Privacy Policy

This Privacy Policy explains how [Sofyrus legal entity name] ("Sofyrus", "we", "us", or "our") handles personal data when you visit our website, contact us, request a proposal, or engage us for technology services. It does not cover third-party websites or services that maintain their own privacy terms.

Depending on how you interact with us, we may collect:

• Identity and contact details, such as your name, business email address, company, and job title.
• Enquiry and project information that you submit through forms, email, meetings, or proposals.
• Technical information such as IP address, browser type, device data, and website activity.
• Commercial and billing information when you become a client.
• Recruitment information if you apply to work with us.

Please do not submit sensitive personal data unless we specifically request it for a lawful purpose.

We may use personal data to:

• Respond to enquiries, arrange consultations, and prepare proposals.
• Deliver, secure, support, and improve our software and consulting services.
• Manage client relationships, invoicing, records, and contractual obligations.
• Operate and improve our website, measure performance, and prevent misuse.
• Send relevant business communications where you have consented or where permitted by law.
• Meet legal, regulatory, security, and dispute-resolution obligations.

We process personal data for lawful purposes, including with your consent, to perform or prepare a contract, to meet legal obligations, and for other uses permitted under applicable law. Where processing is based on consent, you may withdraw that consent by contacting us. Withdrawal does not affect processing already carried out lawfully.

Our website may use essential cookies and limited analytics technologies to operate the site, remember choices, understand traffic, and improve performance. Where required, non-essential cookies will be used only after your choice is recorded. You can also manage cookies through your browser settings.

We do not sell personal data. We may share it only where reasonably necessary with:

• Cloud, hosting, analytics, communications, payment, and professional service providers.
• Team members and delivery partners who need access for an authorised business purpose.
• Government, regulatory, judicial, or law-enforcement authorities where legally required.
• A successor organisation in connection with a merger, reorganisation, or sale of business assets.

Service providers are expected to process data only for agreed purposes and with appropriate safeguards.

Sofyrus works with clients and service providers in multiple countries. Personal data may therefore be processed outside India. Where this occurs, we will use reasonable contractual, technical, and organisational safeguards and follow any transfer restrictions notified under applicable Indian law.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including contractual, accounting, legal, and security requirements. Retention periods may differ by record.

We use proportionate administrative, technical, and physical safeguards designed to protect data. However, no internet transmission or storage system can be guaranteed to be completely secure.

Subject to applicable law, you may request to:

• Access information about the personal data we process about you.
• Correct, complete, or update inaccurate personal data.
• Erase personal data that is no longer required for a lawful purpose.
• Withdraw consent and opt out of optional communications.
• Raise a grievance about our handling of your personal data.

We may need to verify your identity before acting on a request.

Our business services are not directed to children. We do not knowingly collect personal data from a child without the verifiable consent or other authorisation required by applicable law. Please contact us if you believe a child has provided personal data to us in error.

This template is intended to be aligned at a high level with applicable Indian data protection requirements, including the Digital Personal Data Protection Act, 2023 and related rules as they come into force, together with other applicable provisions of Indian information technology law. It must be reviewed against Sofyrus's actual data practices before publication.

Questions, requests, or grievances concerning this policy can be sent to:

Grievance Officer: [Name and designation]
Email: contact@sofyrus.com
Registered office: [Insert registered office address in India]

We will acknowledge and address grievances within the period required by applicable law.

We may update this Privacy Policy when our services, practices, or legal obligations change. The revised date will be shown at the top of this page. Material changes may also be communicated through the website or by another appropriate method.