Privacy Policy

This policy covers infitus.in and the services of Infitus Creative Studio, a design and development studio in Siliguri, West Bengal, India. We decide how your personal data is used, which makes us responsible for it under India's Digital Personal Data Protection Act, 2023.

Information you give us:

• Inquiry form — your name, email address, phone number (optional), company, the service you're interested in, budget range, preferred start date and your message.
• Conversations — anything you share with us by email, phone, WhatsApp or on calls.
• Project details — content, brand assets, logins and files you share so we can build your project.
• Billing details — the name, address and tax details needed on invoices.

Information collected automatically:

• Basic technical data — like every website, our hosting provider records your IP address, browser type, the pages you request and the time, to keep the site running and secure.
• Spam protection — to limit repeated form submissions, we keep one-way coded versions of your IP address, email address and phone number (not the details themselves) for 24 hours, after which they are deleted automatically. Your IP address is also used briefly, in memory, to limit repeated likes.
• Country code — your approximate country, worked out by our hosting provider from your IP address, is used only to pre-fill the phone number's country code on our forms. It isn't stored, and you can change the code yourself.
• Team likes — when you like a team member's profile, we store a one-way coded version of your IP address (not the address itself) so each connection can like a profile only once.

Card and bank details are entered directly on our payment partner Razorpay's secure pages. We never see or store them.

• to reply to your inquiry and send proposals you've asked for;
• to plan, deliver and support your project;
• to send invoices, receive payments and keep the financial records the law requires;
• to keep the website secure and stop spam and abuse;
• to improve our website and services.

We use your information only with your consent — for example, when you send the inquiry form — or for purposes the law allows, such as keeping tax records. We don't use it for automated decisions about you, and we don't send marketing emails unless you've asked for them.

This website doesn't use advertising cookies, tracking pixels or third-party analytics. Our fonts and images are served from our own domain, so visiting a page doesn't send your data to font or ad networks.

If we add analytics in future, we'll update this policy first and ask for your consent where required.

We never sell or rent your personal information. We share it only with trusted service providers who help us run the studio, and only as much as they need:

• website hosting (Vercel) — to serve this website;
• email — to receive inquiry forms and correspond with you;
• database hosting (MongoDB Atlas) — to store team-profile likes in coded form;
• payments (Razorpay) — to process invoice payments securely;
• WhatsApp (Meta) — only if you choose to message us there.

We may also share information if the law requires it, or to protect our rights in a legal dispute.

Some of our service providers store data on servers outside India, for example in the United States or Europe. We choose providers with strong security and data protection commitments, and transfers follow the requirements of Indian law.

• Inquiries that don't become projects — up to 24 months, then deleted.
• Project files and communications — for the length of our working relationship and up to 3 years after, so we can support you.
• Invoices and billing records — for as long as Indian tax law requires (currently at least six years for GST records).
• Coded like records — for as long as the like exists; removing your like deletes it.

You can ask us to delete your data sooner — see our Data Deletion Policy.

The website runs only over HTTPS, access to client data is limited to the team members working on your project, and we use reputable providers with strong security. No system is perfectly secure, but if a breach ever affects your data, we'll tell you and the authorities as the law requires.

You can ask us at any time to:

• tell you what personal data we hold about you and how we use it;
• correct or update anything that's inaccurate;
• delete your data, where we don't need to keep it by law;
• withdraw consent you've given — this doesn't affect anything done before;
• nominate someone to exercise these rights for you.

Email support@infitus.in from the address you used with us. We'll reply within 7 days and complete your request within 30 days. If you're not happy with our response, you can raise a complaint with the Data Protection Board of India.

Our website and services are meant for businesses and adults. We don't knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we'll delete them.

When our practices change, we'll update this page and the date at the top. For significant changes, we'll let current clients know by email.