Privacy Policy

1. Introduction

ParshWebCraft (“we”, “us”, or “our”) operates the website https://www.parshwebcraft.in and provides web design, web development, digital marketing, SaaS development, and related technology services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or engage our services.

This Policy is published in compliance with:

• Section 43A of the Information Technology Act, 2000
• The IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
• Applicable provisions of the Personal Data Protection Bill / Digital Personal Data Protection Act, 2023

By using our website or services, you consent to the collection and use of information as described in this Policy. If you do not agree, please discontinue use of our website.

2. Information We Collect

2.1 Information You Provide

• Contact details: Name, email address, phone/WhatsApp number
• Project details: Business requirements, project specifications, and budget information shared via our contact form
• Newsletter subscription: Email address
• Payment information: Processed by third-party payment gateways; we do not store card details
• AI chatbot conversations: Messages you send to our AI assistant and any contact details shared within those conversations

2.2 Information Collected Automatically

• Log data: IP address, browser type, operating system, referring URLs, pages visited, time and date of visit
• Device information: Device type, screen resolution, language settings
• Cookies and tracking: As described in our Cookie Policy
• Analytics data: Aggregated usage statistics via Google Analytics

2.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data as defined under the IT Rules 2011 (e.g., financial information, health data, biometrics, passwords) through our public website. Any sensitive data shared voluntarily in project briefs is handled with strict confidentiality under separate service agreements.

3. How We Use Your Information

We use your personal information for the following purposes:

• To respond to enquiries: Contacting you about your project requirements
• To deliver services: Fulfilling contracts for website development, marketing, or software projects
• To send newsletters: Sending business tips and updates (only with your consent; you may unsubscribe at any time)
• To improve our services: Analysing how visitors use our website to improve user experience
• To comply with legal obligations: Maintaining records as required by applicable Indian law
• To prevent fraud and abuse: Detecting and preventing spam, bots, and fraudulent use of our forms

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Legal Basis for Processing

We process your data on the following bases:

• Consent: For newsletter subscriptions and non-essential cookies
• Contractual necessity: To deliver services you have requested
• Legitimate interests: For website analytics, fraud prevention, and improving our services
• Legal obligation: Where required by Indian law (e.g., GST record-keeping)

5. Data Sharing with Third Parties

We may share your data with the following categories of third-party service providers who assist us in operating our business. These parties are contractually obligated to handle your data securely and only for specified purposes:

• Supabase Inc. — Database and authentication services (US-based; data stored per their Privacy Policy)
• Google LLC — Analytics (Google Analytics), reCAPTCHA spam protection, and Google Workspace
• Resend / email providers — Transactional email notifications
• OpenAI — AI chatbot responses (messages processed per OpenAI Privacy Policy)
• Vercel Inc. — Website hosting and deployment infrastructure

We may disclose your information if required by law, court order, or governmental authority in India, or to protect the rights, property, or safety of ParshWebCraft, our clients, or others.

6. Data Retention

• Contact/lead data: Retained for up to 3 years from the date of collection or last interaction, whichever is later
• Newsletter subscriptions: Retained until you unsubscribe
• AI chat history: Retained for up to 90 days, then automatically purged
• Website analytics: Aggregated, anonymised data retained per Google Analytics default retention settings
• Financial records: As required by the Income Tax Act, 1961 and GST laws (minimum 6 years)

You may request earlier deletion of your data by contacting our Grievance Officer (see Section 10).

7. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. For detailed information on what cookies we use, their purpose, and how to control them, please read our Cookie Policy.

8. Data Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data in transit (TLS 1.2+)
• Row-level security (RLS) on our database
• HTTP security headers (Content-Security-Policy, X-Frame-Options, etc.)
• Role-based access controls for admin systems
• Rate limiting on all public-facing forms to prevent abuse
• Honeypot fields and reCAPTCHA to prevent automated spam

Despite these measures, no internet transmission is 100% secure. In the event of a data breach that affects your rights and interests, we will notify you and the relevant authorities as required under Indian law.

9. Your Rights

Under applicable Indian privacy laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your personal data (subject to our legal retention obligations)
• Withdrawal of consent: Withdraw consent for newsletter communications at any time
• Grievance redressal: Lodge a complaint with our Grievance Officer

To exercise any of these rights, please contact our Grievance Officer (see Section 10). We will respond to all requests within 30 days.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the IT Rules, 2021, we have designated a Grievance Officer to address privacy concerns:

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a minor, please contact our Grievance Officer immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by updating the “Last updated” date at the top of this page. Your continued use of our website after any changes constitutes acceptance of the updated Policy.

13. Contact Us

For any questions about this Privacy Policy, please contact: