1. DPDP Act 2023 & GDPR Alignments
Kolitech operates in accordance with India's Digital Personal Data Protection (DPDP) Act 2023. For visitors residing in the European Union (EU) or the United Kingdom (UK), our operations are designed to satisfy GDPR standards regarding legal bases for data collection and user rights.
2. Personal Data Collected
We only collect data that you input directly into our project form, send to us via email, or convey through our WhatsApp channels.
- Founder/Client Name and Corporate identity parameters
- Email address and mobile contact numbers
- Legacy software specifications and project logs
- IP coordinates and browser user-agent tokens collected for server security logs
3. Third-Party Data Processors
We route database components through secure third-party processors to maintain our services. We do not sell or trade user information.
| PROCESSOR | FUNCTION | DATA SENT |
|---|---|---|
| Vercel Inc. | App Deployment Hosting | Client network logs |
| WhatsApp Ireland Ltd. | Client Communication API | Mobile numbers, chat history |
| Google Workspace | Corporate Email Management | Emails, project scopes |
4. Data Retention Limits
We store project scoping logs and contract drafts for up to two years from the initial connection date. Inactive client databases are deleted after 180 days. Corporate financial data and GST billing ledgers are retained for seven years as required by Indian tax codes.
5. User Rights & Data Erase
You retain the right to query the personal details we hold, request modifications to inaccurate entries, or withdraw consent. To request complete erasure of your project records from our database arrays, write to support@kolitech.in. We execute complete erasure workflows within 14 calendar days.
7. Grievance Redressal SLA
Under DPDP guidelines, we maintain a dedicated Grievance Officer. For disputes regarding data usage, contact:
- 1. [ACTION NEEDED: Register Vivek as Grievance Officer with the local authorities once operations cross statutory limits.]
- 2. [ACTION NEEDED: Deploy a standard cookie consent banner if any analytical tools like Google Analytics or Hotjar are added later.]