Privacy Policy

1. Who we are

Techpuvi Innovations (OPC) Private Limited(“Techpuvi”, “we”, “us”) is a private company registered in India, operating an AI-first software studio. Our website is techpuvi.com and our principal place of business is Saidapet, Chennai, India.

For anything related to this policy or your personal data, email info@techpuvi.comwith the subject “Privacy request”.

2. What this policy covers

This policy explains what happens with information you share or that we collect when you use:

• This website at techpuvi.com
• Our contact form and newsletter
• Email or phone communication you initiate with us

It does not cover services we deliver under a signed engagement contract - those are governed by the Master Services Agreement, Statement of Work, or equivalent agreement between you and Techpuvi, which takes precedence on data processing for that engagement. It also does not cover third-party sites we link to.

3. Information we collect

Information you give us

• Contact form: your name, email, company name (optional), and the message you write.
• Newsletter subscription: your email address. Optionally we record the page or source from which you subscribed, to understand which channels are useful.
• Direct correspondence: anything you choose to share when you email or call us.

Information collected automatically

• IP address: captured server-side when you submit a form, used for spam protection and abuse investigation. We cannot link an IP to an identity on our own.
• Standard server logs: request method, URL, user-agent, and referrer, retained briefly for operational and security purposes.
• Analytics: only after you grant analytics consent in our cookie banner, we use Google Analytics 4 with IP anonymisation enabled.

We do not knowingly collect special-category data (such as health, biometric, or political data) through this website.

4. How we use this information

• Reply to your enquiries and continue the conversation you started
• Send the monthly newsletter, only to subscribers who asked for it
• Operate, secure, and improve the website
• Comply with legal obligations and protect against fraud or abuse

We never sell, rent, or trade your personal data.

5. Lawful basis for processing

If you are in the EU, UK, or another jurisdiction with a similar framework, our lawful bases are:

• Performance of a contract / pre-contract: when you ask for a quote, proposal, or other commercial information.
• Legitimate interests: running and securing the website, responding to enquiries, limited spam protection, and basic non-tracking analytics where consent applies.
• Consent:for the cookie banner's analytics and marketing categories, and for newsletter subscription. You may withdraw consent at any time.

In India, processing is conducted in accordance with the Digital Personal Data Protection Act, 2023, on the bases of notice and (where applicable) consent or legitimate uses.

6. Where data is stored

• Form submissions and newsletter records are stored in our Supabase project (a managed Postgres database hosted by Supabase Inc. on AWS infrastructure).
• Email correspondence sits with our email provider.
• Analytics dataresides with Google's analytics infrastructure under their standard terms.
• The site itself is served by our hosting provider.

Each processor enforces encryption in transit and at rest. We access the data only via authenticated channels protected by Row Level Security policies.

7. How long we keep it

• Contact submissions: up to 18 months after our last interaction, then deleted. Sooner on written request from you.
• Newsletter subscribers: until you unsubscribe. Unsubscribed records are deleted within 90 days, retaining only an internal note that the address opted out, to honour that choice.
• Server and security logs: typically 30–90 days, per provider defaults.
• Analytics data: retained per Google Analytics 4 settings. Where possible we keep this to 14 months and review periodically.

8. Sharing with third parties

We share information only with the processors we need to run the site. We do not sell your data, ever.

• Supabase - database hosting. Privacy policy.
• Google (Analytics) - only with your analytics consent. Privacy policy.
• Hosting provider - the platform that serves this site.
• Email provider - used when we reply to you.

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Techpuvi, our customers, or others. Where the disclosure is lawful and not prohibited, we will let you know.

9. International transfers

Some processors operate outside India (notably Google and our hosting provider). We rely on each processor's published transfer safeguards - standard contractual clauses, adequacy decisions, or equivalent - to keep transfers lawful.

10. Your rights

Regardless of where you live, we honour the following requests:

• Access - a copy of the personal data we hold about you
• Correction - fix inaccurate or incomplete data
• Deletion - erase your data (subject to legal retention exceptions)
• Portability - receive your data in a machine-readable format
• Withdrawal of consent - for analytics, marketing, and newsletter
• Objection - to processing based on legitimate interests

Email info@techpuvi.com with the subject “Privacy request” and a description of what you want. We aim to respond within 30 days. We may ask for limited information to verify the request comes from you.

You can also lodge a complaint with your data protection authority. In India this is the Data Protection Board of India; in the EU your national supervisory authority; in the UK the Information Commissioner's Office.

11. Cookies and local storage

We use a small, transparent set of cookies and browser storage entries:

You can change your consent at any time via the Cookie Preferences link in the footer. Essential entries (theme and consent state) cannot be turned off - they are required for the site to function and respect your prior choices.

12. Security

• The site is served over HTTPS and protected by industry-standard TLS.
• The database enforces Row Level Security: anonymous visitors can submit forms but cannot read, update, or delete data. Administrative access requires authentication and an explicit membership record.
• The IP address attached to each submission is captured server-side via a database trigger and cannot be forged by the submitting client.
• Administrative passwords are stored only as salted hashes by Supabase Auth - we never see them.

No system is perfect. If you suspect data has been compromised or notice a vulnerability, please write to info@techpuvi.com so we can act on it.

13. Children

This website is intended for business audiences. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has shared data with us, write to us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The “Effective” date at the top will change when we do. Substantive changes will be highlighted at the top of the page for at least 30 days after the update.

15. Contact

Email: info@techpuvi.com
Mail: Techpuvi Innovations (OPC) Private Limited, Saidapet, Chennai, India