Privacy Policy

Privacy policies tend to read like they were written by lawyers for other lawyers. We've tried to avoid that. This document covers what data passes through Infyny Labs, what we do with it, and what you can do if you want any of it removed. If anything's unclear, please ask. Contact details are at the bottom.

We're not in the business of selling data. We're a software company, and the only reason we collect any information is to do our jobs.

1. What information we collect

The short answer is: only what you give us. We don't run aggressive tracking, and we're not building profiles on visitors. Here's what we collect and where it comes from:

What	Where it comes from	Why
Name, email, phone number	Contact form / inquiry form	To get back to you about your project
Company name, project description	Contact form	To understand the scope of what you need
Resume / CV	Careers application form	To evaluate job applications
General browser / device info	Automatically, when you load pages	Basic server logs: IP, browser type, page visited, timestamp

We don't ask for anything we don't need, and we don't store payment card numbers. Any payments go through third-party processors who handle that securely on their end.

2. How we use it

When you fill out our contact or inquiry form, we use your details to follow up with you. That's it, unless you become a client. In that case we may use your contact details to send project updates, invoices, and relevant communication related to your work with us.

We don't sign you up for newsletters automatically. We don't add you to drip campaigns. If we send something, it's because it's directly relevant to something you've asked us about.

Server logs are used for basic security monitoring and to understand if the site is performing properly. We're not analysing individual behaviour; we're just watching for patterns that might suggest something's going wrong technically.

3. Who else sees it

The short answer: almost nobody. Inquiry and contact data is visible to the Infyny Labs team members who are handling your account. We don't sell or trade personal data.

In some situations, we do share data with third parties, but only when it's necessary:

• Email delivery services: we use transactional email providers to actually send messages. They process your email address to deliver mail.
• Hosting infrastructure: the servers this site runs on have access to raw server logs, which include your IP address.
• Legal requirements: if we're required by law to disclose something, we will. We'd rather not, but we'd also rather be compliant than not.

Any vendor we use is chosen in part because they have reasonable privacy practices. We don't work with services known for misusing user data.

4. Cookies

We use cookies, but sparingly. The ones we set are largely technical: things that help the site remember you're logged in (if you're using our admin system) or that enable forms to work properly with CSRF protection.

We don't currently use advertising or tracking cookies. If that ever changes, we'll update this document and, where required by law, ask for your consent first.

You can manage or block cookies through your browser settings at any time. Some parts of the site may not work correctly if certain cookies are blocked, but the public-facing pages should be fine.

5. Where data is stored

Our infrastructure is primarily based in India. Depending on the email service being used, your name and email address may also be processed on servers located in the EU or US, both of which are common jurisdictions for transactional email infrastructure.

For clients based in the UAE or Saudi Arabia: we're aware of the data localisation concerns in these regions, and we're willing to discuss specific arrangements if your business has compliance requirements.

6. How long we keep it

Inquiry data is kept for as long as it's relevant, typically until the inquiry is either converted into a project or has gone cold for 12+ months with no further contact. After that, we delete or anonymise it.

Client data from active projects is retained for as long as the project or relationship is active, plus a reasonable period after (usually two years). Job applications that don't result in a hire are deleted within six months of the decision being made.

7. Your rights

Depending on where you're based, you may have specific rights over your personal data. Here's what we honour regardless of jurisdiction:

• Right to access: you can ask what data we hold about you.
• Right to correction: if something's wrong, we'll fix it.
• Right to erasure: you can ask us to delete your data.
• Right to object: if you don't want us to use your data for something, say so.
• Right to portability: we can provide your data in a readable format on request.

We don't make these rights complicated to exercise. Email us, tell us what you want, and we'll sort it out. We aim to respond within a few business days.

8. Children

Our website is aimed at businesses and professionals. It's not intended for anyone under 18. We don't knowingly collect data from minors, and if we discover we have, we'll delete it.

9. Changes to this policy

If we make meaningful changes to how we handle data, we'll update this page and revise the date at the top. For active clients, significant changes would be communicated directly. Nothing here changes retroactively without notice.

10. Contact

Privacy questions, data requests, complaints: all of it comes to us directly. We don't have a dedicated DPO, but inquiries sent to the address below are handled by someone who actually understands this stuff.