Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Contact & Enquiry Data: Name, business email address, phone number, and project/enquiry details you submit through the contact form on this website.
• Business Communication: Content of emails, messages, and other correspondence you send us directly.

1.2 Automatically Collected Technical Data

• Server Log Data: IP address, HTTP request method, page URL accessed, HTTP status code, browser user-agent string, and timestamps — collected automatically by our server infrastructure for security monitoring and operational diagnostics.

1.3 What We Do NOT Collect

• Payment card numbers, UPI IDs, or banking credentials — kelviontech.in does not process payments directly on this website. All payment processing for our products (Jamanvar, Vartalaap) occurs on their respective product domains through licensed payment processors.
• We do not deploy third-party advertising trackers, analytics SDKs (Google Analytics, Meta Pixel, etc.), or behavioural profiling tools on this website.

2. Purpose & Legal Basis for Processing

We process personal data for the following purposes:

• Responding to enquiries: To review, respond to, and follow up on project enquiries submitted via the contact form. (Legal basis: performance of pre-contractual steps at your request.)
• Security & fraud prevention: To detect and prevent unauthorised access, abuse, and malicious activity. (Legal basis: legitimate interest in protecting our systems and users.)
• Legal compliance: To comply with applicable Indian laws and regulatory requirements, including responding to lawful requests from authorities. (Legal basis: legal obligation.)

3. Data Sharing & Disclosure

We do not sell, rent, trade, or share your personal data with third-party advertisers, data brokers, or marketing platforms.

We may share data only in the following limited circumstances:

• Cloud Infrastructure Provider: Personal data is hosted on servers managed by Oracle Cloud Infrastructure (OCI), which provides secure infrastructure services. OCI processes data only as directed by us.
• Email Delivery: Contact form submissions trigger notification emails sent via SMTP; email transmission may pass through Google's SMTP infrastructure (Gmail).
• Legal Requirement: If required by a court order, government authority, or applicable Indian law, we may disclose personal data to the extent mandated.

4. Cookies & Tracking Technologies

This website uses only essential, functional cookies necessary for the site to operate (e.g., session identifiers for the admin panel — not applicable to public visitors). We do not use:

• Third-party advertising or retargeting cookies
• Social media tracking pixels
• Behavioural analytics or heatmapping tools

5. Data Security

We implement reasonable technical and organisational security measures to protect your personal data:

• All data transmitted between your browser and our server is encrypted via HTTPS/TLS.
• The server infrastructure is hosted on Oracle Cloud with firewall-protected access restricted to authorised personnel only.
• Database access is restricted to the application backend over private network interfaces — PostgreSQL is not exposed publicly.
• We apply standard practices for password hashing (Argon2/bcrypt) for all admin accounts.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of data transmitted to us.

6. Data Retention

• Contact form submissions are retained in our database for as long as reasonably necessary to manage the enquiry and any resulting client engagement, or for up to 2 years, whichever is earlier.
• Server access logs are retained for a maximum of 90 days for security monitoring purposes, after which they are automatically rotated.
• Data required to be retained for legal, accounting, or tax purposes will be kept for the period required by applicable Indian law (typically 7 years for financial records).

7. Your Rights Under the DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023 (India), you have the following rights with respect to your personal data we hold:

• Right of Access: Request confirmation of whether we process your personal data and receive a summary of such data.
• Right of Correction & Erasure: Request correction of inaccurate or incomplete data, or erasure of data where processing is no longer necessary, subject to legal retention obligations.
• Right of Grievance Redressal: File a complaint with our Grievance Officer (see Section 9 below).
• Right to Nominate: Nominate an individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact our Grievance Redressal Officer at kelviontech@gmail.com. We will respond within within 3 business days.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be published on this page with an updated "Last Updated" date. We encourage you to review this page periodically. Continued use of this website after an update constitutes your acceptance of the revised policy.

9. Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Redressal Officer:

10. Contact

For any questions about this Privacy Policy or your data: