1. Who we are
This Privacy Policy explains how Techpyro Novagen Private Limited (CIN U62099UT2025PTC019558), trading as Techpyro (“Techpyro”, “we”, “us”, “our”), with its registered office at at Floor 3, 323, Vivek Vihar, Ranipur More, Jwalapur, Haridwar, Uttarakhand 249407, India, collects and uses personal data when you visit www.techpyro.com, contact us, or work with us. For this data, Techpyro is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its counterpart under the EU and UK GDPR.
2. What this policy covers
- •Covered: visitors to our Website; people who contact us by form, email, phone or WhatsApp; clients and their staff; people who hire our developers; job applicants.
- •Client project data: when we build or run software for a client, we may handle personal data of that client's end users. We do this on the client's instructions, as their processor. The client's privacy policy applies to that data, but section 9 explains how we protect it.
3. What personal data we collect
| Source | Data |
|---|---|
| You give it to us (enquiry form, email, phone, WhatsApp, meeting) | Name, email, phone number, company, job title, project type, message, and any files you attach. |
| When you become a client | Billing name and address, GSTIN, PAN (for tax invoices and TDS), payment records, contract documents, and the names and contact details of your team members we work with. |
| Care Plan verification (only if needed) | A business document (GSTIN or company registration) or a government ID of the authorised person. Aadhaar is never required; if you choose to share it, please mask the first 8 digits. |
| Automatically, when you use the Website | IP address, browser and device type, pages visited, referring site and approximate location, through cookies and Google Analytics (see Section 12), and server security logs. |
| From others | Details shared by freelance platforms (such as Upwork, Fiverr or Freelancer) when you hire us there, by people who refer you, or that are publicly available on professional networks such as LinkedIn. |
| Job applicants | CV, contact details, experience, portfolio links and interview notes. |
We collect only what we need for the purposes below. If you contact us through a freelance platform, we follow that platform's rules on collecting contact details.
4. Why we use it
| Purpose | Legal basis (India: DPDPA / EU & UK: GDPR) |
|---|---|
| Reply to enquiries and prepare proposals | Your consent / steps before a contract |
| Deliver projects, custom code, maintenance and dedicated developer services | Performance of our contract with you (legitimate interests under the GDPR too) |
| Invoicing, tax and accounting (GST compliance) | Legal obligation |
| Verify identity, KYC, signing, and paying partners | Legal obligation / legitimate interests |
| Website security, bugs and fixing problems | Legal obligation (IT Act) / Legitimate interests |
| Website analytics to improve our content | Consent (cookie banner) |
| Send news, offers and updates | Consent; you may opt out at any time |
| Show your project in our portfolio | Consent / contract; you may opt out (Section 6) |
| Recruitment | Consent / steps before a contract |
| Respond to legal requests and protect our rights | Legal obligation / Legitimate interests |
5. Consent and withdrawing it
Where we rely on consent, you can withdraw it at any time by emailing contact@techpyro.org or using the unsubscribe link in our emails. Withdrawing is as easy as giving consent. It does not affect what we did before, and we may still need some data to complete a contract or meet the law.
6. Portfolio and case studies
We may show your company name, logo, the live URL and screenshots of the public parts of your project in our portfolio, unless you ask us not to or the project is under an NDA. We publish testimonials, people's names or photos, and any figures about your business only with your permission. We never publish confidential code, data or private secrets. To remove an item, email contact@techpyro.org.
8. International transfers
We are based in India, and some of our service providers have data in other countries, for example Singapore and the United States. Transfers from India follow the DPDP Act, including any countries the Government of India restricts. For data of people in the EU or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism offered by the provider.
9. Client project data
When we process personal data inside a client's product, we:
- use it only to build, test, host, support or back up that product, as the client instructs;
- keep it confidential, limit access to team members who need it, and use test data where possible;
- use safe processors (such as cloud hosting) only under similar restrictions;
- tell the client without undue delay if we become aware of a breach affecting that data;
- return or delete the data when the engagement ends, unless the law requires us to keep it.
10. How long we keep it
| Data | Keeping |
|---|---|
| Enquiries that do not become projects | 12 months after our last contact |
| Client contracts, invoices and payment records | As long as India tax and company law requires (generally 8 years) |
| Project source code, files and backups | For the project and 3 years after it ends for support and legal claims |
| ID documents used for verification | Deleted within 30 days of verification; we keep only a note that verification was done |
| Client project data (processor role) | Until the contract ends, then returned or deleted within 90 days, or as agreed |
| Code / file backups | Rolling backups for the above data: deleted within 90 days after primary data is deleted |
| Server and security logs | At least 180 days, as required by CERT-In |
| Analytics data | Up to 14 months (Google Analytics setting) |
| Marketing list | Until you unsubscribe |
| Job applications | 12 months, unless you agree to a longer period |
11. How we protect it
We use reasonable security safeguards as required by the DPDP Act and the IT (SPDI) Rules, 2011, including HTTPS everywhere, access controls with two-factor authentication, encryptions, least-privilege access for team members, regular updates and backups, and confidentiality obligations for staff and providers.
13. Children
Our Website and services are for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it. If a client asks us to build a product for children, the client is responsible for obtaining verifiable parental consent as the DPDP Act requires, and we will help design it to support that.
14. Your rights
Everyone, under the DPDP Act, can ask us to:
- •give a summary of the personal data we hold about you, and how we use it, and the parties we shared it with;
- •correct, complete, update or erase your personal data;
- •withdraw consent;
- •have a grievance addressed by our Grievance Officer, and then complain to the Data Protection Board of India if you are not satisfied;
- •nominate another person to exercise your rights if you die or become unable to do so.
EU & UK Residents: If you are in the EU or UK, you also have the right to restrict or object to processing (including direct marketing), to data portability, and to complain to your local data-protection authority.
California Residents: If you are in California, you can ask what personal information we collect and how we use it, and ask us to delete or correct it. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for using your rights.
To use any right, email contact@techpyro.org or our Grievance Officer. We may ask you to confirm your identity. We will respond within 30 days.
15. Grievance Officer
We acknowledge complaints within 2 working days and aim to resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
16. Other websites
Our Website links to other sites and services, such as WhatsApp, LinkedIn and freelance platforms. Their own privacy policies apply when you use them.
17. Changes to this policy
We may update this policy when our services, tools or the law change. The date at the top shows the latest version. For important changes, we will show a notice on the Website and email active clients.
18. Contact us
Techpyro
Techpyro Novagen Private Limited (trading as Techpyro)