Privacy Policy

🛡️ 1. Overview & Corporate Identity

This Privacy Policy sets out how MyDigi Technologies (Legal Enterprise Name: MYDIGI) ("we", "us", or "our") collects, uses, processes, stores, and safeguards personal information and proprietary business data when you visit our website (mydigi-app.vercel.app), interact with our services, submit project proposals, or enter into custom software development agreements.

As an enterprise Software Development & IT Services provider operating from India and serving global enterprise clients, we adhere to strict standards of transparency, confidentiality, and data protection under the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and international privacy principles (including the General Data Protection Regulation - GDPR where applicable).

📋 2. Information We Collect

We only collect information necessary to provide, manage, and deliver our software engineering and consulting services:

2.1 Information You Voluntarily Provide

• Contact & Identity Details: Full name, official work email, mobile or WhatsApp phone number, and company/organization name submitted via our Project Inquiry form or direct correspondence.
• Project Specifications: Technical briefs, business workflows, target platforms (iOS, Android, Web, Cloud), feature requirements, budget estimates, and deployment timelines.
• Client Staging Credentials (Under NDA): Access tokens, test database credentials, or API keys shared strictly for the purpose of integrating, building, and deploying your custom software.

2.2 Automated Technical & Diagnostic Data

• Website Diagnostics: IP address, browser type and version, operating system, referring URLs, and request timestamps collected for server security, DDoS defense, and uptime monitoring.
• Zero Sensitive Personal Data: We do not collect biometric data, government ID numbers (Aadhaar/PAN) from website visitors, or sensitive personal health or financial credentials.

⚙️ 3. How We Use Your Information (Purpose & Legal Basis)

We process personal and business data strictly under lawful grounds:

• Performance of a Contract: Designing, engineering, testing, deploying, and maintaining custom mobile apps, web applications, cloud backends, and ERP systems per client agreements.
• Project Discovery & Quotations: Analyzing your technical requirements to prepare architecture roadmaps, sprint estimates, and transparent fixed-price proposals within 24 hours.
• Client Communication: Providing weekly sprint updates, staging environment demos, invoice processing, and SLA support tickets.
• Security & Abuse Prevention: Ensuring the integrity and uptime of our cloud hosting, defending against malicious intrusions, and safeguarding client staging environments.
• Legal Compliance: Meeting statutory corporate recordkeeping, invoicing, and tax audit obligations under Indian law.

💎 4. 100% Client Intellectual Property (IP) & Code Ownership

At MyDigi Technologies (MYDIGI), client confidentiality and intellectual property rights are absolute:

• Zero Data Selling: We do NOT sell, rent, lease, trade, or monetize client data, source code, user databases, or proprietary algorithms to any third party or data broker.
• Full IP Ownership Transfer: Upon fulfillment of project milestones, 100% of all custom source code repositories, Figma designs, database schemas, and intellectual property belong exclusively to the client.
• Zero Cross-Client Data Sharing: Your project data, custom AI workflows, and business logic are isolated in private, encrypted repositories and never shared with or repurposed for other clients.

🤝 5. Non-Disclosure Agreements (NDA) & Confidentiality

We routinely execute mutual Non-Disclosure Agreements (NDAs) with enterprise clients prior to technical discovery or repository access. Under these agreements:

• All proprietary business plans, unreleased products, database records, and trade secrets are maintained in strict confidence.
• Access to client source code and staging infrastructure is restricted solely to assigned senior engineers bound by written confidentiality obligations.
• Client staging servers are protected by Role-Based Access Controls (RBAC) and IP whitelisting where requested.

🔒 6. Data Security & Cloud Infrastructure Standards

We apply defense-in-depth technical and organizational measures to ensure your data is safeguarded against unauthorized access, loss, or alteration:

• Encryption in Transit: All website traffic, client portals, and REST/GraphQL API endpoints enforce TLS 1.2+ / HTTPS encryption.
• Encryption at Rest: Staging databases and cloud backups are encrypted using industry-standard AES-256 bit encryption on Google Cloud, Firebase, and AWS infrastructure.
• Secret Management: API keys, production tokens, and environment variables are managed through encrypted secrets vaults and never hardcoded in client source code.
• Regular Security Reviews: Automated static code analysis, vulnerability scanning, and dependency updates are integrated into every software delivery sprint.

🌐 7. Third-Party Service Providers

To deliver modern cloud software, we partner with industry-leading enterprise service providers:

• Cloud & Hosting Infrastructure: Google Cloud Platform (Firebase), Vercel Inc., and Amazon Web Services (AWS) for hosting, database storage, and CDN delivery.
• Version Control & CI/CD: GitHub Inc. / GitLab Inc. for private enterprise source code repositories and automated deployment pipelines.
• Direct Client Communication: Google Workspace / Gmail for official email correspondence and Meta WhatsApp Business API for one-click real-time communication.
• Statutory Banking & Payments: Regulated Indian banking institutions, NEFT/RTGS, UPI, and verified payment gateways for official contract invoicing.

All third-party infrastructure providers are vetted for SOC 2 Type II, ISO 27001, and GDPR compliance and process data solely on our documented instructions.

🍪 8. Cookies & Tracking Technologies

Our corporate website utilizes only minimal, strictly essential technical cookies required for proper page rendering, CSRF protection, and user session management.

• We do NOT deploy intrusive third-party advertising tracking pixels, remarketing trackers, or cross-site tracking cookies.
• You may configure your browser to block or delete cookies at any time without impacting your ability to browse our services or contact our team.

🗑️ 9. Data Retention & Right to Erasure

We retain client contact details and project correspondence only as long as necessary to fulfill the business purposes for which they were collected or to comply with statutory accounting and tax regulations.

• Inquiry Records: General inquiries that do not proceed to a development engagement are purged within 12 months.
• Account & Data Deletion (Right to be Forgotten): You may request the deletion of your personal contact data or non-essential records at any time by emailing zivoonz@gmail.com. We process verified deletion requests within 30 calendar days.

⚖️ 10. Your Rights Under Data Protection Laws

Under the Digital Personal Data Protection Act, 2023 (DPDPA) of India and applicable international data protection frameworks, you are entitled to:

• Right to Access: Request confirmation and an itemized summary of personal data held about you.
• Right to Correction: Request the correction, updating, or completion of inaccurate or outdated information.
• Right to Erasure: Request the deletion of personal data processed without lawful statutory basis.
• Right to Withdraw Consent: Withdraw previously granted consent for marketing or newsletter communications at any time.
• Right of Grievance Redressal: Avail of an accessible grievance redressal mechanism regarding our processing of your personal data.

📬 11. Grievance Officer & Contact Information

If you have questions, feedback, or data privacy requests, or wish to exercise your legal rights under this Privacy Policy, please contact our compliance desk:

We reserve the right to update this Privacy Policy periodically to reflect technological advances, service additions, or statutory updates. Any changes will be posted on this page with an updated Effective Date.