Privacy notice
Version 2026-10. This notice explains what personal data Cruzetec Solutions ("we") collects through this website, why, how long we keep it, and how you can exercise your rights under India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. We are the Data Fiduciary for this data.
What we collect and why
| When | Personal data | Purpose | Kept for |
|---|---|---|---|
| You send an enquiry or a project brief | Name, email, phone (optional), company, your message, budget and timeline | To reply, prepare a proposal and follow up on your request | 2 years after our last contact |
| You chat with Nekoba, our assistant | Your messages, and any contact details you choose to share | To answer your questions and, only if you confirm, pass your details to our team. In AI mode the messages are processed by Anthropic; in quick-answer mode they stay on our server. If you use voice input, your browser's own speech service (for example Google in Chrome) turns your speech into text; we never receive or keep audio. | 90 days |
| You run a free website check | The website address, your email and the check results | To send you the report and offer help with the findings | 1 year |
| You make a privacy request | Name, email, the details of your request | To verify and act on your request, and to show we did | 3 years |
| You allow analytics or marketing cookies | Pseudonymous device identifiers and pages visited | To understand which pages help visitors, and to measure campaigns | Until you withdraw consent, at most 1 year |
| You pick a site language | A "lang" preference cookie with the language code (no personal data); your browser may also remember Nekoba's suggestion state | To show the site in the language you chose. Translations are stored on our own server; nothing you type is sent anywhere for translation | 1 year, or until you clear cookies |
| Any visit | A one-way hash of your IP address, never the address itself | To protect the site against abuse and attacks | 90 days |
We do not sell personal data, and we do not use it to train AI models. We only collect what each purpose needs.
Consent
We process your data on the basis of your consent, which you give by ticking the box on a form, by confirming in the Nekoba chat before any details are shared, or through the cookie banner. Consent is free, specific and can be withdrawn as easily as it was given: use "Cookie preferences" at the bottom of any page, or send a withdrawal request on our privacy rights page. Withdrawal does not affect processing that happened before it. We keep a record of each consent (400 days) so we can show what you agreed to.
Your rights
- Access: a summary of the personal data we hold about you and how we process it, and who we shared it with.
- Correction and erasure: to correct, complete or update your data, or have it erased when it is no longer needed.
- Withdraw consent at any time.
- Grievance redressal: to raise a complaint with us, which we answer within 30 days.
- Nominate someone to exercise these rights for you in case of death or incapacity.
Use the privacy rights page. We confirm your email before acting, so nobody else can request your data. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.
Who processes data for us
| Processor | What for | Where |
|---|---|---|
| Hostinger | Hosting of this website and its database | India |
| Email provider (SMTP) | Sending replies and notifications | As configured |
| Anthropic (Claude) | Powers the Nekoba assistant in AI mode, and helps our team draft replies to enquiries | United States |
| Google Analytics / Tag Manager | Site analytics, only after you allow analytics | United States |
| Meta Pixel | Campaign measurement, only after you allow marketing | United States |
Processors act only on our instructions under contract. Where data leaves India, it goes only to countries not restricted by the Government of India.
Delivery partners
Our marketing and security work is delivered with partners: Growthzi (marketing), Dravincon (security). When you send a marketing or security enquiry, we share your details with that partner only if you tick the separate sharing box on the form, and only so they can respond to that enquiry. Each such enquiry carries a reference code so both sides can keep a record of it.
Where visits come from
To learn which channels bring enquiries, we note how a visit arrived: campaign tags in the link (such as utm_source), a partner reference, and the website you came from. This is kept in your session and saved with an enquiry only if you send one. Ad click identifiers (such as gclid) are kept only if you allowed marketing cookies. Clicks on links to our partners are counted without any personal data.
How we protect it
Encrypted connections (HTTPS) everywhere, encryption of secrets at rest, two-factor authentication for every administrator, access limited to the people who need it, hashed IP addresses, security logging, and automatic deletion when the retention periods above end. If a personal data breach affects you, we will tell you and the Data Protection Board as the Rules require.
Children
This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared data with us, contact the Grievance Officer and we will erase it.
Contact our Grievance Officer
Grievance Officer, Cruzetec Solutions
privacy@cruzetec.com
Mohali, Punjab, India