one processes data only to provide its service:

We may also disclose data if Indian law requires it, for example in response to a valid order from a court or government authority, or to protect our rights in a legal dispute.

Data stored outside India

Some of these providers store data on servers outside India, including in the United States and the European Union. The DPDP Act allows this except to countries the Government of India restricts. We use only established providers that publish their own security and privacy commitments.

06Client project data

When we build or maintain software for a client, we may have access to that client’s systems and the personal data of their users. In that work, the client is the Data Fiduciary and we act as their Data Processor. We:

• use that data only to do the work the client asked for, under the client’s instructions;
• give access only to the team members who need it, and remove access when the work ends;
• do not copy production data to personal devices, and use test or masked data wherever we can;
• return or delete the data when the engagement ends, unless the law requires us to keep it.

If you are a user of one of our clients’ products, please contact that client first about your data. The confidentiality and data-handling terms for each project are set out in its own agreement.

07How long we keep it

• Enquiries that do not become projects: up to 24 months from your last message, so we have the context if you come back. After that we delete them.
• Client contact and billing records: for as long as Indian tax and accounting law requires, usually 8 years from the end of the financial year.
• Google Analytics data: no more than 14 months, after which Google deletes it automatically.
• Hosting logs: kept for the short period set by our hosting provider.

If you ask us to delete your data sooner, we will, unless the law requires us to keep it.

08Security

Security is part of what we sell, so we apply the same standard to our own site:

• the whole site, including the form, is served only over HTTPS;
• form input is checked, length-limited and stripped of anything that could run as code before it is stored or emailed;
• passwords and keys are kept in encrypted environment settings, never in the code;
• access to the enquiry inbox and spreadsheet is limited to the team that answers enquiries.

No system is perfectly secure. If a breach affecting your personal data happens, we will tell you and the Data Protection Board of India as the DPDP Act and Rules require: what happened, what data was involved, what we are doing about it, and what you can do.

09Your rights

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we hold about you and what we do with it;
• Correct and update: fix anything inaccurate or incomplete;
• Erase: have your data deleted when it is no longer needed for the purpose you gave it;
• Withdraw consent: at any time, as easily as you gave it. Withdrawal does not undo anything done before it;
• Nominate: name another person to use these rights for you if you die or become unable to;
• Grievance redressal: complain to us, and then to the Data Protection Board of India.

Visitors in the EU and UK also have the GDPR rights to restrict or object to processing, to data portability, and to complain to their local supervisory authority.

How to make a request

Email connect@agneyasolutions.com with the subject line “Data request”. Tell us which right you want to use, and send it from the email address you used to contact us, so we can confirm it is you. If you write from a different address, we may ask one or two questions about your original enquiry before acting.

There is no charge. We will confirm we have your request within 7 days, and aim to resolve it within 30 days.

10Children

This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18, and we do not track or target children. If you believe a child has sent us their details, email us and we will delete them.

11Grievance officer

If you have a concern about how we handle your personal data, contact our Grievance Officer. They also handle data requests under the DPDP Act:

• Grievance Officer: Agneya IT Solutions
• Email: connect@agneyasolutions.com
• Phone: +91 81604 08834
• Address: Agneya IT Solutions, Surat, Gujarat 395001, India

We will acknowledge your complaint within 48 hours and resolve it within 30 days.

If you are not satisfied with our response, you can complain to the Data Protection Board of India under the DPDP Act, 2023.

12Changes to this policy

If we change what we collect or how we use it, for example by adding a new tool to the site, we will update this page and the “Last updated” date at the top. If a change affects data you have already given us, we will email you before it takes effect.

Our Terms of Use explain the rules for using this website.