1. Introduction & Scope
This Privacy Policy sets out the terms of collection, use, storage, and disclosure of information (including personal information) that may be collected by Thinkvistar LLP ("we", "us", or "our") from you at any time that you interact with us ("Information"), including when you visit this website ("Site"), when you request a proposal or use the project estimator, when you purchase or use any software, platform, or service delivered by us ("Services"), or when you contact our sales or support team by email, phone, or WhatsApp. Unless a contrary intention appears in our Terms and Conditions or any other Service Agreement executed with you, the Information collected or received by Thinkvistar LLP shall be used and protected in accordance with the terms set out below. By using the Site or Services, you consent to the practices described in this Policy.
2. Personal Information We Collect
Unless otherwise stated in a specific Service Agreement, the personal information collected during registration, while filling in contact or enquiry forms, or during the course of an engagement shall constitute your Personal Information. This may include:
- Identity and contact details: first name, last name, company or organization name, designation, email address, contact number, postal address, city, PIN/ZIP code, and country.
- Business and project details: project requirements, technical specifications, budget ranges, timelines, and any documents or credentials you choose to share for the purpose of delivering the Services.
- Account information: usernames, encrypted passwords, roles, and activity logs where we provide you with a dashboard, admin panel, or API access.
- Billing information: GSTIN, billing address, and payment references. We do not store full card or bank details; payments are processed by third-party payment gateways.
- Communication records: emails, WhatsApp messages, call notes, and support tickets exchanged with our team.
3. Non-Personal & Technical Information
When you visit the Site, we and our hosting or analytics providers may automatically collect non-personal, technical information such as your IP address, browser type and version, device type and screen size, operating system, referring URL, pages visited, time spent on pages, and approximate location derived from your IP address. This information is used in aggregate to monitor performance, diagnose problems, and improve the Site's speed, security, and accessibility. It is not used to identify you personally or to track you across other websites.
4. How We Use Your Information
We use the Information we collect for the following purposes:
- To respond to your enquiries, prepare technical proposals and estimates, and coordinate consultations.
- To deliver, operate, maintain, and support the Services and platforms we build for you, including creating and managing accounts.
- To issue invoices, process payments, and maintain accounting and tax records as required by Indian law.
- To communicate project updates, milestone approvals, security notices, and changes to our terms or policies.
- To send occasional information about our services, case studies, or offers where you have opted in; you may unsubscribe at any time.
- To detect, prevent, and address fraud, security incidents, abuse, or violations of our Terms and Conditions.
- To comply with applicable legal obligations and enforce our agreements.
We never sell, rent, or trade your Personal Information to third-party advertisers or data brokers.
5. Sharing & Disclosure of Information
Your Personal Information shall not be shared with any third party without your permission, provided that in the following cases your Personal Information may be shared without obtaining your prior consent:
- With team members, contractors, and affiliated entities of Thinkvistar LLP who need the information to deliver the Services and who are bound to safeguard it in accordance with this Privacy Policy.
- With persons or companies that we have a strategic relationship with or that perform work for us or assist in the maintenance, development, distribution, and improvement of the Services (including, but not limited to, cloud hosting providers, payment gateways, SMS/email/WhatsApp gateways, analytics providers, and companies that help us process information or deliver Services to you), who are also obligated to protect your Personal Information and use it only for the purposes we specify.
- With courts, regulators, law enforcement, or government authorities where required by law, court order, or legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or a security incident.
- In connection with a merger, acquisition, restructuring, or sale of all or part of our business, in which case the recipient will be bound by this Privacy Policy.
- In aggregated or anonymised form that cannot reasonably be used to identify you, for example in portfolio case studies or performance statistics.
6. Client Data & End-User Information
When we build, host, or maintain a platform on your behalf, we may process data belonging to your customers or end users ("Client Data"). In such cases you are the data controller and we act as a data processor on your instructions. We process Client Data only to the extent necessary to deliver the Services, do not use it for our own purposes, and delete or return it at the end of the engagement unless retention is required by law. You are responsible for obtaining all necessary consents from your end users and for ensuring your own privacy notices cover the platforms we build for you.
7. Cookies & Analytics
The Site uses only essential cookies and lightweight, privacy-focused web analytics to understand aggregate page views, device screen sizes, and browser performance. We do not use advertising cookies or cross-site tracking. Where third-party embedded content (such as maps or videos) sets its own cookies, those are governed by the third party's privacy policy. You can control or delete cookies through your browser settings; disabling cookies may affect some Site features.
8. Data Security
We implement industry-standard technical and organisational security measures to protect your Information, including TLS encryption for data in transit, encrypted storage of credentials, secure hosting configurations, role-based access controls, and strict internal access policies. Access to Personal Information is limited to personnel who need it to perform their duties. While we take reasonable steps to protect your Information, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your Personal Information, we will notify you and the relevant authorities as required by applicable law.
9. Data Retention
We retain Personal Information only for as long as necessary to fulfil the purposes for which it was collected, to deliver and support the Services, and to comply with legal, accounting, and tax obligations. Enquiry data that does not lead to an engagement is generally deleted within twenty-four (24) months. Project and billing records are retained for the period required under Indian law (typically eight years for financial records). Client Data is handled as described in Section 6.
10. Your Rights & Choices
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:
- Access the Personal Information we hold about you and request a copy.
- Request correction of inaccurate or incomplete Personal Information.
- Request deletion of your Personal Information, subject to our legal retention obligations.
- Withdraw consent for marketing communications at any time by using the unsubscribe link or contacting us.
- Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
- Raise a grievance with us, and if unresolved, with the Data Protection Board of India or other competent authority.
To exercise any of these rights, write to hello@thinkvistar.com. We will respond within thirty (30) days.
11. Third-Party Links & Services
The Site and Services may contain links to third-party websites, tools, or platforms (such as GitHub, LinkedIn, payment gateways, or cloud consoles). We are not responsible for the privacy practices or content of those third parties, and this Privacy Policy does not apply to them. We encourage you to read the privacy policies of any third-party site you visit.
12. Children's Privacy
Our Site and Services are intended for businesses and professionals and are not directed at children under eighteen (18) years of age. We do not knowingly collect Personal Information from children. If you believe a child has provided us with Personal Information, please contact us and we will delete it promptly.
13. International Data Transfers
Thinkvistar LLP is based in India. Depending on the cloud and communication providers used in your project, your Information may be stored or processed on servers located outside India. Where this occurs, we take reasonable steps to ensure that your Information receives a level of protection consistent with this Privacy Policy and applicable Indian data protection law.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Updated versions will be posted on this page with a revised "Last Updated" date. Material changes affecting active clients will be communicated by email. Your continued use of the Site or Services after such changes constitutes acceptance of the revised Policy.
15. Grievance Officer & Contact
In accordance with the Information Technology Act, 2000 and the rules made thereunder, if you have any questions, concerns, or complaints about this Privacy Policy or the handling of your Personal Information, please contact our Grievance Officer at hello@thinkvistar.com, or write to Thinkvistar LLP, Yashwant Gaurav Phase 1, Nalasopara West, Maharashtra, India. We aim to acknowledge grievances within forty-eight (48) hours and resolve them within thirty (30) days.