How we handle your data.

1. About this policy

This policy explains what personal data Techspear Software Solutions Private Limited ("Techspear", "we", "us") collects through techspear.in, why we collect it, who we share it with, and the choices and rights you have.

We act as the Data Fiduciary for the personal data described here, within the meaning of the Digital Personal Data Protection Act, 2023 ("DPDP Act"). We also follow the Information Technology Act, 2000 and the rules made under it.

By using this website or submitting a form, you acknowledge this policy. Where we rely on your consent, we ask for it separately and you can withdraw it at any time.

2. Information we collect

We collect only what we need to respond to you and run the website:

• Project enquiries: your name, company name, email address, phone number, indicative budget range, and the project details you choose to share.
• Job applications: your name, contact details, CV or résumé, and anything else you include when you write to our careers address.
• Direct correspondence: the content of emails or calls you send or make to us.
• Technical data: your IP address, browser type, device information, and pages requested. Our hosting provider records these in server logs to deliver and secure the site.
• Your cookie choice (accept or decline analytics), saved in your own browser’s local storage so we don’t ask again. It never leaves your device.
• Usage data, only if you accept analytics cookies: pages viewed, how you arrived (for example, from a search engine or a link), approximate location derived from your IP address, device and browser type, and which buttons or contact links you clicked. This is collected by Google Analytics.

Analytics cookies are optional. Google Analytics is loaded only after you click “Accept” on our cookie banner; if you decline, or ignore the banner, no analytics cookies are set. You can change your choice at any time with the “Cookie settings” link in the footer, and declining removes the analytics cookies. We do not use advertising cookies.

Please do not send us sensitive personal data (such as financial, health, or government ID details) through our forms.

3. How we use your information

• To reply to your enquiry, prepare proposals and quotes, and schedule discovery calls.
• To assess job applications and contact candidates about roles.
• To deliver, maintain, and secure the website, including detecting abuse and spam.
• To send project updates or consultation follow-ups where you have opted in. You can opt out at any time.
• To meet legal, tax, and regulatory obligations, and to establish or defend legal claims.

We do not sell your personal data, and we do not use it for automated decisions that significantly affect you.

4. Legal basis for processing

We process your personal data on the basis of your consent (for example, when you submit a form or opt in to updates), or for legitimate uses permitted by the DPDP Act, such as data you voluntarily provide for a specific purpose, or processing needed to comply with law.

For visitors in the European Economic Area or the United Kingdom, the equivalent bases are consent, steps taken at your request before entering into a contract, our legitimate interests in running our business, and legal obligations.

5. Who we share it with

We share personal data only with parties that help us operate, under appropriate confidentiality and data protection terms:

• Cloud and email providers that host this website and our business email (for example, Microsoft Azure and Microsoft 365).
• Google Fonts, which serves the typefaces on this site and receives your IP address when the fonts load.
• Google Analytics (Google LLC), only if you accept analytics cookies, to produce aggregated reports about how the website is used.
• Professional advisers such as accountants and lawyers, where necessary.
• Government or law enforcement authorities, when required by law or a valid legal order.
• A successor entity, if Techspear is involved in a merger, acquisition, or sale of assets. Your data stays protected by this policy.

Links to our social media profiles (LinkedIn, Instagram, Threads, Facebook) and to other websites are governed by those platforms’ own privacy policies.

6. International transfers

Our service providers may store or process data on servers outside India. We transfer personal data only as the DPDP Act permits and to providers that maintain industry-standard safeguards.

7. How long we keep it

• Enquiries and related correspondence: up to 24 months after our last interaction, unless they lead to a contract.
• Client contract and billing records: as long as Indian tax and company law requires.
• Job applications: up to 12 months, so we can consider you for future openings, unless you ask us to delete them sooner.
• Server logs: for the limited period set by our hosting provider.
• Analytics data: according to the retention period configured in Google Analytics (we use the shortest standard setting that meets our reporting needs).

When data is no longer needed, we delete or anonymise it.

8. Your rights

Subject to applicable law, you can:

• Ask for a summary of the personal data we hold about you and how it is processed.
• Ask us to correct, complete, update, or erase your personal data.
• Withdraw consent at any time. This does not affect processing already carried out.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Raise a grievance with us. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

To exercise any of these rights, email our Grievance Officer (details below). We may need to verify your identity before acting on a request.

9. How we protect it

This website is served only over HTTPS with HSTS. Access to personal data is limited to team members who need it, and our providers secure their infrastructure to recognised industry standards. No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify affected individuals and the Data Protection Board as the law requires.

10. Data we handle for clients

When we build or maintain software for a client, we may access personal data that belongs to the client or its users. In that case the client decides how that data is used, and we process it only on the client’s documented instructions and under our contract with them. Requests about such data should go to the relevant client.

11. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our services or the law change. The "Last updated" date at the top shows when it last changed. For significant changes, we will make the update clear on this page.

13. Contact and grievances

For questions about this policy, to exercise your rights, or to raise a complaint, contact our Grievance Officer. We will acknowledge your request promptly and aim to resolve it within 30 days.