Privacy Policy

1. Introduction

InfinityStack Technologies ("we," "us," or "our"), operating from Mainpuri, Uttar Pradesh, India, is committed to protecting the privacy and personal information of all individuals who interact with our website, contact us, or engage us for services.

This Privacy Policy explains what personal data we collect, how and why we use it, how it is stored and protected, how long we retain it, and what rights you have in relation to your personal data.

By visiting our website at www.infinitystack.space, submitting an inquiry, or engaging our services, you consent to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of our website and services.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us through:

• Contact Forms: Name, email address, phone number, company name, subject, and message content
• Project Inquiry Forms: Business requirements, project descriptions, budget range, timelines, and technical specifications
• Email and Direct Communications: Information shared in email threads, calls, meetings, or messaging platforms during project discussions and delivery
• Service Agreements: Business name, billing address, tax identification, authorized representative details, and payment information
• Project Collaboration: Files, content, credentials, design assets, or any other materials you share with us to fulfill a service engagement

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical Data: IP address, browser type and version, operating system, device type, and screen resolution
• Usage Data: Pages visited, time spent on each page, referring URL, links clicked, and navigation path
• Location Data: General geographic location inferred from IP address (country/region level only)
• Cookies and Tracking Technologies: Session identifiers, preference cookies, and analytics data as described in Section 9

2.3 Information We Do Not Collect

We do not collect sensitive personal data such as government identification numbers, medical information, racial or ethnic origin, religious beliefs, or financial account credentials unless specifically required for a contracted service and with your explicit consent.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to Inquiries: To contact you in response to your submitted inquiry, question, or consultation request
• Service Delivery: To plan, develop, and deliver contracted software development, design, and digital marketing services
• Project Communication: To keep you updated on project progress, request necessary inputs, and coordinate deliverables
• Invoicing and Payments: To issue invoices, process payments, and maintain financial records
• Website Improvement and Analytics: To understand how visitors use our website and improve our content, services, and user experience
• Marketing Communications: To send service updates, newsletters, or promotional content where you have opted in or where we have a legitimate interest in contacting you as a business prospect
• Legal Compliance: To comply with applicable legal obligations, resolve disputes, and enforce our agreements
• Security: To detect, prevent, and address fraud, unauthorized access, and other security threats

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: Processing required to fulfill a service agreement or pre-contractual obligations (e.g., responding to proposals, delivering projects)
• Legitimate Interests: Processing that serves our legitimate business interests where these are not overridden by your rights — including website analytics, business development communications, and fraud prevention
• Consent: Where you have explicitly opted in to marketing communications or specific data uses
• Legal Obligation: Where we are required to process data to comply with applicable law (e.g., tax record-keeping)

For EEA/UK residents, these bases align with the requirements of the General Data Protection Regulation (GDPR). You may withdraw consent at any time where consent is the legal basis, without affecting the lawfulness of prior processing.

5. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party. We may share your data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party vendors to support our operations, including:

• Cloud hosting and infrastructure providers (for hosting our website and client projects)
• Email service providers (for transactional and communication emails)
• Website analytics tools (for understanding website traffic and usage)
• Project management and communication platforms (for internal team collaboration)
• Accounting software or payment gateways (for invoicing and financial processing)

These service providers are permitted to use your data solely to provide services on our behalf and are contractually bound to protect it appropriately.

