Privacy Policy
How EliavaTech collects, uses, stores, and protects personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
IMPORTANT NOTICE — [PLACEHOLDER FOR LEGAL REVIEW]: This document is a structured template prepared for EliavaTech and must be reviewed and approved by a qualified legal professional before commercial launch.
1. Overview & Data Fiduciary Details [PLACEHOLDER]
EliavaTech ('we', 'us', or 'our') respects your privacy and is committed to protecting personal data in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Data Fiduciary Contact [PLACEHOLDER]: EliavaTech · Remote-first, serving India [PLACEHOLDER address] · Email: [email protected] [PLACEHOLDER].
2. Personal Data We Collect
We collect only the minimum personal data necessary to respond to your business enquiry or deliver requested services:
- Contact & Consultation Form: Your name, business email address, optional phone/WhatsApp number, company name, selected service, estimated budget range, and project brief.
- AI Chat Assistant: Questions you type into the assistant and, if you request a quote, your name, email, and project need.
- Consultation Booking (Cal.com): Name, email, and preferred meeting time when you book a video consultation.
- Analytics Data (Consent-Only): Anonymous page-view and interaction events via Google Analytics 4, loaded strictly after you click 'Accept Analytics' on our Cookie Banner.
3. Purpose & Lawful Basis of Processing
Your personal data is processed solely to reply to your enquiry, prepare project scopes and quotes, schedule requested consultations, and improve website reliability.
We never sell, rent, or trade your personal data to third-party marketers or data brokers.
4. Third-Party Infrastructure & Sub-Processors
To operate this website securely, we rely on trusted infrastructure providers:
- Cloudflare (DNS, security, and Turnstile spam protection)
- Vercel (website application hosting)
- Managed PostgreSQL — Neon or Supabase (encrypted storage of form leads and chat transcripts)
- Resend & Google Workspace (lead notification and business email delivery)
- Google Gemini API (server-side generation of AI assistant responses)
- Google Analytics 4 (activated only after visitor consent)
5. Your Rights & Data Removal Requests (DPDP Act)
Under the Digital Personal Data Protection Act, 2023, you have the right to request access to, correction of, or erasure of your personal data, and to withdraw consent at any time.
To request data removal or exercise any privacy right, email [email protected] [PLACEHOLDER] with the subject line 'Privacy Request'. We respond within 7 business days [PLACEHOLDER].
Questions about privacy or data removal?
Contact our Data Fiduciary team at [email protected] [PLACEHOLDER].