Privacy Policy

Techsolace Studios("Techsolace", "Company", "we", "us", or "our"), operating from offices in Jaipur, Vizag, Bengaluru, and Kolkata, India, and Melbourne, Australia, provides bespoke software development, SaaS, custom CRM, AI integration, UI/UX design, and brand identity services (collectively, the "Services") through its website at https://techsolace.in (the "Website") and directly to clients. Techsolace is committed to protecting the privacy and personal data of every visitor, client, and individual whose personal data it handles.

This Privacy Policy is issued in compliance with:

• Section 43A of the Information Technology Act, 2000 read with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules");
• Rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, to the extent applicable to Techsolace's platforms;
• The Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules framed or to be framed thereunder; and
• Such other Indian data protection, consumer protection, and sectoral laws as may apply to Techsolace and its clients from time to time.

Where Techsolace processes personal data of individuals located outside India, including in Australia, Techsolace shall, to the extent applicable, also have regard to comparable overseas privacy legislation such as the Australian Privacy Principles under the Privacy Act 1988 (Cth). The primary governing framework for this Policy, however, is the law of India.

• Personal Data: data about an individual who is identifiable by or in relation to such data.
• Sensitive Personal Data or Information (SPDI): has the meaning assigned under Rule 3 of the SPDI Rules, and includes passwords, financial information such as bank account, credit card, debit card, or other payment instrument details, physical, physiological, or mental health condition, sexual orientation, medical records and history, and biometric information.
• Data Fiduciary: means Techsolace, where it alone or jointly with others determines the purpose and means of processing personal data.
• Data Processor: means Techsolace, where it processes personal data on behalf of and strictly under the written instructions of a client, such as while building, hosting, or operating a CRM or SaaS system for that client.
• Data Principal: the individual to whom the personal data relates.
• Service Data: personal data that a client of Techsolace, or such client's own customers, patients, students, tenants, or employees, submits, uploads, stores, or transmits through a CRM, SaaS product, or other custom software system that Techsolace designs, builds, hosts, or maintains for that client.
• Website: https://techsolace.in and its sub-domains.

This Policy applies to (a) visitors to the Website; (b) prospective and existing clients who submit inquiries, sign contracts, or communicate with Techsolace; (c) individuals whose personal data is processed by Techsolace as a Data Processor while building, deploying, or maintaining CRM systems, SaaS applications, or other custom software for Techsolace's clients; and (d) employees, contractors, and job applicants of Techsolace, to the limited extent addressed herein.

This Policy is organised into three parts, reflecting the different capacities in which Techsolace handles personal data:

• Part I deals with personal data that Techsolace itself collects and controls as a Data Fiduciary, such as Website visitor data, enquiry data, and marketing data.
• Part II deals with Service Data that Techsolace processes strictly on the written instructions of its clients while building or operating CRM and SaaS solutions, where Techsolace acts as a Data Processor.
• Part III addresses matters of general application to both Parts I and II.

Clauses 3–5.

3.1 Information You Provide Directly

• Enquiry and Contact Form Data: when you submit an enquiry through techsolace.in/contact or request a CRM demo, we collect your full name, email address, mobile number, project type (UI/UX Design, SaaS Development, AI Integration, Brand Identity, or Other), and the content of your message.
• Client Onboarding Data: when you engage Techsolace, we collect billing details, company name, GSTIN where applicable, authorised signatory details, and the communications exchanged during the onboarding, exploration, refinement, and ongoing-work stages of our engagement process.
• Payment Data: payments for our Services are processed through third-party payment gateways such as Razorpay and PhonePe. Techsolace does not store your full card number, CVV, or UPI PIN on its own servers. We may retain the last four digits of a payment instrument, payment status, invoice particulars, and transaction reference numbers for accounting and tax purposes.
• Communications: if you contact us by email, telephone (+91 90012 67169), WhatsApp, or social media (Instagram, LinkedIn), we retain records of that correspondence.
• Testimonials and Case Studies: if you permit Techsolace to feature your project, company name, logo, or testimonial on the Website or in our portfolio, only the information you approve will be used, and you may request its removal at any time.

