Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) explains how Indiburg Technologies (“Indiburg”, “we”, “us”, or “our”) collects, uses, stores, processes, discloses and protects personal information when you visit our website, use our services, communicate with our team, or otherwise interact with our business.

Indiburg Technologies provides digital, communication and technology solutions to businesses, including:

• Custom Software Development

• Website and Mobile Application Development

• WhatsApp Business API

• RCS Business Messaging

• Bulk SMS Services

• Bulk Email Services

• IVR and Communication Solutions

• AI Chatbots and Automation

• CRM and API Integrations

• Digital Marketing, SEO and Performance Marketing

• Cloud-Based Business Solutions

Our services help businesses manage customer communication, automate workflows, generate leads and improve operational efficiency.

Depending on the nature of the services provided, we may act in two different capacities:

1. Data Fiduciary / Data Controller

We act as a Data Fiduciary or Data Controller when we determine why and how personal information is processed. This includes information collected from website visitors, prospective customers, business contacts, clients and authorised account users.

2. Data Processor

We may act as a Data Processor when processing personal information on behalf of our business clients. For example, when customers use our messaging platforms, APIs, automation systems or communication services to transmit information about their own customers, we process that information according to their documented instructions and applicable agreements.

In such circumstances, the relevant client is generally responsible for determining the purpose and lawful basis of processing and for providing appropriate privacy notices to its end users.

2. Scope and Applicable Laws

This Policy applies to personal information collected through:

• Our official website: https://indiburg.com

• Contact forms, enquiry forms and demo requests

• Software applications, platforms and APIs

• WhatsApp, SMS, RCS, email and other communication channels

• Sales, marketing and customer support interactions

• Business events, meetings and other professional engagements

This Policy is intended to address applicable data protection and privacy requirements, including:

• Digital Personal Data Protection Act, 2023 (DPDP Act), and applicable rules and provisions in force.

• Information Technology Act, 2000.

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, where applicable.

• GDPR and UK GDPR, where applicable to our processing activities.

Our services are primarily intended for businesses and professional users. We do not knowingly collect personal information from children except where permitted and handled in accordance with applicable law and required safeguards.

3. Definitions

For the purposes of this Policy:

Personal Data: Any data about an identifiable individual, as defined under applicable data protection laws.

Data Principal / Data Subject: The individual to whom personal data relates.

Data Fiduciary / Data Controller: The organisation that determines the purpose and means of processing personal data.

Data Processor: An organisation that processes personal data on behalf of a Data Fiduciary.

Processing: Any operation performed on personal data, including collection, recording, storage, use, disclosure, sharing, modification or deletion.

Services: The software, communication, messaging, marketing, automation, integration and other technology services provided by Indiburg Technologies.

Customer / Client: A business, organisation or individual authorised to purchase or use our services.

4. Personal Information We Collect

Depending on your relationship with Indiburg and the services you use, we may collect the following categories of information.

4.1 Business and Contact Information

Information provided when you contact us, request a quotation, register for a service or communicate with our team, including:

• Full name

• Company or organisation name

• Job title or designation

• Business email address

• Contact number

• Business address

• Country and location

• Enquiry details and service requirements

4.2 Account and Authentication Information

When you register for or access our platforms and services, we may collect:

• Account usernames and login details

• Passwords and authentication information

• API keys and access tokens

• Account preferences and permissions

• Security configurations

• User roles and account activity

4.3 Technical and Usage Information

We may automatically collect technical information when you visit our website or use our digital services, including:

• IP address

• Browser type and version

• Device information

• Operating system

• Website pages visited

• Date and time of access

• Session activity

• Diagnostic and error logs

• Cookies and similar tracking information

4.4 Communication Information

We may collect information relating to communications between you and Indiburg, including:

• Inquiries and support requests

• Emails and business correspondence

• Customer feedback

• Communication preferences

• Call records or recordings, where enabled and appropriately notified

• Information submitted through website forms

4.5 Billing and Transaction Information

For customers using paid services, we may collect:

• Subscription and service plan details

• Service usage information

• Transaction references

• Billing addresses

• Invoices and payment records

• Tax-related information

Payment card or banking information may be handled by authorized payment service providers where applicable.

4.6 Customer Data Processed Through Our Services

When our business customers use Indiburg’s communication, software, API or automation services, they may submit personal information relating to their own customers or end users.

Depending on the service and customer configuration, this may include:

• Names, phone numbers and email addresses

• SMS, WhatsApp, RCS and email message content

• Communication delivery and status information

• Customer inquiries and support conversations

• Campaign and communication preferences

• CRM records and customer profile information

• Chatbot interactions and conversation transcripts

• API request and response information

• Transactional notifications and customer updates

• Call-related information where applicable

We process such information only to provide the contracted services, follow customer instructions and meet applicable legal requirements.

4.7 Sources of Information

We may collect personal information:

• Directly from you.

• Automatically through website and service usage.

• From our business clients when they use our services.

• From authorized service providers, partners and communication platforms.

• From publicly available business information where legally permitted.

5. Purposes of Collecting and Processing Information

We use personal information for legitimate business and operational purposes, including:

1. Providing and managing our software, communication and digital services.

2. Responding to inquiries, quotation requests and business proposals.

3. Creating and managing customer accounts.

4. Providing software development, API integration and technical support.

5. Delivering SMS, WhatsApp, RCS and email communications as instructed by customers.

6. Managing communication workflows, automation and chatbot interactions.

7. Supporting website development, digital marketing and SEO activities.

8. Processing subscriptions, invoices and payments.

9. Monitoring service performance and resolving technical issues.

10. Maintaining platform security and preventing fraud, spam and unauthorized access.

11. Improving our products, website and customer experience.

12. Sending important service announcements and administrative notifications.

13. Sending promotional communications where permitted by applicable law and based on the required consent or other lawful basis.

14. Meeting legal, regulatory, tax and contractual obligations.

15. Establishing, exercising or defending legal claims.

Where processing relies on consent, you may withdraw that consent subject to applicable law. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to improve website functionality, understand visitor behavior and enhance the browsing experience.

These technologies may include:

• Essential Cookies: Required for basic website functionality and security.

• Functional Cookies: Help remember user preferences and settings.

• Analytics Cookies: Help us understand website traffic and visitor interactions.

• Marketing Cookies: Where implemented and consented to, help measure advertising performance and marketing campaigns.

You can manage cookie preferences through available website controls and your browser settings.

Disabling certain cookies may affect the availability or functionality of some website features.

7. Sharing and Disclosure of Personal Information

Indiburg Technologies does not sell personal information as part of its ordinary business operations.

However, we may share personal information with the following categories of recipients where necessary:

7.1 Service Providers and Sub-processors

We may engage third-party providers for:

• Cloud hosting and infrastructure

• Website and software maintenance

• Data storage and backup

• Analytics and monitoring

• Payment processing

• Customer support

• Security and technical operations

• Email and communication delivery

Such providers may process information only as necessary to perform their contracted services, subject to applicable contractual and legal obligations.

7.2 Communication and Technology Partners

To deliver services, we may share relevant information with telecom operators, messaging aggregators, communication platforms, API providers and other authorized technology partners.

For example, message delivery may require processing through WhatsApp, SMS, RCS, email or telecom service providers.

7.3 Business Clients

Where we process information on behalf of a business client, we may provide relevant delivery reports, API responses, communication records or other service outputs to that client according to its instructions and service configuration.

7.4 Professional Advisers

We may disclose information to legal advisers, accountants, auditors, insurers and other professional consultants where necessary for legitimate business purposes.

7.5 Legal and Regulatory Authorities

We may disclose personal information where required by applicable laws, court orders, regulatory requirements or lawful government requests.

7.6 Business Transfers

In the event of a merger, acquisition, restructuring, transfer or sale of business assets, personal information may be transferred to the relevant successor or acquiring organization, subject to applicable privacy laws.

8. Cross-Border Data Transfers

Some of our technology providers, communication partners or service infrastructure may operate outside India.

Where personal information is transferred or accessed across international borders, we take steps to ensure that such processing complies with applicable data protection requirements.

Cross-border transfers will be subject to applicable restrictions, contractual safeguards and other legally required protections.

