Privacy Policy
Our Privacy Pledge
At DigiBayt, your privacy and data security are fundamental to how we build software and manage client relationships. We respect your autonomy and are committed to safeguarding personal information collected via our website (digibayt.com), client portals, and customer communications.
1Who We Are & Scope
This Privacy Policy applies to personal data collected and processed by DigiBayt (“we”, “us”, or “our”), having its principal office at 18/81D, Malappuram, Kerala, India - 673639, operating across India, the United Arab Emirates, and globally.
This policy covers visitors to our website, clients contracting our design, engineering, mobile app, cloud, and automation services, as well as prospects contacting us for project consultations.
2Information We Collect
A. Information You Provide Directly
- Contact & Consultation Forms: Name, work email address, phone number, company/organization name, project budget, and project requirements.
- Account Credentials: Username, email, and cryptographically hashed passwords when accessing our admin or client dashboard.
- Customer Support Communications: Emails, messages, phone transcripts, or WhatsApp chats when you correspond with our team.
- Billing Details: Company registration, billing address, tax identification (GSTIN/VAT number), and payment transaction confirmations (we do not store raw credit card numbers).
B. Automatically Collected Information
- Device & Network Data: IP address, browser type and version, operating system, language preferences, and referring URLs.
- Usage & Navigation Metrics: Pages visited, duration of visit, scroll depth, and interaction with UI elements.
- Cookies & Local Storage: Essential session cookies, theme preference (light/dark mode), and performance analytics (see our Cookie Policy).
3How We Use Your Information
We process your information for the following legitimate purposes:
- Fulfilling software design and development contracts
- Responding to inquiries and scheduling discovery calls
- Provisioning cloud environments, hosting, and domain setups
- Invoicing, billing, and accounting compliance
- Detecting, preventing, and mitigating cyber threats and security bugs
- Improving website performance and user experience
- Sending essential project updates and administrative notices
- Complying with statutory obligations under applicable laws
4Legal Bases for Processing
We process personal data under one or more recognized legal grounds:
- Contractual Necessity: Processing necessary to prepare a proposal, execute an SOW, or deliver commissioned digital projects.
- Legitimate Interests: Running and securing our IT infrastructure, maintaining business records, preventing fraud, and conducting analytics.
- Consent: Where you have explicitly opted in, such as subscribing to newsletters or accepting non-essential cookies.
- Legal Obligation: Retaining financial and tax records as mandated by Indian and UAE corporate laws.
5Data Sharing & Third-Party Vendors
We never sell, rent, or trade your personal data. We only share information with vetted infrastructure vendors who process data strictly under confidentiality agreements:
- Cloud Infrastructure: Amazon Web Services (AWS), Supabase, MongoDB Atlas, and Vercel for hosting, database management, and media storage.
- Communication & APIs: Meta (WhatsApp Cloud API) and transactional email providers (SMTP) for project notices.
- Professional Advisers: Legal counsel, auditors, and accountants as required for compliance.
- Legal Authorities: Only when strictly mandated by valid legal process, court order, or applicable law.
6Security Controls & Protection
We implement rigorous technical, organizational, and administrative controls to protect data against unauthorized access, destruction, loss, or alteration:
- End-to-end TLS 1.3/HTTPS encryption in transit across all web interfaces and APIs.
- Modern cryptographic hashing (bcrypt with salt rounds) for password storage.
- HTTP security headers (HSTS, Content Security Policies, X-Frame-Options, X-Content-Type-Options).
- Strict Role-Based Access Controls (RBAC) limiting administrative access to authorized engineers.
- Regular automated dependency audits and vulnerability remediation protocols.
7Your Privacy Rights
Depending on your jurisdiction (such as GDPR, India Digital Personal Data Protection Act, or UAE Data Protection Law), you hold the following rights:
- Access: Request a copy of the personal information we maintain about you.
- Correction: Request rectification of inaccurate or incomplete information.
- Erasure (“Right to be Forgotten”): Request deletion of your personal data when no longer needed for legal or contractual purposes.
- Restriction & Objection: Object to or request restriction of certain processing activities.
- Data Portability: Obtain your data in a structured, machine-readable format.
To exercise any of these rights, email us at hi@digibayt.com. We respond within 30 calendar days.
8Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, provide ongoing support, maintain business records, and satisfy legal, accounting, and tax compliance requirements. When data is no longer required, it is securely deleted or anonymized.
9Contact & Grievance Redressal
For questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Data Protection and Grievance Officer: