Privacy Policy

Effective Date: June 26, 2024 • Last Updated: August 2026 • Governing Entity: Bhatiserve Technologies Private Limited

1. Introduction & Scope

Bhatiserve Technologies Private Limited ("Bhatiserve", "we", "us", or "our") is an Indian technology engineering company incorporated under the Companies Act, 2013, with registered offices in Rajasthan, India. This Privacy Policy sets out how we collect, store, process, transfer, and protect personal and organizational information obtained when you visit https://bhatiserve.com, interact with our technical consultation services, or use our digital platforms.

We are committed to operating in full compliance with the Information Technology Act, 2000 (and amendments), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act (DPDPA), 2023.

2. Information We Collect

We collect information strictly necessary to provide software engineering proposals, technical consultation, and platform maintenance services:

• Direct Consultation Information: Full name, professional work email address, telephone/mobile number, company/organization name, job title, and project requirement specifications submitted voluntarily through our contact and consultation forms.
• Technical & Telemetry Data: IP address, browser type and version, device hardware identifier, operating system, referring URL, pages viewed, time spent per section, and standard server log metadata collected automatically to ensure system uptime and security.
• Commercial & Billing Data: Corporate GSTIN, billing address, bank account transaction confirmation IDs, and invoice records for contracted engineering deliverables. (Note: Bhatiserve does not store complete credit card or debit card numbers on its servers).

3. Purpose & Legal Basis for Processing

We process your information solely for the following legitimate commercial and operational purposes:

• To review, organize, and respond to your technical software architecture inquiries and consultation requests.
• To draft, execute, and service custom software development agreements, NDAs, and Master Service Agreements (MSAs).
• To deliver software updates, security patches, SLA monitoring alerts, and technical support.
• To maintain network security, prevent unauthorized access, mitigate brute-force cyber attacks, and verify input integrity.
• To fulfill mandatory statutory, taxation (GST/TDS), and legal obligations under Indian law.

4. Data Protection, Security & Encryption

We implement bank-grade administrative, technical, and physical security measures to safeguard data against accidental destruction, unauthorized disclosure, or cyber intrusions. These controls include:

• Enforced TLS 1.3 cryptographic transport protocols across all web endpoints.
• AES-256 field-level encryption for sensitive database records and client credentials.
• Granular Role-Based Access Control (RBAC) restricting server access strictly to authorized senior engineers.
• Continuous automated vulnerability audits, DDoS mitigation, and firewall rules.

5. Disclosure to Third Parties & Regulated Partners

We do not sell, rent, trade, or monetize your personal or business inquiry data to advertisers or third-party brokers under any circumstances. We may share information only with:

• Regulated Financial & Cloud Infrastructure Providers: Authorized cloud hosting providers (e.g., AWS/GCP), licensed payment aggregators, and banking partners strictly to the extent required to execute client-sanctioned API integrations.
• Legal & Law Enforcement Compliance: When strictly required by court orders, government authorities, or law enforcement agencies under applicable Indian statutes.

6. Data Retention & User Rights

We retain personal data only for as long as necessary to fulfill project requirements, resolve commercial disputes, and satisfy statutory tax record retention laws (typically up to 7 years for financial records).

As a data principal, you have the right to request access to your personal data, request correction of inaccurate records, withdraw consent for promotional communications, or request the deletion of your consultation records (subject to legal compliance).

7. Contact Our Data Grievance Officer

If you have questions, feedback, or grievance requests regarding this Privacy Policy or our data protection practices, please contact our designated Grievance Officer: