Privacy Policy

1. Introduction

BITINFO Technology ("we," "us," or "our") is an IT services and software development company based in Surat, Gujarat, India. We provide web development, mobile application development, software solutions, cloud services, and digital transformation services to clients worldwide.

This Privacy Policy describes how we collect, use, process, and protect your personal information when you visit our website, use our services, or engage with us for project consultations. By accessing our website or using our services, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us, request a demo, or engage our services, we may collect:

• Personal Information: Full name, email address, phone number, and company details.
• Project Information: Details about your project requirements, business goals, technical specifications, and timelines.
• Communication Records: Emails, chat transcripts, and meeting notes related to your inquiry or project.
• Payment Information: Billing address, invoice details, and transaction records (we do not store full credit card numbers — payments are processed through secure third-party payment gateways).

2.2 Information Collected Automatically

When you browse our website, we automatically collect:

• Technical Data: IP address, browser type and version, device information, operating system, and screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, referral source, and pages accessed.
• Location Data: Approximate geographic location derived from your IP address (city/region level, not precise GPS).

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To understand your requirements, provide proposals, deliver IT solutions, and offer ongoing technical support.
• Communication: To respond to your inquiries, send project updates, share invoices, and provide customer support.
• Improvement: To analyze website usage patterns, improve our services, and enhance user experience.
• Marketing: To send newsletters, promotional offers, and updates about our services (you can opt out at any time).
• Legal Compliance: To comply with applicable Indian laws, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023.
• Security: To monitor and prevent fraud, unauthorized access, and other malicious activities.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function correctly (e.g., session management, security).
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Marketing Cookies: Used to display relevant advertisements and track campaign effectiveness.

You can control and manage cookies through your browser settings. Disabling cookies may affect certain features of our website.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information to third parties. We may share your data with:

• Service Providers: Third-party vendors who help us deliver our services (e.g., hosting providers like AWS/Azure, email service providers, payment gateways, analytics tools). These providers are bound by confidentiality obligations.
• Business Partners: With your consent, we may share relevant information with technology partners involved in your project.
• Legal Authorities: If required by law, court order, or government regulation, we may disclose information to authorized authorities.

All third-party providers are evaluated for their data protection practices before engagement.

6. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data in transit and AES-256 encryption for sensitive data at rest.
• Access Control: Role-based access control (RBAC) with multi-factor authentication (MFA) for internal systems.
• Secure Infrastructure: Cloud infrastructure on AWS/Azure with firewalls, intrusion detection systems, and regular security audits.
• Code Security: Regular code reviews, vulnerability scanning, and penetration testing for client projects.
• Employee Training: Mandatory data protection and security awareness training for all employees.

Despite our best efforts, no method of transmission over the internet is 100% secure. In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as per regulatory requirements.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

• Active Client Data: Retained for the duration of the project contract plus 5 years for audit and legal purposes.
• Inquiry Data: Contact form submissions retained for up to 2 years.
• Website Analytics: Aggregated and anonymized within 26 months; raw data deleted after 14 months.
• Marketing Data: Retained until you opt out or 3 years of inactivity, whichever comes first.

After the retention period, data is securely deleted or permanently anonymized.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India) and applicable international regulations (GDPR, CCPA), you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Opt Out: Unsubscribe from marketing communications at any time.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Withdraw Consent: Withdraw consent for data processing at any time.

To exercise any of these rights, please contact us at info@bitinfotechnology.com.

9. Children's Privacy

Our website and services are intended for businesses and individuals aged 18 years and above. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: