Privacy Policy

1. Who we are

“Technocrypt”, “we” and “us” mean the Technocrypt company responsible for your personal data:

• Technocrypt LLC, a Florida limited liability company, 4604 49th Street N #5270, St. Petersburg, FL 33709, United States — for clients and visitors in the United States and everywhere outside India.
• Technocrypt Private Limited, a company incorporated in India, Office No. 204, D-35, Block D, Veer Savarkar Block, Near Laxmi Nagar Metro Station, Laxmi Nagar, Delhi 110092, India — for clients and visitors in India.

Each company is the data controller (or “data fiduciary” under Indian law) for the personal data it handles. Where we work with you jointly, both may be responsible. You can reach either at [email protected].

2. What this policy covers

This policy covers technocrypt.co, our free tools, enquiries you send us, and the business relationships that follow. When we process personal data on behalf of a client inside a project (for example, data in an app we build or maintain), we act as a processor under that client's instructions and the client's own privacy notice applies.

3. Information we collect

Information you give us

• Enquiries and audit requests: name, email, company, phone number, website, the service you're interested in, budget range and your message.
• Clients and suppliers: business contact details, project information, billing and tax details.
• Job applicants: CV and the information you choose to send us.

Information collected automatically

• Form security data: IP address and browser user-agent stored with form submissions, to prevent spam and abuse.
• Region preference: a cookie that remembers whether you see the US or India version of the site (see our Cookie Policy).
• Server logs: standard technical logs kept by our hosting provider for security and reliability.

Our free tools (calculators and link generators) run in your browser. What you type into them is not sent to us or stored.

Website analytics (only with your consent): if you choose “Accept” on our cookie banner, we use Google Analytics 4 to understand how the site is used: pages viewed, how you arrived, device and browser type, and approximate location (country or city, derived from your IP address, which Google Analytics 4 does not store). Google acts as our service provider for this. We do not use Google advertising features, Google Signals or remarketing. If you decline, or your browser sends a Global Privacy Control signal, analytics is not loaded at all. You can change your choice at any time with “Cookie settings” at the bottom of every page.

We do not use advertising cookies.

4. How we use information and our legal bases

Purpose	Legal basis (GDPR / UK GDPR)
Replying to enquiries and preparing proposals	Steps at your request before a contract; legitimate interests
Delivering services and managing the client relationship	Performance of a contract
Invoicing, accounting and tax	Legal obligation
Protecting our website and forms from spam, fraud and attacks	Legitimate interests
Measuring how the website is used (Google Analytics)	Consent, which you can withdraw at any time
Recruitment	Steps at your request; legitimate interests
Occasional business updates by email	Consent where required, otherwise legitimate interests; you can opt out at any time

Under India's Digital Personal Data Protection Act, 2023, we process personal data on the basis of your consent or for legitimate uses the Act permits, such as information you voluntarily provide for a specific purpose.

5. AI and automated decisions

We do not make decisions that have legal or similarly significant effects on you solely by automated means. We do not use the personal data you send through our website to train AI models.

6. Who we share information with

• Service providers acting on our instructions, such as cloud hosting (Amazon Web Services), email delivery and, if you allow analytics cookies, website analytics (Google LLC), under contracts that protect your data.
• Between Technocrypt companies, so the right entity can serve you.
• Professional advisers such as accountants and lawyers, under confidentiality.
• Authorities where the law requires it, or to protect rights, safety and security.
• A buyer or successor if our business is reorganised or sold, subject to this policy.

We do not sell personal information, and we do not “share” it for cross-context behavioural advertising as those terms are defined in US state privacy laws.

7. International transfers

Our team and providers operate in the United States and India, and data may be stored or accessed in either country. Where data protection law requires it — for example, for data from the EEA, UK or Switzerland — we use recognised safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

8. How long we keep information

• Enquiries that don't lead to a project: up to 24 months after our last contact.
• Client and billing records: for the period required by tax and company law (typically up to 8 years).
• Job applications: up to 12 months, unless you agree to a longer period.
• Security logs: up to 90 days unless needed to investigate an incident.

9. Security

We protect information with access controls, encryption in transit, least-privilege access for our team, and regular security reviews of our own systems. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

10. Your rights

Everyone

You can ask us to access, correct or delete your personal data, or to stop sending you marketing emails, at any time.

EEA, UK and Switzerland

You have rights of access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time. You may complain to your local data protection authority.

United States

Depending on your state (including California, Colorado, Connecticut, Virginia and others), you may have the right to know what personal information we hold, to correct or delete it, and to opt out of sale, sharing or targeted advertising — which we do not do. We honour Global Privacy Control signals. You may use an authorised agent, and we will not discriminate against you for exercising your rights.

India

Under the Digital Personal Data Protection Act, 2023, you may request a summary of your personal data and its processing, ask for correction, completion, updating or erasure, withdraw consent, nominate another person to exercise your rights, and seek grievance redressal. If we don't resolve your grievance, you may approach the Data Protection Board of India.

11. How to exercise your rights

Email [email protected] with your request. We may need to verify your identity. We respond within one month (45 days for requests under US state laws), or sooner where the law requires.

12. Grievance Officer (India)

Grievance Officer, Technocrypt Private Limited, Office No. 204, D-35, Block D, Veer Savarkar Block, Near Laxmi Nagar Metro Station, Laxmi Nagar, Delhi 110092, India. Email: [email protected]. We acknowledge grievances within 24 hours and aim to resolve them within 15 days.

13. Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16 (or under 18 in India).

Country-specific provisions

We apply the strictest relevant standard across our operations, and these local laws apply where you are. Where a provision below gives you more protection than the rest of this document, the provision below applies.

Country / region	Laws	What it means for you
India	Digital Personal Data Protection Act, 2023; Information Technology Act, 2000 and the SPDI Rules, 2011	Consent-based processing, rights to access, correction, erasure and nomination, a Grievance Officer, and complaints to the Data Protection Board of India.
United States	California Consumer Privacy Act as amended by the CPRA; Colorado, Connecticut, Virginia, Texas, Oregon and other state privacy laws; FTC Act	Rights to know, delete, correct and opt out; Global Privacy Control honoured; no sale or sharing of personal information.
European Union / EEA & Switzerland	General Data Protection Regulation (EU) 2016/679; ePrivacy Directive; Swiss Federal Act on Data Protection	Legal bases for every use, full data-subject rights, Standard Contractual Clauses for transfers, and complaints to your supervisory authority.
United Kingdom	UK GDPR and Data Protection Act 2018; PECR	Equivalent rights to the EU GDPR; UK International Data Transfer Addendum; complaints to the ICO.
Canada	Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws such as Québec Law 25	Meaningful consent, access and correction, and complaints to the Office of the Privacy Commissioner of Canada.
Australia	Privacy Act 1988 and the Australian Privacy Principles	Access and correction rights, overseas-disclosure safeguards, and complaints to the OAIC.
United Arab Emirates	Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data	Lawful-basis and transparency requirements, data-subject rights, and cross-border transfer safeguards.
Singapore	Personal Data Protection Act 2012	Consent and notification obligations, access and correction rights, and complaints to the PDPC.

14. Changes

We will update this policy when our practices change. The “last updated” date shows the latest version; significant changes will be highlighted on this page.