Privacy Policy

1. Who we are

Gupta Technologies (“we”, “us”, “our”) is a software studio and product lab based in India. We operate guptatechnologies.in, build web and mobile products (HisabKitab, Authenticator, MdReader), and provide web modernization and data engineering services. You can contact us at info@guptatechnologies.in.

2. What data we collect

We collect the following types of data:

• Contact information: name, email, phone number, and company details you provide via our contact form or email.
• Service enquiry details: information about your current technology stack, project requirements, and timeline shared through our contact form.
• Product usage data: account information, billing details, and usage patterns when you use our products (HisabKitab, Authenticator, MdReader).
• Analytics data: page views, session duration, referral source, and interaction events collected via Google Analytics 4 and PostHog. This data is aggregated and does not identify you personally.
• Technical data: IP address, browser type, and device information collected automatically when you visit our site.

3. How we use your data

• To respond to your service enquiries and provide quotes.
• To deliver, maintain, and improve our products and services.
• To process payments and manage your product subscriptions (HisabKitab).
• To send transactional emails (welcome messages, billing notifications, support replies).
• To analyze website and product usage to improve user experience.
• To comply with legal obligations under Indian law, including the Digital Personal Data Protection Act, 2023.

4. Legal basis for processing

We process your personal data on the following legal bases: your consent (when you submit our contact form or sign up for a product); performance of a contract (when you purchase a product or service); our legitimate interests (analytics and product improvement); and compliance with legal obligations.

5. Data sharing

We do not sell your personal data. We share data only with:

• Service providers: Vercel (hosting), Google Analytics (analytics), PostHog (product analytics), Resend (transactional email), Razorpay (payment processing). Each processes data on our behalf under contractual obligations.
• Legal authorities: when required by Indian law or valid legal process.

6. Data retention

We retain contact form submissions for up to 24 months. Product account data is retained for the duration of your subscription plus 90 days. Analytics data is retained for up to 26 months. You may request earlier deletion at any time.

7. Your rights

Under the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your personal data.
• Withdraw consent for processing at any time.
• Lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email info@guptatechnologies.in.

8. Security

We use HTTPS (TLS 1.3) for all traffic, hashed passwords via NextAuth, and environment-secured API keys. Payment data is processed by Razorpay and never touches our servers. No method of transmission or storage is 100% secure, but we follow industry best practices to protect your data.

9. Cookies

We use essential cookies for authentication and analytics cookies (GA4, PostHog) to understand website usage. Analytics cookies are anonymized and do not track personally identifiable information. We do not use advertising cookies.

10. Our own DPDP posture

We sell DPDP Act engineering to our clients, so we hold ourselves to the same standard on our own systems: consent is captured per purpose and can be withdrawn at any time (see section 4); we collect only the fields listed in section 2, not broader profiles; retention periods are stated and enforced (section 6); and the erasure and access rights in section 7 are honoured on request. This is our own operational posture, not a legal certification — see our DPDP Act engineering page for what we build for clients ahead of the Act's Phase 2 deadline.

11. Changes to this policy

We may update this policy as our products and services evolve. Material changes will be posted on this page with an updated date.

12. Contact

Questions about this policy? Email info@guptatechnologies.in or write to us at the address listed on our contact page.