This Privacy Policy describes how Codevibe Technology Private Limited ("Codevibe", "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit our website at https://codevibe.in or engage our services.
By using our website or services, you agree to the collection and use of information in accordance with this policy. This policy sits alongside our Terms of Service, and you can reach us any time via our contact page.
- We collect only what we need: the contact details you submit, payment data handled by our gateway, and basic website analytics.
- We use it to respond to enquiries, deliver and improve our services, and process payments - and we never sell your data.
- Payments run through PCI-DSS compliant gateways (Razorpay); we never store full card numbers or CVV.
- You can access, correct, delete, or export your data and withdraw consent at any time (DPDP Act 2023 / GDPR where applicable).
- We keep data only as long as needed, then delete it - see the retention periods below.
This summary is for convenience only and does not replace the full policy below.
1. Information We Collect
Information you provide
When you fill out a contact form, request a quote, or engage our services, we collect: your name, email address, phone number, company name, project details, and budget range. We only collect information that is necessary to respond to your enquiry or deliver our services.
Payment information
When you make payments through our platform (processed via Razorpay or other payment gateways), your payment card details, billing address, and transaction information are collected and processed directly by the payment gateway provider. We do not store your full card numbers or CVV on our servers. We receive only transaction confirmations, partial card details (last 4 digits), and payment status from the gateway.
Automatically collected information
When you visit our website, we may automatically collect: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visits, and time spent on pages. This data is collected through cookies and similar technologies for analytics and site improvement purposes.
Cookies
We use essential cookies to ensure the website functions correctly, analytics cookies (Google Analytics) to understand how visitors use our site, and preference cookies to remember your choices. You can control cookie settings through your browser. Our site will function without non-essential cookies, though some analytics features may be limited.
2. How We Use Your Information
We use the information we collect to: respond to your enquiries and provide requested information; deliver, maintain, and improve our services; process payments and send transaction confirmations; communicate project updates and deliverables; send occasional updates about our services (only with your consent); comply with legal obligations and resolve disputes; prevent fraud and protect the security of our platform and services.
3. Legal Basis for Processing
We process your personal data on the following legal grounds: Contractual necessity - to perform services you have engaged us for; Legitimate interest - to respond to enquiries, improve our services, and ensure security; Consent - for marketing communications and non-essential cookies; Legal obligation - to comply with applicable laws, including tax and accounting requirements under Indian law.
4. Data Sharing and Disclosure
Service providers
We share data with trusted third-party providers who assist in delivering our services: payment processors (Razorpay), email service providers (Microsoft 365), analytics providers (Google Analytics), and cloud hosting providers (AWS, Vercel). These providers are contractually obligated to protect your data and use it only for the purposes we specify.
Legal requirements
We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Codevibe, our clients, or others.
Business transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
No selling of data
We do not sell, rent, or trade your personal information to third parties for marketing purposes. Ever.
5. Payment Processing and Security
All payment transactions are processed through Razorpay (or other RBI-compliant payment gateways), which are PCI-DSS Level 1 compliant. Your payment information is encrypted using industry-standard TLS encryption during transmission. We store only the minimum payment data required for transaction records: transaction ID, amount, date, payment status, and last four digits of the card used. Refund policies are governed by individual service agreements and are processed through the original payment method within 5 to 10 business days.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information, including: encryption of data in transit (TLS 1.2+) and at rest; access controls and authentication requirements; regular security assessments; secure cloud infrastructure (AWS) with SOC 2 compliance; employee security awareness and access restrictions. While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to industry best practices.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected: enquiry data is retained for up to 24 months after last contact; client project data is retained for the duration of the engagement plus 36 months; payment records are retained for 8 years as required by Indian tax law; analytics data is retained in anonymised form indefinitely. You may request deletion of your data at any time, subject to our legal obligations.
8. Your Rights
Under applicable data protection laws (including the Digital Personal Data Protection Act, 2023 and GDPR where applicable), you have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request deletion of your data (subject to legal obligations); withdraw consent for marketing communications at any time; object to processing based on legitimate interest; request data portability in a structured, machine-readable format. To exercise any of these rights, contact us at privacy@codevibe.in or hello@codevibe.in.
9. How to Exercise Your Rights
To make a request, email privacy@codevibe.in with the type of request and the email address associated with your data. We may ask a few questions to verify your identity before we act - this protects you from someone else accessing or deleting your information. We aim to respond within 30 days, in line with the Digital Personal Data Protection Act, 2023, and we will confirm in writing once your request is complete. There is no fee for a reasonable request. If we cannot fully action a request - for example, where the law requires us to keep certain records such as tax invoices - we will tell you which parts we can and cannot fulfil, and why. If you are not satisfied with how we have handled your request, you may raise a complaint with the relevant data protection authority.
10. Grievance and Data Protection Contact
We take data protection seriously and want any concern resolved quickly. For privacy questions, data requests, or complaints, contact our data protection point of contact at privacy@codevibe.in, or write to us at Unit 309, 3rd Floor, Tower A, SAS Tower, Medicity Support Area, Sector 38, Gurugram, Haryana 122001, India. We will acknowledge your query promptly and keep you updated until it is resolved.
11. International Data Transfers
Our primary operations are in India. If you are accessing our services from outside India, your data may be transferred to and processed in India. We ensure appropriate safeguards are in place for any international data transfers, including contractual protections with our service providers.
12. Third-Party Links
Our website may contain links to third-party websites and services (LinkedIn, Instagram, etc.). We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party services you interact with.
13. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will post the updated policy on this page with a revised "Last updated" date. Material changes will be communicated via email to active clients.
15. Contact Us
For any privacy-related questions, concerns, or requests, contact us at: Codevibe Technology Private Limited Email: hello@codevibe.in Phone: +91 70677 09224 Address: Unit 309, 3rd Floor, Tower A, SAS Tower, Medicity Support Area, Sector 38, Gurugram, Haryana 122001, India For data protection specific queries: privacy@codevibe.in
Frequently Asked Questions
Does Codevibe sell my personal data?
No. We never sell, rent, or trade your personal information to third parties for marketing purposes. We share data only with the service providers needed to deliver our services (such as Razorpay for payments and AWS for hosting), under contract.
Is my payment card information stored?
No. Payments are processed by PCI-DSS compliant gateways such as Razorpay. We never store full card numbers or CVV — only the transaction ID, amount, date, status, and the last four digits of the card.
How can I access, correct, or delete my data?
Email privacy@codevibe.in with your request and the email address associated with your data. We may ask a few questions to verify your identity, then respond within 30 days in line with the Digital Personal Data Protection Act, 2023. There is no fee for a reasonable request.
How long does Codevibe keep my data?
Enquiry data is kept for up to 24 months after last contact; client project data for the engagement plus 36 months; payment records for 8 years as required by Indian tax law; and analytics data in anonymised form indefinitely. You can request deletion at any time, subject to those legal obligations.
What rights do I have over my data?
Under the DPDP Act, 2023 and GDPR where applicable, you can access the data we hold, correct inaccurate data, request deletion, withdraw consent for marketing, object to processing based on legitimate interest, and request data portability in a machine-readable format.
Who do I contact about a privacy concern or complaint?
Contact our data protection point of contact at privacy@codevibe.in, or write to us at Unit 309, 3rd Floor, Tower A, SAS Tower, Medicity Support Area, Sector 38, Gurugram, Haryana 122001, India. We acknowledge queries promptly and keep you updated until they are resolved; if you are not satisfied, you may raise a complaint with the relevant data protection authority.