3.2 Information Collected Automatically

• Technical and Log Data: IP address, browser type and version, device type, operating system, referring URL, pages visited, and date, time, and duration of visit.
• Cookies and Similar Technologies: as described in Clause 12 (Cookie Policy).
• Advertising and Analytics Data:where Techsolace runs its own Meta Ads or Google-based campaigns for client acquisition, pixels and conversion tags may be used to measure campaign performance. This is distinct from the Meta Ads integrations Techsolace builds into clients' CRM systems under Part II.

3.3 Information from Third Parties

• Referral Partners: if a partner or existing client refers you to Techsolace, that partner may share your name, company, and contact details with us.
• Social Media: where you interact with our official Instagram or LinkedIn pages, we may access publicly available profile information and the content of your interaction.
• Federated Sign-In: if sign-in through Google or LinkedIn is enabled on any client portal, those providers will share your name and email address with us upon your authorisation.

Techsolace uses the information described in Part I to:

• respond to project enquiries and prepare proposals or quotations;
• onboard, execute, and deliver contracted Services;
• raise invoices, process payments, and maintain statutory accounting and tax records under the Income Tax Act, 1961, the Central Goods and Services Tax Act, 2017, and rules made thereunder;
• communicate service updates, respond to support requests, and share relevant new offerings;
• improve the Website and our Services through aggregated and anonymised analysis;
• detect, investigate, and prevent fraud, unauthorised access, or misuse of our systems;
• comply with applicable law and any regulatory, judicial, or governmental order; and
• enforce our Terms of Service and protect the rights, property, and safety of Techsolace, our clients, and third parties.

Under the DPDP Act, Techsolace processes personal data on the basis of:

• your free, specific, informed, unconditional, and unambiguous consent, given through a clear affirmative action, for purposes such as marketing communications and non-essential cookies;
• "legitimate uses" recognised under Section 7 of the DPDP Act, including where you have voluntarily provided your personal data for a specified purpose, such as submitting the contact form, and have not indicated that you do not consent to its use, and for compliance with any judgment, order, or legal obligation; and
• performance of a contract to which you are a party, such as delivering the Services you have engaged Techsolace to provide.

Where consent is the basis for processing, you may withdraw it at any time with prospective effect by writing to the Grievance Officer at the address in Clause 19. Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal.

Clauses 6–11.

Techsolace designs, builds, and in many cases hosts or maintains bespoke CRM systems and SaaS platforms for clients across industries including EdTech, FinTech, healthcare, real estate, e-commerce, hospitality, logistics, and other professional services. In the course of that work, clients, acting as Data Fiduciaries, or as Data Processors themselves acting for their own principals, may store their customers', patients', students', tenants', or employees' personal data, and in certain sectors, Sensitive Personal Data or Information, within systems Techsolace builds or operates ("Service Data").

Where Techsolace hosts, operates, or has technical access to Service Data, it acts strictly as a Data Processor. Techsolace does not own Service Data, does not use it for independent purposes such as its own marketing, and processes it only in accordance with the written instructions of the relevant client and the terms of the applicable Master Services Agreement or Statement of Work.

Depending on a client's industry and configuration, Service Data processed through Techsolace's CRM and SaaS builds may include:

• customer or lead identity and contact data (name, phone number, email address, physical address);
• sales pipeline, order, and transaction data;
• payment references processed through integrated gateways such as Razorpay and PhonePe, without Techsolace storing full card or UPI credentials;
• communication logs synced through WhatsApp Business API or Gmail integrations;
• calendar and scheduling data synced through Google Calendar integration;
• shipping and logistics data synced through Delhivery integration;
• marketing and lead-source data synced through Meta Ads integration; and
• source-code and repository metadata synced through GitHub integration, relevant to SaaS engineering engagements.

