Privacy Policy

This policy explains how Nirvanta Solutions (“we”, “us”) handles personal information submitted through this website. It applies to the website and its enquiry form only.

1. Information we collect

When you submit an enquiry, we collect:

• Your full name, work email address and company name;
• Your phone number and preferred contact method, if you choose to provide them;
• Your business type, the service you are interested in and, optionally, an approximate budget;
• The project description you write;
• The date and time you gave consent for us to use these details to respond.

To protect the form from abuse, we also process a one-way, salted hash derived from your IP address. We do not store your raw IP address, and these hashes are automatically deleted within about 24 hours.

Public pages of this website do not use advertising or analytics cookies. The administration area uses strictly necessary authentication cookies for authorised staff only.

2. How we use your information

• To read, assess and respond to your enquiry;
• To keep a record of our communication and any follow-up you have asked for;
• To prevent spam and abuse of the enquiry form.

We do not use enquiry details for marketing newsletters, and we do not sell or share your information for marketing purposes. If we ever offer marketing communications, we will ask for that consent separately.

3. Legal basis and consent

We process enquiry information on the basis of the consent you give when submitting the form, for the purpose of responding to your enquiry. You may withdraw consent at any time by contacting us (see section 8); this does not affect processing carried out before withdrawal.

4. How we protect your information

• Enquiries are stored in a managed PostgreSQL database with row-level security.
• Only authorised administrators can view enquiries, after signing in.
• Connections to this website are encrypted using HTTPS.
• Secret credentials are kept on the server and are never sent to your browser.

5. Service providers

We use the following categories of providers to operate this website:

• Website hosting (for example, Vercel);
• Database and authentication hosting (Supabase);
• DNS and network services (Cloudflare);
• Transactional email delivery, if enabled (for example, Resend).

These providers may process data outside India. [Review required: list the specific providers, regions and transfer safeguards that apply to the production deployment.]

6. How long we keep information

• Open enquiries are kept while we are actively in discussion with you.
• Closed enquiries (won or lost) are deleted approximately 24 months (730 days) after their last update.
• Submissions identified as spam are deleted after 30 days.
• When an enquiry is deleted, we keep only its reference number and the date and reason for deletion, so we can show that a deletion request was completed.

If an enquiry leads to a project, information may be retained for longer under the separate agreement for that project.

7. Your rights

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023, once its relevant provisions are in force), you may ask us to:

• Confirm whether we hold information about you and provide a summary of it;
• Correct inaccurate or incomplete information;
• Delete your enquiry information;
• Withdraw the consent you gave.

We will verify requests before acting on them. Deletion requests are processed by an authorised administrator, who erases every enquiry associated with your email address.

8. Contact

To exercise your rights or ask a question about this policy, contact us through the enquiry form and mention “privacy request” along with your enquiry reference number if you have one. [Review required: name a grievance officer or contact person if required by law.]

9. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it was last changed.