Privacy Policy
Official Privacy Policy for INFOSKILLS TECHNOLOGY PVT LTD and its developer platforms, detailing data collection, processing, and security practices.
1. Introduction & Legal Entity
This Privacy Policy describes how INFOSKILLS TECHNOLOGY PVT LTD ("Company", "we", "us", or "our", trading as "InfoSkills Technology", CIN: INFOSKILLS TECHNOLOGY PVT LTD) collects, utilizes, stores, and protects personal and technical data when you visit our website (infoskillstechnology.com), client portals, blogs, or integrate our proprietary software products and API infrastructure (including NotifySetu and AuthSetu).
We operate strictly under applicable data protection regulations including the Digital Personal Data Protection Act (DPDPA), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).
- Legal Entity: INFOSKILLS TECHNOLOGY PVT LTD.
- Data collection is strictly limited to operational, engineering, and contractual necessity.
- We do not sell, rent, or trade your personal data to any third parties.
2. Information We Collect
Directly Provided Data: Contact information (full name, business email, phone number, company name), project requirements submitted via contact forms, billing details, and support inquiries.
Account & Developer Credentials: User identifiers, email addresses, hashed passwords, session tokens, API keys, and workspace metadata generated for our software platforms.
Technical & Usage Telemetry: IP addresses, browser types, operating systems, referring URLs, access timestamps, page interaction telemetry, and API latency metrics necessary for service reliability.
3. How We Use Your Data
To develop, deliver, and maintain custom software engineering solutions, mobile applications, and enterprise cloud architecture.
To operate our automated SaaS platforms (e.g. NotifySetu multi-channel notification dispatch and AuthSetu zero-trust authentication).
To process billing, invoices, subscription management, and payment reconciliation via our Merchant of Record and authorized payment gateways.
To deliver vital project updates, security advisories, technical documentation, and customer support communications.
- Direct delivery of contracted engineering milestones and software access.
- Automated security monitoring, infrastructure scaling, and fraud prevention.
4. Third-Party Sub-processors & Data Transfers
We engage trusted enterprise cloud infrastructure sub-processors under strict confidentiality and Data Processing Addendums (DPAs):
• Cloud Hosting & Edge: Google Cloud Platform (GCP), Vercel, and Cloudflare.
• Billing & Payment Infrastructure: Paddle.com Market Ltd (acting as Merchant of Record for international software transactions) and Razorpay Software Pvt. Ltd. (for domestic INR settlements).
• Developer Infrastructure & Telemetry: Firebase, GitHub, and AWS (Amazon SES / CloudWatch).
5. Data Security & Retention Standards
All communications are encrypted in transit using modern TLS 1.3 protocols. Sensitive secrets, API tokens, and database records are encrypted at rest using AES-256 GCM encryption.
We retain personal information only for as long as necessary to fulfill contractual obligations, provide active services, and satisfy legal, accounting, or regulatory requirements.
- End-to-end TLS 1.3 and AES-256 encryption across all storage and transport layers.
- Zero-trust access control with multi-factor authentication (MFA) enforcement.
6. Your Privacy Rights & Contact Information
You retain the right to request access to, rectification of, portability of, or complete erasure of your personal data stored within our systems.
For any privacy inquiries or statutory data requests, contact our Data Protection and Compliance Team at legal@infoskillstechnology.com or contact@infoskillstechnology.com.