1. Introduction

Devroox ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you engage with our services at [Your Website URL] or as a client of our IT solutions. By providing your personal data to us, you consent to the practices described in this policy.

2. Definitions & Key Roles

• Devroox (Reseller/Data Fiduciary): We act as the Data Fiduciary for the client relationship data we manage, including sales, marketing, and project communication.
• UPLEF FZ-LLC (Service Provider/Merchant of Record): The ultimate provider of technical services and the Merchant of Record (MoR). UPLEF FZ-LLC acts as the primary Data Fiduciary for transaction data and service delivery.
• Data Fiduciary: Determines the purpose and means of processing personal data.
• Data Processor: Processes data on behalf of the Data Fiduciary.

3. Information We Collect

3.1. Personal Information

• Contact details (name, email address, phone number)
• Business information (company name, GST details, address)
• Communication records (emails, chat transcripts)
• Billing information (processed securely by our MoR's payment processors)

3.2. Technical Information

• IP address, browser type, device information
• Website usage data, pages visited
• Cookies and tracking data

3.3. Project Information

• Website content, design specifications, project briefs
• Login credentials for necessary platform access
• Feedback and review materials

4. Legal Bases for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our services and deliver projects
• Legitimate Interests: For business operations and service improvement
• Legal Compliance: To meet tax (GST) and regulatory requirements
• Consent: For marketing communications

5. How We Use Your Information

5.1. Service Delivery

• Managing client relationships and projects
• Facilitating communication with the Service Provider
• Providing customer support and project updates
• Processing payments and managing invoices

5.2. Business Operations

• Improving our services and client experience
• Conducting analytics and business intelligence
• Ensuring security and fraud prevention
• Complying with legal obligations (including GST requirements)

5.3. Marketing

• Sending promotional materials (with explicit consent)
• Personalizing marketing communications
• Conducting market research

6. Information Sharing and Disclosure

6.1. With Our Service Provider (UPLEF FZ-LLC)

We share necessary information with UPLEF FZ-LLC as required for:

• Service delivery and technical implementation
• Payment processing and invoicing as Merchant of Record
• Tax calculation and compliance
• Regulatory obligations

6.2. With Third-Party Service Providers

• Payment processors (Stripe, PayPal, Razorpay)
• Cloud storage providers (Google Drive, Dropbox)
• Communication tools (Email, project management software)
• Analytics and marketing platforms

6.3. Legal Requirements

• To comply with Indian laws and regulations
• To respond to lawful requests from government authorities
• To protect our rights, property, or safety

7. Data Security Measures

We implement comprehensive security measures including:

• Technical Safeguards: SSL encryption, secure servers, firewalls
• Organizational Controls: Access restrictions, employee training
• Physical Security: Secure document storage
• Regular Monitoring: Security assessments

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Operations: Website functionality and security
• Performance Monitoring: Understanding user interactions
• Personalization: Remembering preferences
• Marketing: Tracking campaign performance (with consent)

You can manage cookie preferences through your browser settings.

9. Data Retention

We retain personal data only as long as necessary for:

• Active Client Relationships: Duration of service plus 3 years
• Financial Records: 7 years for GST and accounting compliance
• Marketing Data: Until consent withdrawal
• Legal Requirements: As mandated by Indian laws

10. Your Data Protection Rights

Under applicable Indian laws, you have the right to:

• Access: Request copies of your personal data
• Correction: Update inaccurate information
• Deletion: Request erasure of your personal data
• Consent Withdrawal: Revoke consent for marketing
• Grievance Redressal: Lodge complaints with authorities

To exercise these rights, contact us at[email protected].

11. International Data Transfers

Your personal data may be transferred to and processed in:

• United Arab Emirates: Where UPLEF FZ-LLC is based
• United States: Where some service providers operate
• Other jurisdictions: As required for service delivery

We ensure appropriate safeguards through contractual agreements.

12. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated through:

• Email notifications
• Notices on our website

14. Grievance Officer

For privacy-related concerns, contact our Grievance Officer:

Name: Himanshu Singh
Email: [email protected]
Address: Balaji Prime Villas, Chitrakoot, Jaipur

15. Contact Information

Devroox
Balaji Prime Villas
Chitrakoot, Jaipur
GST: 08PUNDS4792F1CR
Email: [email protected]

Service Provider Contact:
UPLEF FZ-LLC
Email: [email protected]
Address: Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, UAE