Privacy Policy

Last Updated: October 26, 2024

1. Introduction

Quantum Rishi ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy outlines how we collect, use, and safeguard your information when you visit our website or engage with our services, in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023.

2. Data We Collect

We collect personal data only when you voluntarily provide it through our contact forms, lead magnets, or callback requests. This includes:

• Identity Data: Name, Job Title, Company Name.
• Contact Data: Email address, Phone number.
• Technical Data: IP address, Browser type, and Operating system (collected automatically for security via Cloudflare Turnstile).
• Interaction Data: Service interests, project descriptions, and communication history.

3. Purpose of Processing

We process your data for the following "Legitimate Uses" as defined under Section 4 of the Act:

• To facilitate the specific consultation or service you requested.
• To communicate regarding project updates, proposals, or administrative changes.
• To ensure the security of our digital platform (fraud prevention).
• To comply with legal obligations and regulatory requirements.

4. Consent & Withdrawal

We utilize a verifiable consent mechanism. By checking the consent box on our forms, you provide explicit consent for us to process your data for the purposes stated above. You have the right to withdraw this consent at any time by contacting our Grievance Officer. Upon withdrawal, we will cease processing your data unless required by law.

5. Data Storage & Security

Your data is stored in enterprise-grade databases (Supabase) encrypted at rest (AES-256) and in transit (TLS 1.3). We implement strict access controls (RBAC) to ensure only authorized personnel can access your information. We do not sell your data to third parties.

6. Your Rights

Under the DPDP Act 2023, you are entitled to the following rights:

• Right to Access: Request a summary of your personal data being processed.
• Right to Correction: Request updates to inaccurate or misleading data.
• Right to Erasure: Request deletion of your personal data ("Right to be Forgotten").
• Right to Grievance Redressal: Have your privacy concerns addressed within a reasonable timeframe.

7. Data Sharing

We may share data with the following Data Processors bound by contractual obligations:

• Cloud Infrastructure: Vercel Inc. (Hosting), Supabase (Database).
• Communication: Email Service Providers (SMTP) for sending notifications.
• Legal Authorities: When required by Indian law or valid court order.