Privacy Policy

Introduction

Astraz Software Solutions (“we”, “us” or “our”) provides website development, software development, mobile app development, digital marketing, business consultation and company automation services. This policy explains how we collect, use, store, share and protect your personal data when you visit https://astrasoftwaresolutions.com (the “Website”), contact us, or use our services.

It is written to comply with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under it. Where we serve visitors or clients in other regions, we also respect the privacy laws that apply to them, such as the GDPR.

Who we are

For personal data we collect through the Website, we are the Data Fiduciary under the DPDP Act. When we handle personal data for a client while building or maintaining their software or website, we act as a Data Processor and follow the client’s instructions.

Data we collect

What you give us

• Free consultation form: your company or startup name, phone number and email address.
• Contact, email, phone and WhatsApp messages: your name, contact details and anything you tell us about your project.
• Chat assistant: the messages you type into our on-site chat assistant. Please do not share passwords, payment details or other sensitive information there.
• Projects: files, requirements and other information you share while we scope or deliver work.
• Billing: billing name, address and GST number when you buy our services. We do not store card or bank details; payments are handled by third-party providers.
• Careers: CV, work history and contact details if you apply for a job or internship.

What we collect automatically

• Device and browser details such as IP address, browser type, operating system and language.
• Usage data such as pages visited, time spent, referring pages and approximate location from your IP address.
• Cookies and similar technologies (see Cookies).

What we get from others

We may receive limited information from analytics providers, advertising platforms or social media (Facebook, Instagram, LinkedIn, WhatsApp) when you interact with us there.

We do not knowingly collect sensitive personal data, such as health, biometric, caste or religious information. Please do not send it to us.

How we use your data

• Reply to your enquiries and consultation requests, and prepare quotes and proposals.
• Deliver, support and maintain the software, websites and services you engage us for.
• Send invoices, receive payments and keep records required by tax and accounting law.
• Send project updates and support messages.
• Send newsletters or promotions, only if you have agreed, with an easy way to opt out.
• Run, secure and improve the Website, and prevent fraud, abuse and security incidents.
• Understand how the Website is used so we can improve it.
• Meet legal obligations, respond to lawful requests and establish, exercise or defend legal claims.

Legal basis

• Your consent, for example when you submit a form or subscribe to emails. You can withdraw it at any time.
• Legitimate uses allowed by the DPDP Act, such as responding to a request you made, performing a contract with you, or complying with the law.
• Legitimate interests (where the GDPR applies), such as keeping the Website secure and improving our services, balanced against your rights.

Who we share it with

We do not sell your personal data. We share it only with:

• Service providers that help us run our business, such as web hosting, email, cloud storage, analytics, project management and payment providers. They may use your data only to provide services to us.
• Platforms you choose to use to reach us, such as WhatsApp, Facebook, Instagram and LinkedIn. Their own privacy policies apply to what you share there.
• Content providers such as Font Awesome, which may receive your IP address when icons and fonts load.
• Professional advisers such as accountants and lawyers, who are bound by confidentiality.
• Authorities and courts when the law or a lawful request requires it.
• A buyer or successor, if we merge with or sell our business, subject to this policy.
• Anyone else you ask us to, or that we tell you about at the time.

International transfers

Some of our providers may store or process data on servers outside India. When we transfer personal data abroad, we follow the DPDP Act and any restrictions notified by the Government of India, and take reasonable steps to keep your data protected.

Cookies

Cookies are small files stored on your device. We use them to keep the Website working (for example, to protect our forms from misuse), remember your preferences and understand how visitors use the Website. Where required, we ask for your consent before using non-essential cookies.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the Website from working.

How long we keep data

We keep personal data only as long as we need it for the purposes above, or as the law requires.

When data is no longer needed, we delete or anonymise it.

Security

We use reasonable safeguards to protect personal data, including HTTPS encryption, access controls, secure hosting and regular software updates. No system is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

Your rights

Under the DPDP Act, and the GDPR where it applies, you can:

• Ask for a summary of the personal data we hold about you and how we use it.
• Ask us to correct or update inaccurate or incomplete data.
• Ask us to erase your data when it is no longer needed or you withdraw consent, unless the law requires us to keep it.
• Withdraw your consent at any time. This does not affect processing already done.
• Nominate another person to exercise your rights if you die or become unable to.
• Where the GDPR applies, object to or restrict processing, and ask for a portable copy of your data.

To use any of these rights, email support@astrasoftwaresolutions.com. We may need to verify your identity first. To stop marketing emails, click “unsubscribe” in any message.

Children

Our Website and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or lawful guardian. If you think a child has given us personal data, contact us and we will delete it.

Third-party links

The Website links to other sites, such as our social media profiles and WhatsApp, that we do not control. We are not responsible for their privacy practices, so please read their policies.

Contact and complaints

For questions or complaints about this policy or how we handle your data, contact our Grievance Officer:

We aim to acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India once it is operational.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows the latest version. If we make significant changes, we will post a notice on the Website or email you. Using the Website after a change means you accept the updated policy.