Privacy Policy

This policy explains how we handle personal data collected through this website and through our own business dealings. It does not override any signed Master Services Agreement, Statement of Work or Data Processing Agreement between us and a client — where those conflict with this policy, the signed agreement applies.

1. Who we are

Apovix Technologies ("Apovix", "we", "us") is a software development studio based in Beerwah, Budgam, Jammu & Kashmir, India. We build custom software, websites and AI tools for businesses.

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for personal data collected through this website. Our full legal and registration details are listed on our About page.

Registered name: Apovix Technologies Private Limited

2. What this policy covers

This policy applies to:

• Personal data you give us through this website, including the enquiry form.
• Personal data you give us when you create an account on this website.
• Personal data you give us by email, phone or messaging when you contact us.
• Technical data collected automatically when you visit this website.

This policy does not apply to:

• Data belonging to a client's own end users that we handle while building or supporting software for that client. See section 11.
• Third-party websites we link to. Their own policies apply once you leave ours.

3. What we collect

3.1 Information you give us

When you submit the enquiry form on our homepage, we collect the fields on that form: your name, your email address, your company name (optional), the project type you select, and the message you write. We also record the time of submission and which page you sent it from.

That enquiry is stored in Google Cloud Firestore, where it can be read only by the two of us through a password-protected admin panel. It is not published anywhere, and the form does not send it to any third party.

If you contact us by email or phone instead, we hold whatever you choose to send us, which will normally include your name, your contact details and details of your enquiry.

3.2 If you create an account

Creating an account is optional — you can use every part of this website, and contact us, without one. If you do create one, we collect and store: your name, your email address, your phone number, and optionally your business name, your city, and a note about what you need built. We also record which sign-in method you used and when the account was created.

If you sign in with Google, we receive your name and email address from your Google account. We never receive your Google password. If you sign up with an email and password instead, the password is held by Firebase Authentication and is never visible to us.

You can see and change everything we hold about you at any time from your account page, and you can ask us to delete the account entirely under section 11.

3.3 Information collected automatically

This website is served by Google Firebase Hosting. Like any web server, it records a log entry for each request, which includes your IP address, your browser's user agent string, the page requested, the time of the request and the response status.

These logs are generated and held by Google as part of providing the hosting service. We use them only to keep the site running and secure. We do not use them to build a profile of you, and we do not combine them with anything you send us through the enquiry form.

3.4 Sensitive personal data

We do not ask for, and this website does not collect, passwords, financial account details, health information, biometric data or any other category treated as sensitive personal data under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Please do not send such information through the enquiry form.

4. Why we collect it, and on what basis

Under the DPDP Act we process personal data on the basis of your consent, given when you choose to submit the enquiry form or contact us, and for the legitimate purpose of responding to and servicing that enquiry. Specifically:

1. To read your enquiry, reply to it, and discuss a possible project with you.
2. To prepare proposals, quotes and contracts if the enquiry progresses.
3. To keep records required for accounting, tax and statutory compliance.
4. To keep this website secure and working, using server logs.

We do not sell personal data. We do not use enquiry data for advertising, and we do not add you to a marketing list unless you separately ask us to.

5. Cookies and analytics

We do not use Google Analytics, advertising, tracking pixels or any other analytics or marketing tool. Nothing on this site follows you to other websites.

We do use a small number of necessary technologies. The site cannot work without them, so they are not optional:

• Sign-in session — if you sign in, Firebase Authentication (Google) keeps you signed in using your browser’s own storage (IndexedDB). We never store your password; Firebase handles it.
• Security checks — Firebase App Check uses Google reCAPTCHA v3 to confirm that requests to our database come from this website in a real browser, which is how we keep our forms from being abused. reCAPTCHA sets Google cookies for this purpose.
• Your cookie choice — stored in your browser so we do not ask again on every page.
• The sign-in prompt — a counter in your browser recording how long you have browsed, so the request to sign in appears once rather than on every page load.
• Form details — if you start typing into our contact form, your name and company are held for the current browser tab only, so you are not asked for them twice when you create an account. They are cleared when you close the tab.

Analytics and marketing categories are switched off unless you allow them, and nothing currently uses them. You can change your choice at any time from Cookie settings in the footer of every page. Fonts are loaded from Google Fonts, which does not set cookies for this purpose.

6. Who we share information with

We do not sell or rent personal data. We share it only in the following situations:

6.1 Service providers

We rely on third-party services to host this website and to send and receive email. Those providers necessarily process the data that passes through them, on our instructions.