Where a client's CRM is used in a regulated sector, such as healthcare or finance, that client remains solely responsible, as the Data Fiduciary, for obtaining valid consent from its own data subjects and for classifying and safeguarding any Sensitive Personal Data or Information in accordance with the SPDI Rules and any applicable sectoral law, including Reserve Bank of India directions on storage of payment data. Techsolace implements the technical and organisational safeguards agreed with the client to support such compliance, but does not independently determine the purpose of processing such Sensitive Personal Data or Information.

Certain CRM integrations built by Techsolace allow clients to connect large language model tools, including Claude AI and ChatGPT, for functions such as intelligent drafting and automated responses. Where a client enables such an integration:

• relevant Service Data may be transmitted to the applicable AI provider's servers, which may be located outside India, strictly to generate the requested output;
• Techsolace configures such integrations, where feasible, in a manner intended to prevent use of client data for third-party model training, consistent with the terms offered by the relevant AI provider, though the client remains responsible for reviewing and accepting that provider's own data-processing terms; and
• Techsolace does not use any client's Service Data to train its own models.

Techsolace processes Service Data solely to:

• provide the specific CRM or SaaS functionality instructed by the client, such as generating a lead record, sending a WhatsApp message, or creating an invoice;
• diagnose and resolve technical errors, with employee access to Service Data restricted, logged, and limited to what is necessary for that purpose;
• take backups and ensure business continuity of the client's system, as contracted; and
• comply with a legal obligation, or as otherwise instructed in writing by the client.

Techsolace will not access, view, or use Service Data for any purpose other than the above without the client's prior written consent, except where compelled by law.

Service Data is retained for as long as the client's engagement with Techsolace subsists. Upon termination of an engagement, Techsolace shall, in accordance with the applicable Master Services Agreement, either export the Service Data to the client in a commonly used format, or securely delete or anonymise the Service Data from active systems, ordinarily within ninety (90) days, and from encrypted backups within a further ninety (90) days, unless a longer retention period is required by law or agreed in writing with the client.

If you are an end customer, patient, student, or employee of a Techsolace client, and you wish to exercise a right of access, correction, or erasure over your personal data held within a CRM or SaaS system operated for that client, you should approach that client directly, since the client is the Data Fiduciary responsible for your data. Techsolace will provide reasonable technical assistance to its client to help that client respond to your request within the timelines mandated by applicable law.

Clauses 12–22.

The Website uses the following categories of cookies:

• strictly necessary cookies, required for core Website functionality;
• analytics cookies, such as those associated with our Google Tag Manager container, used to understand aggregate visitor behaviour; and
• marketing cookies, used to measure the performance of our own advertising campaigns.

You may disable cookies through your browser settings. Disabling cookies may affect the functionality of certain Website features, including the contact form and embedded video players.

Techsolace does not sell personal data or Service Data to any third party. Information may be shared with:

• sub-processors and vendors supporting our operations, including cloud hosting providers, payment gateways (Razorpay, PhonePe), communication platforms (WhatsApp Business API, Gmail), scheduling tools (Google Calendar), logistics partners (Delhivery), advertising platforms (Meta), source-control platforms (GitHub), and AI providers (Claude AI, ChatGPT), strictly to the extent necessary to deliver the relevant integration, and under contractual confidentiality obligations;
• professional advisors, including auditors, accountants, and legal counsel, on a need-to-know basis;
• government authorities, law enforcement agencies, or courts, where required under applicable law, including the Information Technology Act, 2000, and the Bharatiya Nagarik Suraksha Sanhita, 2023, or any judicial or regulatory order; and
• a successor entity, in the event of a merger, acquisition, or sale of all or substantially all of Techsolace's business assets, subject to that successor honouring the commitments in this Policy.

As Techsolace operates from India (Jaipur, Vizag, Bengaluru, Kolkata) and Australia (Melbourne), and as several integration partners, including cloud hosting and AI providers, may operate servers outside India, personal data and Service Data may be transferred to, stored in, or processed in jurisdictions outside India. Such transfers are made only to countries or entities not restricted by the Central Government under Section 16 of the DPDP Act, and are accompanied by appropriate contractual safeguards with the receiving party.

Techsolace implements reasonable security practices and procedures as mandated under Section 43A of the IT Act and the SPDI Rules, including:

• encryption of data in transit (TLS/SSL) and, where applicable, at rest;
• role-based access controls restricting data access to personnel on a need-to-know basis;
• regular vulnerability assessments and timely patching of production systems;
• secure code-review practices for custom software and CRM builds; and
• maintenance of audit logs for privileged access to production databases.

No method of electronic transmission or storage is completely secure. While Techsolace strives to protect personal data, it cannot guarantee absolute security, and information is transmitted to Techsolace at the sender's own risk.

Subject to the DPDP Act and its rules as notified and brought into force, and to the extent Techsolace acts as a Data Fiduciary in respect of your personal data, you have the right to:

• Right to Access Information: obtain a summary of the personal data Techsolace holds about you, the processing activities undertaken, and the identities of parties with whom it has been shared;
• Right to Correction and Erasure: request correction of inaccurate or incomplete personal data, and request erasure of personal data no longer necessary for the purpose for which it was collected;
• Right to Grievance Redressal: register a grievance with the Grievance Officer, and, if unsatisfied with the response, escalate the matter to the Data Protection Board of India, once constituted;
• Right to Nominate: nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity; and
• Right to Withdraw Consent: withdraw previously given consent at any time, as described in Clause 5.

To exercise any of these rights, please write to the Grievance Officer using the details in Clause 19. Techsolace will acknowledge the request and endeavour to resolve it within the timelines prescribed under applicable law.

The Website and Techsolace's Services are directed at businesses and professionals and are not intended for individuals below eighteen (18) years of age. Techsolace does not knowingly collect personal data from children. If you believe a child has provided Techsolace with personal data, please contact the Grievance Officer, and Techsolace will take steps to verify and delete such data.

The Website may contain links to third-party websites, including clients' portfolios and social media pages. This Policy does not apply to those third-party sites, and visitors are encouraged to review the respective privacy policies of such sites before sharing personal data with them.

In accordance with the Information Technology Act, 2000, the SPDI Rules, and the DPDP Act, Techsolace has designated a Grievance Officer to address complaints and grievances relating to the processing of personal data.

• Grievance Officer: Pranav Kumar, Co-Founder & COO, Techsolace Studios
• Designation: Grievance Officer, Techsolace Studios
• Email: [email protected]
• Address: Techsolace Studios, Jaipur, Rajasthan, India

The Grievance Officer shall acknowledge a complaint within twenty-four (24) hours of receipt and shall endeavour to resolve it within fifteen (15) days from the date of receipt, or such other timeline as may be prescribed under applicable law from time to time.

This Policy is governed by the laws of India. Subject to Clause 19 above, courts at Jaipur, Rajasthan shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy, without prejudice to any statutory right to approach the Data Protection Board of India or a consumer forum of competent jurisdiction.

Techsolace may update this Policy periodically to reflect changes in its practices, its Services, or applicable law. Material changes will be notified through a notice on the Website or by email, at least fifteen (15) days prior to the changes taking effect, wherever feasible. Continued use of the Website or the Services after such changes take effect constitutes acceptance of the revised Policy.

For any questions about this Privacy Policy or Techsolace's data-handling practices, please contact:

• Techsolace Studios
• Email: [email protected]
• Phone: +91 90012 67169
• Offices: Jaipur · Vizag · Bengaluru · Kolkata (India) · Melbourne (Australia)