Privacy policy

Effective Date: August 04, 2025

1. Introduction

At Tech Kodainya (“we,” “our,” or “us”), safeguarding your privacy is our top priority. This Privacy Policy outlines how we collect, use, share, and protect the personal information you provide when using our websites - Tech Kodainya, platforms, APIs, and services.

This policy covers personal data we collect from:

  • People visiting our website, clients, potential clients, partners, and third-party developers
  • Users of our APIs, SDKs, or anyone submitting information through our forms or portals
  • Employees (briefly mentioned) and others whose data we process while running our business

We follow major global privacy laws, including

  • GDPR (General Data Protection Regulation)
  • UK DPA (UK Data Protection Act)
  • CCPA and CPRA (California privacy laws)
  • DPDP (India’s Digital Personal Data Protection Act)

If you do not agree with this policy, please avoid using our services.

2. Information We Collect

We collect and handle the following types of personal data based on how you engage with us:

  • Personal Details (PII): Name, email, phone number, company, role, and location
  • Account & Project Data: Login details, project information, and related communications
  • Device & Technical Info: IP address, browser type, device ID, operating system, and access time
  • Usage Logs: API activity, SDK usage, click paths, and error records
  • Communication Records: Emails, contact forms, chat interactions, feedback, and onboarding notes
  • Content You Share: Uploaded files, documents, API inputs, and user-generated data
  • Analytics: Site behavior, page visits, session tracking, and referral sources
  • Employment Data (applicants): Resumes, LinkedIn profiles, and contact information

We do not collect sensitive personal data unless it is legally required, such as for KYC or other compliance needs.

3. How We Use Your Information

Why we process personal data:

  • To run and improve our software and cloud services
  • To set up accounts and manage API/SDK access
  • To provide support and share updates or billing info
  • To answer questions or sales requests you send us
  • To monitor use for analytics and security
  • To do marketing and lead generation (with your consent)
  • To follow legal rules, audits, and court orders
  • To protect against fraud or misuse

We only use simple marketing profiling, like your interests or company details, and avoid sensitive personal profiling.

4. Legal Bases for Processing (GDPR & Global Laws)

Our data processing relies on the following legal reasons:

  • Contractual Necessity: To deliver services promised under our contract with you or your organization.
  • Legitimate Interest: To operate, secure, and optimize our services and business.
  • Consent: For optional marketing emails, non-essential cookies, or surveys.
  • Legal Obligation: To comply with applicable laws or respond to regulatory authorities.
  • Public Interest: Occasionally, to prevent crime or safeguard the public.

5. Cookies and Tracking Technologies

Our site uses cookies and similar technologies to give you a better experience. We use:

  • Necessary Cookies: For basic features like authentication
  • Analytics Cookies: To analyze usage and improve site performance
  • Marketing Cookies: For personalized ads and retargeting (with consent where needed)

We rely on tools like Google Analytics and LinkedIn Insights for light tracking. A consent banner is shown in places where the law requires it. You can update your choices anytime in your browser or on our [Cookie Settings] page.

6. Data Sharing and Disclosure

We do not sell your personal information. We share it only when necessary with:

  • Subprocessors and Service Providers: For hosting, CRM, email, analytics, and customer support (e.g., AWS, HubSpot, Mailgun).
  • Contracted Partners: For co-delivery of services, technical projects, or referrals.
  • Authorities or Legal Entities: If required by law, regulation, or court order.
  • Business Transfers: If we merge, are acquired, or restructure, we will inform you.

All third parties are carefully vetted and must follow our instructions and privacy laws when handling your data.

7. International Data Transfers

Your data may be stored or processed outside your country, including in the US, EU, UK, or other locations where our processors work.

 To protect your information, we use safeguards like:

  • Standard Contractual Clauses (SCCs)
  • Signed Data Processing Agreements (DPAs)
  • Compliance with Indian DPDP transfer rules
  • Adequacy rulings for EEA or UK

8. Your Data Protection Rights

Your rights (depending on your country) may include:

  • Accessing your data
  • Correcting wrong details
  • Asking us to erase your data (“Right to be Forgotten”)
  • Opting out of marketing or objecting to processing
  • Limiting data processing
  • Withdrawing consent at any point (if applicable)
  • Getting a copy of your data (data portability)
  • Filing a complaint with regulators (EU, UK, or India, when available)

To use these rights, email [Contact Email] with Data Rights Request.” For your safety, we may confirm your identity.

9. Data Security

To keep your data safe, we follow industry-standard security measures like:

  • Encryption of data at rest and in transit
  • Access controls based on roles
  • Secure software development processes
  • Regular audits, monitoring, and vulnerability testing

While no system can be 100% secure, we will notify you quickly if a breach impacts you, as required by law.

10. Data Retention

We keep personal data only as long as needed to:

  • Complete contracts and support projects
  • Meet legal, tax, and regulatory requirements
  • Prevent fraud or resolve disputes

Retention time depends on the data type and legal rules. Once expired, we delete or anonymize the data securely.

11. Third-Party Links and Services

Our services might include links to third-party sites or tools. We are not responsible for how those parties handle privacy or content. Always read their privacy notices first.

12. Children’s Privacy

These services are designed for adult and business use. We don’t knowingly collect personal data from children under 13 (or 16 where GDPR applies). If you believe we’ve received a child’s data by mistake, email us at hello@techkodainya.com

13. Changes to This Policy

We may update this Privacy Policy occasionally to reflect legal updates, business changes, or new data practices. If there are major changes, we will notify you through our website, email, or dashboards before they take effect. We encourage you to review this policy regularly.

14. How to Contact Us

If you need help, have questions, or want to file a complaint about this Privacy Policy or how we manage your data, please contact: