Privacy Policy

1. Introduction

Anddox Private Limited is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect data when you interact with our website, services, or team. We comply with the Information Technology Act, 2000 (India) and relevant data protection regulations.

2. Information We Collect

• Contact information: name, email address, phone number, company name.
• Project and communication data: requirements, messages, files shared during engagements.
• Website usage data: pages visited, time spent, browser and device information via cookies.
• Payment information: billing details processed through secure third-party payment gateways.

3. How We Use Your Information

• To respond to inquiries and deliver requested services.
• To communicate project status, invoices, and important service updates.
• To improve our website, services, and user experience.
• To send marketing communications only with your explicit consent.

4. Data Storage and Security

All personal data is stored on secure servers with AES-256 encryption at rest and TLS 1.3 in transit. Access is controlled by role-based permissions. Client project data is stored for the duration of the engagement plus 12 months unless otherwise agreed.

5. Third-Party Sharing

We do not sell, rent, or trade your personal information. We share data only with trusted third-party service providers under strict data processing agreements. We may disclose data if required by law.

6. Cookies

Our website uses essential cookies for functionality and analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

7. Your Rights

• Right to access: request a copy of personal data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion of your data subject to legal obligations.
• Right to object: opt out of marketing communications at any time.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy or as required by law. Marketing consent data is retained until withdrawn.

9. Contact for Privacy Matters

For privacy-related inquiries, contact our Data Protection Officer at contact@anddox.com. We respond to all legitimate requests within 30 days.