Privacy Policy

01 Overview

Softcracy Solutions Private Limited ("Softcracy", "we", "us", or "our") is a Private Limited Company incorporated in India under the Companies Act, 2013, with Corporate Identification Number (CIN) U72900BR2021PTC055086, registered with the Registrar of Companies, ROC Patna. Our registered office is in Bihar, India, and we operate remote-first, serving clients across India and worldwide.

This Privacy Policy describes how we collect, use, process, store, and protect personal information when you visit our website at softcracy.com, use our products (such as LibOrbit and SwadMenu), apply for jobs or internships, or engage us for software development services. This policy applies to all visitors, clients, applicants, and users of our products.

By accessing our website or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our website or services.

02 Data We Collect

We collect information that you provide directly to us and information collected automatically when you use our website or services.

Information you provide directly

• Contact & project inquiries: name, email, phone, company, budget range, and project brief when you submit our contact form or email us.
• Job & internship applications: name, email, phone, resume/CV, portfolio links, cover letter, and any information in your application.
• Product accounts: name, email, password (hashed), organization details, and billing information when you create an account on our products.
• Client engagement: business requirements, technical specifications, access credentials, and content you share with us during a project.
• Communications: the content of emails, messages, and support tickets you send us.

Information collected automatically

• Device & browser: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: pages visited, time on page, referring URL, click paths, and actions taken on our site.
• Cookies & similar technologies: session cookies, authentication tokens, analytics cookies, and preference cookies (see Section 6).

03 How We Use Your Information

We use your personal information for the following purposes:

Purpose	Data Used	Legal Basis
Responding to inquiries — answering your project questions and sending proposals	Name, email, phone, project brief	Your consent
Processing applications — reviewing job and internship applications	Name, email, phone, resume, portfolio	Pre-contractual steps
Delivering services — building, maintaining, and supporting client projects	Business requirements, credentials, communications	Contract performance
Providing products — operating LibOrbit, SwadMenu, and other SaaS products	Account details, usage data, billing	Contract performance
Site analytics & improvement — understanding how visitors use our site	IP, device, usage data, cookies	Our legitimate interest
Security & fraud prevention — protecting our systems, users, and clients	IP, device, usage patterns	Our legitimate interest
Legal compliance — meeting obligations under Indian and applicable law	Identity, billing, transaction records	Legal obligation
Marketing (with consent) — sending newsletters and updates you opt into	Name, email	Your consent

04 Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable privacy laws, we process your personal data only when we have a valid legal basis:

• Consent: you have given clear, informed consent for specific processing (e.g., marketing emails, non-essential cookies).
• Contractual necessity: processing is required to deliver a contract with you (e.g., building your project, providing a product account).
• Legal obligation: we must process data to comply with Indian law, tax requirements, or regulatory obligations.
• Legitimate interest: we have a genuine business reason that does not override your rights (e.g., site analytics, security monitoring).

05 Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share information only in these limited circumstances:

• Service providers & processors: trusted third parties who process data on our behalf under written agreements — e.g., cloud hosting (AWS, GCP), email providers, payment gateways (Razorpay, Stripe), and analytics tools. These providers are bound by confidentiality and may only use your data to provide services to us.
• Product sub-processors: LibOrbit and SwadMenu each use sub-processors listed in their respective privacy notices.
• Legal & regulatory: if required by law, court order, or government authority under Indian jurisdiction, or to protect our rights, property, or safety.
• Business transfers: in the event of a merger, acquisition, or asset sale, data may transfer to the successor entity — you will be notified via email and this page before any such transfer.
• With your consent: any other sharing requires your explicit, informed consent.

06 Cookies & Tracking Technologies

Our website uses cookies and similar technologies to operate the site, remember your preferences, and understand how you use it. Cookies are small text files stored on your device.

Type	Purpose	Duration	Required?
Essential	Session, authentication, security, theme preference	Session / 1 year	Yes — site won't work without them
Analytics	Understanding page views and usage	Up to 1 year	No — can be disabled
Preference	Remembering your theme (dark/light), language	1 year	No — but improves experience
Marketing	Tracking campaign performance (only if enabled)	30 days	No — only with consent

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling essential cookies may affect site functionality. We honor browser Do Not Track (DNT) signals where applicable.

07 Data Retention

We keep your personal data only as long as necessary for the purposes described in this policy:

• Contact inquiries: up to 24 months after your last contact, then deleted or anonymized.
• Job & internship applications: up to 12 months after the role is filled, unless you consent to longer retention for future opportunities.
• Client project data: for the duration of the engagement plus the retention period in your contract (typically 6 years for tax and legal records in India).
• Product accounts: while your account is active. After deletion, we remove personal data within 30 days, except where retention is required by law.
• Server logs: 30 to 90 days for security and debugging.
• Backups: up to 90 days, after which they are overwritten.

When retention periods end, we securely delete or irreversibly anonymize your data.

08 Security

We take reasonable technical and organizational measures to protect your personal data:

• Encryption in transit: all connections use TLS 1.2+ with 256-bit encryption.
• Encryption at rest: databases and backups are encrypted on cloud-hosted infrastructure.
• Access controls: role-based access, least-privilege principle, and multi-factor authentication for administrative systems.
• Secure development: code reviews, dependency scanning, and OWASP-aligned practices.
• Regular audits: infrastructure and access reviews on a scheduled basis.
• Incident response: a documented process for detecting, containing, and notifying you of data breaches as required by Indian law.

Despite our efforts, no system is 100% secure. If a breach occurs that is likely to harm you, we will notify you and the relevant authorities within 72 hours, as required under the DPDP Act, 2023.

09 Your Rights

Under the DPDP Act, 2023 and applicable privacy laws, you have the following rights regarding your personal data:

1. Right to access: request a copy of the personal data we hold about you.
2. Right to correction: ask us to correct inaccurate or incomplete data.
3. Right to erasure: request deletion of your data, subject to legal retention requirements.
4. Right to withdraw consent: withdraw consent for processing that relied on consent, at any time.
5. Right to data portability: receive your data in a structured, machine-readable format.
6. Right to object: object to processing based on legitimate interest, for direct marketing, or for research.
7. Right to grievance redressal: file a complaint with us first, and with the Data Protection Board of India if unresolved.

To exercise any of these rights, email info@softcracy.com with the subject "Privacy Request". We respond within 30 days. There is no fee for reasonable requests; we may charge a reasonable fee for excessive or repeated requests.

10 Children's Privacy

Our website and services are intended for businesses and professionals aged 18 and older. We do not knowingly collect personal data from children under 18. For our internship program, applicants must be at least 18 years old and provide their own consent. If you believe we have collected data from a child, please contact us immediately and we will delete it.

11 International Data Transfers

Our servers are primarily hosted in India (AWS ap-south-1, Mumbai) with backups in other regions. When we work with international clients or use global processors, your data may be processed outside India. We only transfer data to countries that provide an adequate level of protection, or under contracts that include appropriate safeguards in line with the DPDP Act, 2023.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or product features. When we do:

• We will update the "Last updated" date at the top of this page.
• For material changes, we will notify you by email (if we have your address) and post a prominent notice on our website at least 7 days before the change takes effect.
• Continued use of our website or services after the effective date constitutes acceptance of the updated policy.

We recommend reviewing this page periodically.

13 Contact & Grievance Officer

If you have questions, requests, or complaints about this Privacy Policy or your personal data, contact our Grievance Officer, Mrs Kiran:

If we cannot resolve your concern, you have the right to lodge a complaint with the Data Protection Board of India. We will always try to resolve issues directly first.