Privacy Policy

1. Information We Collect

We collect information necessary to deliver high-performance software engineering, web application development, mobile applications, and consultancy services:

• Direct Inquiries & Account Data: Full name, professional email address, phone/WhatsApp number, company name, service selections, project budgets, and technical requirements submitted through our contact forms or discovery calls.
• Technical & Telemetry Data: Browser user-agent, device category, IP address, referral URLs, and interactions captured on our edge telemetry to ensure site performance, DDoS mitigation, and system availability.
• Payment & Transaction Identifiers: Transaction reference IDs, invoice numbers, and payment status generated via authorized payment gateways (Cashfree / Stripe). We never store raw debit/credit card numbers or CVV.

2. How We Use Your Data

We process your personal and project information strictly for legitimate commercial and technical purposes:

• Preparing technical architecture blueprints, sprint roadmaps, and formal development estimates.
• Executing engineering milestones, staging deployments, and communicating project updates.
• Generating milestone invoices, verifying bank settlement receipts, and processing tax compliance under Indian GST laws.
• Monitoring platform security, preventing fraudulent activity, and resolving technical inquiries.

3. Client NDA & Source Code Confidentiality

Strict Non-Disclosure Guarantee: All proprietary business logic, product algorithms, mockups, database schemas, and intellectual property shared with Insalink are protected under reciprocal Non-Disclosure Agreements (NDAs). We never sell, lease, or distribute your intellectual property to any competitor, vendor, or third party.

4. Security Standards & Data Storage

Pursuant to Section 43A of the Information Technology Act, 2000, and SPDI Rules 2011, Insalink maintains comprehensive reasonable security practices:

• HTTPS/TLS 1.3 encryption in transit for all data transferred to and from our domains.
• AES-256 encryption at rest for database records hosted on enterprise cloud infrastructures (Supabase, AWS, Google Cloud).
• Strict role-based access control (RBAC) and dual-factor authentication on all administrative dashboards.

5. Third-Party Integrations & Cloud Infra

To deliver seamless edge computing, payment processing, and messaging, we work with trusted enterprise vendors that adhere to strict data protection standards:

• Cloud Infrastructure: Supabase (PostgreSQL), Vercel (Edge Network), AWS.
• Payment Gateway: Cashfree Payments India / Stripe for authorized bank transactions.
• Communication: WhatsApp Business API / Resend for automated transactional notices.

6. Your Rights Under DPDP Act 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you hold the right to:

• Request a summary of personal data held about you and processing activities undertaken.
• Request the correction, completion, or updating of inaccurate data.
• Request the erasure of personal data that is no longer necessary for contractual or statutory purposes.
• Withdraw consent previously granted for optional communications.