PRIVACY

POLICY.

-Nugro Tech Private Limited is a software development company incorporated in India. We operate globally, serving clients primarily in the USA, Canada, the United Kingdom, Australia and the UAE.

-When this policy says 'Nugro Tech Private Limited', 'we', 'us' or 'our' we mean Nugro Tech Private Limited. You can reach our privacy team at info@nugro.tech or call +91 90237 73830.

-Contact & enquiry data - Your name, email, company, phone number, and the content of messages you send us via contact forms, email or chat.

-Billing & payment data - Invoice details (name, billing address) processed by Stripe. We never store raw card numbers; Stripe is PCI-DSS compliant.

-Project & contract data - Briefs, signed agreements, NDA documents and communication records. Retained for the duration of the engagement plus seven years.

-Website analytics - Anonymised usage data via Google Analytics 4 and Microsoft Clarity. IP addresses are truncated before storage.

-Cookie data - Session and preference cookies. See our Cookie Policy for full details.

-Contract performance - Processing necessary to deliver services you have engaged us for.

-Legitimate interests - Responding to enquiries, improving our website, and communicating our services to existing clients.

-Legal obligation - Retaining financial records as required by applicable law.

-Consent - Where you have opted in to marketing emails or agreed to non-essential cookies.

-Respond to enquiries and schedule discovery calls.

-Deliver contracted software development services.

-Issue invoices and process payments.

-Send project updates and service-related notifications.

-Comply with legal and financial reporting obligations.

-Improve our website through anonymised analytics.

-We will never sell, rent or share your personal data with third parties for their own marketing.

-We only share data with trusted sub-processors: Stripe (payments, USA/EU), Google Analytics (analytics, USA), Microsoft Clarity (UX analytics, USA), Atlassian/Jira (project management), Slack (communication, USA), Vercel (hosting), and AWS (cloud infrastructure).

-All sub-processors are bound by data processing agreements and maintain appropriate international transfer safeguards.

-As an India-based company serving global clients, your data may be transferred internationally. For transfers to/from the EEA and UK we rely on Standard Contractual Clauses (SCCs) and UK IDTA addenda where required.

-Enquiry data (no project started): 12 months.

-Project records and contracts: Duration of engagement + 7 years.

-Financial and invoice records: 7 years (legal requirement).

-Analytics data: 14 months (Google Analytics default, anonymised).

-After these periods, data is securely deleted or anonymised.

-EU and UK residents (GDPR / UK GDPR) have the right to access, rectify, erase, restrict, or port their data, and to object to processing based on legitimate interests.

-California residents (CCPA / CPRA) have the right to know, delete, and opt out of any sale of personal information. We do not sell personal data.

-To exercise any right, email info@nugro.tech with the subject line 'Privacy Request'. We respond within 30 days. You may also lodge a complaint with your local data supervisory authority.

-We use TLS encryption in transit, access controls, regular security reviews, and staff training to protect your data. No method of internet transmission is 100% secure and we cannot guarantee absolute security.

-Our services are directed at businesses and professionals. We do not knowingly collect data from individuals under 16. If we become aware of such data it will be deleted promptly.

-We may update this policy from time to time. Material changes will be communicated via email to active clients or a notice on our website. The last-updated date at the top reflects the most recent revision.

-Nugro Tech Private Limited

-Email: info@nugro.tech

-Phone: +91 90237 73830

-We aim to respond to all privacy enquiries within 5 business days.