Privacy Policy

This Privacy Policy explains how WEBDIPO ("we", "us", "our", or "the Agency"), operating from Coimbatore, Tamil Nadu, India, collects, uses, protects, and discloses personal data and project-related information when you visit our website (webdipo.in), interact with our intake channels, or engage our engineering collective for custom software development.

By accessing our website or submitting project specifications through our intake portals, you acknowledge the terms outlined in this document. We treat all incoming business inquiries and technical requirements with the highest degree of professional confidentiality.

We collect only the necessary information required to understand your engineering requirements, deliver software solutions, and maintain client communication:

• Contact & Identity Details: Full name, professional work email address, WhatsApp or phone number, company/organization name, and geographic location submitted via our project intake forms.
• Technical & Project Specifications: Architectural briefs, user stories, software wireframes, capability requirements, target timelines, and budget expectations shared for scoping purposes.
• Technical Telemetry & Web Analytics: Anonymized browser metadata, device type, operating system, referring URL, time spent on pages, and aggregate traffic metrics collected via privacy-centric analytics.
• Billing & Commercial Information: Company invoicing details, GST identification numbers (for Indian clients), wire transfer receipts, or transaction identifiers. We do not store raw credit card credentials on our servers.

Collected information is strictly used for legitimate engineering and business operations:

• Formulating technical estimates, system architecture audits, and sprint proposals based on your brief.
• Initiating project discussions and sprint reviews via direct WhatsApp, email, or video conferences.
• Executing client contracts, milestone delivery schedules, and non-disclosure agreements (NDAs).
• Maintaining the operational performance, security hardening, and uptime of our digital web platforms.
• Complying with statutory tax reporting, regulatory accounting, and contractual dispute resolutions.

WEBDIPO recognizes that your product logic, proprietary algorithms, database structures, and business concepts represent valuable trade secrets.

• Mutual Non-Disclosure: We routinely sign mutual non-disclosure agreements prior to reviewing private codebases, system diagrams, or confidential seed pitch materials.
• 100% Intellectual Property Handover: All custom codebases, design files, schemas, and assets built under contract are assigned 100% to the client upon milestone payment settlement.
• No Cross-Contamination: Our engineering squads maintain strict workspace sandboxing across different client repositories to prevent code mixing or data leaks.

To host our web properties and facilitate real-time communication, we work with trusted enterprise cloud infrastructure providers. These third parties process data strictly on our behalf under standardized Data Processing Agreements (DPAs):

• Hosting & Edge Delivery: Vercel and Amazon Web Services (AWS) for secure edge routing, CDN caching, and serverless execution.
• Direct Messaging: Meta / WhatsApp Business API and Google Workspace for encrypted communications and file transfers.
• Source Control & Deployment: GitHub Enterprise for secure git version management and automated CI/CD staging pipelines.

We implement industry-grade technical and organizational safeguards to protect your personal and project information:

• All website traffic is encrypted in transit using Transport Layer Security (TLS 1.3 / SSL).
• Administrative access to staging environments and production cloud clusters requires multi-factor authentication (MFA) and least-privilege key rotations.
• Zero hardcoded credentials or customer secrets are committed to public version control repositories.
• Periodic vulnerability reviews, static code analysis, and dependency security audits are performed across all deployed microservices.

We retain client contact details and project briefs only as long as necessary to fulfill contractual obligations, provide post-launch warranties, or satisfy statutory tax and legal requirements.

If an exploratory brief does not advance to an active commercial engagement, you may request the immediate purging of your shared requirements, diagrams, and repository access tokens from our internal systems.

Regardless of your geographic location, you possess enforceable privacy rights over your personal data:

• Right to Access: Request a copy of any personal data we hold about you or your organization.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your personal records from our databases.
• Right to Restrict Processing: Limit how your information is handled during active disputes or reviews.
• Right to Withdraw Consent: Revoke consent for communications at any point without impacting previous lawful processing.

Our website utilizes minimal, essential cookies necessary for site performance, theme state preservation (webdipo-theme: light | dark), and session security.

We do not employ cross-site tracking pixels or invasive advertising beacons. You can configure your browser to reject all non-essential cookies at any time without compromising core site navigation.

For questions regarding this Privacy Policy, data subject requests, or to execute a mutual NDA prior to sharing project briefs, contact our legal and engineering team directly: