Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to the software engineering services, SaaS platforms, digital infrastructure (domain management, web hosting, and business email), and downloadable software solutions provided by Ankit Rawat ("we", "our", or "us") via ankitrawat.com.

This Privacy Policy describes how we collect, use, process, and safeguard personal and commercial information provided by visitors, customers, and registered account holders. We are committed to processing data transparently, ethically, and strictly in connection with legitimate commercial obligations.

2. Information We Collect

We only collect data necessary to fulfill commercial software agreements, authenticate customer portals, and generate legal tax invoices:

• Account & Identity Data: Full name, company/organization name, work email address, and account password hashes (encrypted via standard bcrypt algorithms).
• Commercial & Invoicing Data: Billing address, city, state, postal code, country, phone number, and optional GSTIN for business tax reconciliation.
• Service & Domain Configuration Data: Registered domain names, nameservers, server cluster configurations, and business email mailbox identifiers.
• Payment Metadata: Transaction references, gateway payment IDs, order numbers, invoice references, and payment timestamps. Note: We never process, store, or have access to credit/debit card numbers or CVV codes. All payments are processed directly through certified payment gateways.
• Technical & Audit Logs: IP address, browser user-agent, authentication timestamps, and security audit records required for fraud prevention and rate-limiting.

3. How We Use Information

Collected information is utilized strictly for lawful business purposes:

• Provisioning, configuring, and operating software products, subscriptions, web hosting, domain registrations, and business email mailboxes.
• Generating sequential tax invoices and calculating applicable Goods and Services Tax (GST).
• Authenticating customer portal access and managing password resets.
• Communicating critical service updates, renewal reminders, maintenance advisories, and billing receipts.
• Enforcing our Terms of Service and preventing security abuse, fraudulent orders, and malicious automated activity.

4. Information Sharing & Third-Party Processors

We do not sell, rent, monetize, or trade your personal data. We disclose information only to vetted downstream service providers strictly required to deliver contracted services:

• Payment Gateways: Certified payment processors (such as Razorpay) for transaction settlement, signature verification, and automated refund processing.
• Domain Registrars & ICANN: Domain contact and WHOIS data as mandated by ICANN and registry operators for domain allocation.
• Infrastructure Providers: Managed server clusters and compute datacenters for hosting and email mailbox storage.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or official government subpoena under the jurisdiction of Delhi, India.

5. Data Retention & Security

We employ industry-standard architectural safeguards including HTTPS/TLS encryption, parameterized database queries, strict server-side rate-limiting, and CSRF token verification.

Commercial transaction records, orders, and generated invoices are retained as required by applicable taxation and accounting standards. Customer account data is retained for the active lifetime of the customer relationship and can be archived upon verified written request.

6. Customer Rights & Access

Registered customers can access and update their profile details, billing addresses, active subscriptions, and invoice history directly via the Customer Portal.

To request data correction, an export of your personal records, or account closure, contact us at our Contact & Support desk.

7. Business Identity & Contact Details