Privacy Policy.

Zynitex ("Zynitex", "we", "us", "our") is an independent software development studio based in India. We design and build websites, web applications, SaaS products, mobile apps, and digital experiences for businesses.

For personal data processed through zynitex.com, Zynitex acts as the data fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules).

You can reach us at zynitex.official@gmail.com or +91 90026 24058. We are a remote-first business; our registered business address is available on request.

This policy applies when you:

• visit or browse zynitex.com;
• submit an enquiry through our contact form;
• contact us by email, phone, WhatsApp, or social media;
• submit a review or testimonial;
• engage us for a project or receive our services.

It does not apply to third-party websites, client-owned platforms, or any product that publishes its own privacy notice. Where a product or client platform has a separate notice, that notice applies to the data it collects. External links are governed by the privacy policies of their operators.

We keep collection limited to what is needed to respond to you and deliver our work:

• Enquiry details — name, email address, company name, service of interest, budget range, and the project brief or message you send.
• Review details — name, role, location, project name, rating, review text, and any profile photo you choose to upload.
• Correspondence — emails, messages, call notes, and files you share with us.
• Technical data — IP address, browser and device type, operating system, pages viewed, referring page, timestamps, and security logs generated when you access the site.
• Client and billing data — business contact details, billing address, GSTIN where applicable, invoices, and payment status. Full card or bank credentials are handled by payment providers and are not stored by us.
• Browser storage — your theme preference and a review-submission flag, as described in the Cookie Policy.

We do not ask for government IDs, health data, biometric data, or financial credentials through this website. If a project requires sensitive data, we will agree on the scope, access controls, and safeguards separately before collecting it.

• Directly from you — when you fill in a form, send an email or message, call us, submit a review, or share project materials.
• Automatically — when you visit the site, our hosting and security systems generate standard request and security logs.
• From third parties — if you message us on Instagram or WhatsApp, are referred by a client, or contact us through a public business profile.

We may combine these sources only to respond to you, manage our relationship, and keep accurate business records.

We use personal data only for the purposes we explain:

• Enquiries and proposals — to understand your request, reply to you, and prepare a proposal or quote. This is based on your consent or on steps you asked us to take before entering a contract.
• Service delivery — to plan, deliver, support, and invoice the services you engage us for. This is based on our contract with you and our legal obligations.
• Reviews and testimonials — to publish a review you submit, with your consent.
• Site security and improvement — to keep the website available, prevent abuse, diagnose errors, and understand aggregate usage. This relies on the legitimate uses permitted under the DPDP Act, such as security and fraud prevention.
• Legal and regulatory compliance — to maintain records, respond to lawful requests, and establish or defend legal claims.
• Updates and marketing — only where you have opted in or where the law otherwise permits. You can opt out at any time.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that already took place before the withdrawal. Where we process without consent, we rely on legitimate uses permitted by the DPDP Act, such as security, legal compliance, and the protection of our legal rights.

We do not sell personal data or use it for third-party advertising.

We use a very small amount of browser local storage for functional preferences. We do not currently use advertising cookies, analytics cookies, or cross-site tracking technologies. The Cookie Policy lists every storage item we use, its purpose, and how to clear it.

We share personal data only where it is necessary:

• Service providers — hosting, cloud database, email delivery, security, and professional advisers who help us operate the site and deliver our work. These providers are bound by confidentiality and data processing terms and may only process data on our instructions.
• Payment providers — when invoicing or collecting payment, the relevant bank or payment processor handles the transaction under its own terms.
• Legal and regulatory bodies — when required by law, a court, a regulator, or a lawful authority, or where needed to protect our rights, safety, or property.
• Business transfers — if we merge, acquire, or transfer a business, relevant data may be transferred as part of the transaction, subject to appropriate confidentiality.

We do not rent or sell personal data. If we use a client's collaboration tools to deliver a project, the client's own privacy terms may also apply to data stored there.

Our cloud, hosting, and email providers may store or process data outside India. Where that happens, we use contractual and organisational safeguards and comply with the cross-border requirements of the DPDP Act and applicable rules. By submitting data through the site or engaging us, you acknowledge that data may be processed in jurisdictions where our providers operate.

We keep personal data only for as long as we need it:

• Enquiries that do not become projects — normally up to 24 months after our last contact, unless you ask us to delete it sooner.
• Client, contract, invoice, and tax records — for the period required by applicable law and for as long as needed to resolve disputes or enforce agreements.
• Reviews and testimonials — until you withdraw consent or ask us to remove them, or until we stop publishing them.
• Server and security logs — for a limited period, normally up to 12 months.

When data is no longer needed, we delete it or anonymise it so it can no longer identify you.

We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege access, backups, and vendor review. No method of transmission or storage is completely secure, so we cannot promise absolute security.

If a personal data breach affects you, we will notify you and the Data Protection Board of India as required by the DPDP Act and applicable rules.

Subject to the DPDP Act and applicable rules, you may:

• request a summary of the personal data we process about you and how we use it;
• correct, complete, or update inaccurate or incomplete data;
• request erasure of data that is no longer needed for its purpose;
• withdraw consent, with effect from the date of withdrawal;
• nominate a person to exercise your rights in the event of your death or incapacity;
• raise a grievance with us; and
• complain to the Data Protection Board of India if we do not resolve your grievance.

To exercise a right, email zynitex.official@gmail.com with the subject "Privacy request". We may ask for reasonable proof of identity so we do not disclose data to the wrong person. We aim to respond within 30 days, or within the timeline prescribed by law.

The site and our services are intended for adults and businesses. They are not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will delete it.

The site may link to Instagram, WhatsApp, client websites, product sites, or other third-party services. Their privacy policies apply once you leave our site or use their services. We are not responsible for how those third parties collect or use your data.

We may update this policy to reflect changes in our services, our data practices, or the law. The "Last updated" date at the top of the page shows when it changed. For material changes, we may also place a notice on the site or contact you where appropriate. Continued use of the site after the effective date means you acknowledge the updated policy.

Privacy and grievance contact: Grievance Officer, Zynitex

• Email: zynitex.official@gmail.com
• Phone: +91 90026 24058
• Address: India · Remote-first

We aim to acknowledge privacy requests within two business days and resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.