The services we currently rely on are:

• Google Firebase Hosting (Google LLC) — serves this website and generates the request logs described in section 3.3. Firebase privacy information.
• Google Fonts (Google LLC) — delivers the two typefaces used on this site. Your browser requests them directly from Google, which means Google receives your IP address as part of that request.
• Google Cloud Firestore (Google LLC) — the database that stores enquiries submitted through the form on our website.
• Firebase Authentication (Google LLC) — handles sign-in, both for visitors who create an account and for the two of us signing in to the admin panel. If you sign in with Google, Google necessarily knows you did so.
• Google Gmail (Google LLC) — the mailbox that receives enquiries sent to our published email address.

We do not currently use a CRM, a ticketing system, a form-handling service or an analytics provider. If that changes, this list will be updated before the service goes into use. This site is hosted on Google Firebase Hosting, which also serves its DNS. Google therefore processes the request data described in section 3 on our behalf, as our infrastructure provider.

6.2 Legal disclosure

We may disclose personal data where we are required to by Indian law, by a court, or by a government authority acting within its powers, or where disclosure is necessary to establish, exercise or defend a legal claim.

6.3 Business transfer

If the business is transferred, merged or reorganised, records may transfer with it. The receiving party would remain bound by this policy in respect of that data.

7. Where your information is stored

All the services listed in section 6.1 are operated by Google. Firebase Hosting serves this site from a global content delivery network, and Gmail stores our mail on Google's infrastructure. This means that your data may be stored and processed on servers outside India, including in the United States and other countries where Google operates data centres.

We disclose this because cross-border transfer must be stated under the DPDP Act. Google's own terms govern where and how it holds that data.

8. How long we keep it

We keep personal data only for as long as it is needed for the purpose it was collected for, and for as long as the law requires us to keep records.

• Enquiries that do not become projects: 12 months from our last contact with you, then deleted.
• Client records, contracts and invoices: 8 years from the end of the financial year they relate to. This is not a choice we make — Indian tax and company law require accounting records to be kept for that long.
• Server logs: kept by our hosting provider under its own schedule, currently 30 days. We do not keep a separate copy of them.

When a retention period ends, we delete the data or anonymise it so it can no longer identify you.

9. How we protect it

We apply reasonable security practices appropriate to the size of our operation and the sensitivity of the data we hold. These include serving this website over HTTPS, limiting access to enquiry data to the two founders, using access-controlled accounts on the services we rely on, and removing data we no longer need.

No method of transmission or storage is completely secure. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required under the DPDP Act.

10. Your rights

Under the DPDP Act you have the right to:

1. Access — ask what personal data of yours we hold and how it is being used.
2. Correction — ask us to correct data that is inaccurate, and complete data that is incomplete.
3. Erasure — ask us to delete your personal data, unless we are required by law to keep it.
4. Withdraw consent — withdraw consent you previously gave, at any time. Withdrawal does not affect processing already carried out lawfully, and it may mean we can no longer respond to your enquiry.
5. Grievance redressal — complain to our Grievance Officer about how we have handled your data, and receive a response.
6. Nominate — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to our Grievance Officer using the details in section 14. We will respond within 30 days of receiving your request. We may need to verify your identity before acting on a request.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Client project data

When we build or support software for a client, we may be given access to data that belongs to that client and to its end users. In that situation the client is the Data Fiduciary and we act as a Data Processor on the client's instructions. We do not use that data for our own purposes.

Handling of that data is governed by the agreement signed with the client, including any Data Processing Agreement, and not by this policy. If you are an end user of software we built for someone else, please contact that organisation directly.

12. Children

Our services are sold to businesses and this website is not directed at children. We do not knowingly collect personal data of anyone under 18. If you believe a child has given us personal data, contact our Grievance Officer and we will delete it.

13. Changes to this policy

We may update this policy as our business, our tools or the law change. The current version is always the one published on this page, and the date at the top shows when it last changed. Continued use of this website after a change means you accept the updated policy.

14. Grievance Officer

In line with the DPDP Act and the Information Technology Act, 2000, we have appointed a Grievance Officer to handle complaints about the processing of personal data.

Name

Mir Aijaz Rasool

Designation

Founder & Grievance Officer

Email

contact@apovix.online

WhatsApp

Message us on WhatsApp

Postal address

Apovix Technologies
M-28, 1st Floor
Kandoora, Beerwah
Jammu & Kashmir 193411, India

Please write "Data Grievance" in the subject line so it reaches the right person quickly.