5.2 Legal Requirements

We may disclose your information when required by law or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government authority
• Protect and defend the rights, property, or safety of InfinityStack Technologies or our clients
• Prevent or investigate potential wrongdoing in connection with our services

5.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred to the successor entity, subject to the same privacy protections outlined in this Policy. We will notify you before any such transfer takes effect.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: HTTPS/TLS encryption for all data transmitted to and from our website
• Access Controls: Role-based access restrictions ensuring only authorized personnel can access personal data
• Secure Storage: Personal and project data stored on secure, access-controlled servers
• Minimal Data Collection: We collect only the information necessary to fulfill the stated purpose
• Regular Reviews: Periodic review of data handling practices and security measures

While we take all reasonable steps to protect your data, no method of electronic storage or internet transmission is completely secure. We cannot guarantee absolute security and will notify you of any data breach as required by applicable law.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. Our general retention periods are:

• Inquiry Data: Up to 2 years from the date of first contact; deleted sooner if no engagement follows
• Project and Contract Data: Retained for 5 years after project completion for legal, contractual, and quality assurance purposes
• Financial and Invoice Records: Retained for a minimum of 7 years to comply with Indian tax and accounting regulations
• Marketing Communication Preferences: Retained until you opt out or request deletion
• Website Analytics Data: Anonymized or deleted after 26 months

After the applicable retention period, personal data is securely deleted or anonymized. Certain data may be retained longer if required by a legal dispute, regulatory inquiry, or contractual obligation.

8. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to your personal data:

8.1 Right of Access

You may request a copy of the personal data we hold about you, including information on how it is processed.

8.2 Right to Rectification

You may request correction of any inaccurate or incomplete personal information we hold about you.

8.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.

8.4 Right to Restrict Processing

You may request that we restrict processing of your data in certain circumstances, such as while a dispute about its accuracy is being resolved.

8.5 Right to Data Portability

Where technically feasible and applicable, you may request your data in a structured, machine-readable format.

8.6 Right to Object to Marketing

You may opt out of marketing communications at any time by using the unsubscribe link in any email we send or by contacting us directly at info@infinitystack.space.

8.7 Right to Withdraw Consent

Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at info@infinitystack.space. We will respond within 30 days. EEA residents also have the right to lodge a complaint with the relevant supervisory authority in their country.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience and to understand how visitors interact with our site.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., session management, security). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website — which pages are most visited, where visitors come from, and how long they stay.
• Preference Cookies: Remember your settings and preferences to personalize your experience on return visits.
• Marketing Cookies: Used (with your consent) to track activity across websites for advertising and remarketing purposes.

9.2 Analytics Tools

We may use web analytics services such as Google Analytics to collect aggregated, anonymized data about website traffic and usage. These tools may set cookies on your browser. The data collected is used to improve our website and does not identify you personally. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

9.3 Managing Cookies

You can control and disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to view, delete, or block cookies via their privacy or security settings.

10. International Data Transfers

InfinityStack Technologies is based in India. If you are located outside of India, your information will be transferred to and processed in India. We may also transfer data to third-party service providers located in other countries as part of our infrastructure and tooling.

Wherever data is transferred internationally, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by relevant regulatory authorities where applicable
• Contractual obligations on third-party processors to maintain data security and processing restrictions
• Ensuring transfers occur only to countries or processors offering adequate levels of data protection

11. India Privacy Considerations

InfinityStack Technologies complies with applicable Indian data protection and privacy laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDPA") to the extent applicable.

Under the DPDPA, Indian residents have rights to access, correct, and request erasure of their personal data. You may exercise these rights by contacting us at info@infinitystack.space.

12. Children's Privacy

Our website and services are intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from minors.

If we become aware that we have inadvertently collected personal information from a minor without parental or guardian consent, we will take prompt steps to delete such information. If you believe we have collected data from a minor, please contact us immediately.

13. Third-Party Links

Our website may contain links to third-party websites, platforms, or services. This Privacy Policy applies solely to InfinityStack Technologies and does not cover the privacy practices of any third parties.

We are not responsible for the content, privacy practices, or security of third-party websites. We encourage you to review the privacy policies of any third-party services before providing them with personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or business operations. All changes will be published on this page with a revised "Last Updated" date.

Where changes are material, we will provide prominent notice on our website or notify you directly via email. Your continued use of our website or services after changes take effect constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

For any questions, concerns, requests to exercise your rights, or complaints regarding this Privacy Policy or our data practices, please contact us: