Privacy Policy

01Information We Collect

We collect only the information necessary to evaluate your project, execute software engineering deliverables, and maintain business communications:

• Contact & Business Identification: Name, business name, work email address, WhatsApp/telephone number, and billing/tax address provided through our contact forms or onboarding questionnaires.
• Project Specifications & Code Requirements: Architectural diagrams, wireframes, functional requirements, brand logos, API credentials, or staging server accesses you furnish to enable development.
• Billing & Transaction Records: Invoiced amounts, payment status, UPI transaction reference numbers, or bank transfer slips. Note: Oyucon does NOT collect or store complete credit/debit card numbers or bank account PINs. All payment transactions are processed through certified, PCI-DSS compliant third-party gateways (such as Razorpay, Cashfree, or Stripe).
• Technical Web Telemetry: Anonymized server logs, browser user agents, referring URLs, and device types gathered during visits to our site to ensure uptime and security.

02Client Confidentiality & Non-Disclosure (NDA)

In software development, intellectual ideas and trade secrets are your most valuable assets. Oyucon operates under strict confidentiality protocols:

03How We Use Collected Data

Information collected is used strictly for legitimate commercial and engineering purposes:

• Delivering website packages (Starter, Business, E-Commerce) and custom applications.
• Generating formal estimates, Statements of Work (SOW), advance payment invoices, and GST receipts.
• Communicating sprint updates, demo staging links, and scheduling review calls via WhatsApp or email.
• Providing ongoing warranty support, bug fixes, and server maintenance during your complimentary support period.
• Preventing fraudulent inquiries, cyber threats, and unauthorized access to our digital infrastructure.

04Third-Party Sharing & Disclosure

We will never monetize, lease, or distribute your personal or proprietary information. Disclosures are limited solely to the following operational necessities:

• Infrastructure & Service Providers: Trusted cloud hosts, domain registrars, and payment processors (e.g., AWS, Vercel, Razorpay) operating under strict data processing agreements.
• Legal Mandates: Where disclosure is strictly required by Indian law, judicial decree, or law enforcement investigations under the Information Technology Act.

05Technical & Organizational Security Measures

We implement industry-leading security practices:

• Encryption in Transit & At Rest: All data transmitted to our website and APIs is secured using modern TLS 1.3 / SSL encryption.
• Credential Sanitization: Any production credentials or API keys provided for deployment are stored in secured environment vaults and deleted upon project handover.
• Two-Factor Authentication (2FA): Enforced across all internal developer accounts, repositories, and administrative interfaces.

06Your Rights (DPDPA 2023 Compliance)

Under India's Digital Personal Data Protection Act, 2023, and international data protection standards, you have the following enforceable rights:

• Right to Access: Request a summary of the personal information Oyucon holds about you.
• Right to Rectification: Correct any outdated or incomplete business and contact data.
• Right to Erasure: Request the deletion of your contact records and staging databases once your project is complete and all invoice dues are cleared.