We do not represent that all information is stored exclusively in India unless specifically confirmed for the relevant service or contractual arrangement.

9. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, provide contracted services and meet applicable legal, regulatory, tax and accounting requirements.

Retention periods may vary depending on:

• The type of information collected.

• The purpose for which information is processed.

• The nature of the services provided.

• Customer contractual requirements.

• Applicable statutory retention obligations.

• Security, fraud prevention and dispute resolution requirements.

For information processed on behalf of our business clients, retention and deletion will generally follow the applicable service agreement, documented customer instructions and legal obligations.

When information is no longer required, we take appropriate steps to delete, anonymize or securely dispose of it, subject to applicable law.

10. Information Security

Indiburg Technologies takes reasonable steps to protect personal information against unauthorized access, disclosure, alteration, loss, misuse or destruction.

Depending on the nature of the information and services, security measures may include:

• Access restrictions and user authentication.

• Role-based access permissions.

• Encryption and secure communication protocols where implemented.

• System monitoring and security logging.

• Secure API access controls.

• Backup and recovery procedures.

• Software maintenance and security updates.

• Internal operational and confidentiality practices.

Access to personal information is intended to be limited to authorized personnel and service providers who require it for legitimate business purposes.

Although we take reasonable precautions, no method of electronic transmission or storage can be guaranteed to be completely secure.

If you suspect unauthorized access to your account or personal information, please contact us using the details provided in this Policy.

11. Your Privacy Rights and Choices

Subject to applicable laws, you may have the following rights regarding your personal information:

11.1 Right to Access

You may request information about the personal data we process and the relevant details of such processing, as provided under applicable law.

11.2 Right to Correction

You may request correction or updating of inaccurate or incomplete personal information.

11.3 Right to Erasure

You may request deletion of your personal information, subject to legal, contractual and regulatory retention requirements.

11.4 Right to Withdraw Consent

Where we process personal information based on consent, you may withdraw that consent through the appropriate communication channel.

11.5 Right to Grievance Redressal

You may raise concerns or complaints regarding our handling of personal information through our designated Grievance Officer.

11.6 Right to Nominate

Where applicable under the DPDP Act, you may nominate another individual to exercise your rights in the event of death or incapacity.

11.7 Additional Rights

Where GDPR or other applicable privacy laws apply, you may have additional rights, including objection to processing, restriction of processing and data portability.

To exercise your rights, please contact us using the contact information provided below. We may request reasonable information to verify your identity before responding.

We will handle requests within the timelines prescribed by applicable law.

For end users of our business clients: If your personal information has been submitted to Indiburg through a customer’s communication platform, API or software system, please contact the relevant business directly in the first instance. That business generally determines the purposes of processing. We will assist our clients with applicable data protection requests where required.

12. Changes to This Privacy Policy

We may revise or update this Privacy Policy from time to time to reflect:

• Changes in our services and business operations.

• Changes in applicable privacy and data protection laws.

• Updates to our information collection and processing practices.

• Changes in technology, security or operational requirements.

Any updated version will be published on our official website with a revised “Last Updated” date.

Where required by applicable law, we will provide additional notification of material changes.

We encourage visitors and customers to review this Policy periodically.

13. Contact Information and Grievance Redressal

If you have any questions, concerns, requests or complaints regarding this Privacy Policy or the processing of your personal information, you may contact Indiburg Technologies using the details below.

Organization: Indiburg Technologies
Website: https://indiburg.com
Office Address: M/06, 1st Floor, Oasis Arcade, Thane, Maharashtra, India
General Email: info@indiburg.com
Sales Email: sales@indiburg.com
Privacy Contact: privacy@indiburg.com

Grievance Officer: To be designated by Indiburg Technologies.

We are committed to addressing privacy-related concerns and grievances in accordance with applicable legal requirements.

Your Privacy Matters to Us

At Indiburg Technologies, we recognize the importance of protecting personal information and maintaining the trust of our customers, business partners and website visitors.

We aim to handle personal information responsibly, transparently and securely while delivering technology, communication and digital solutions that support business growth.

For further information, please contact us through our official website:

https://indiburg.com

End of Privacy Policy