Privacy Policy

1. Introduction & Scope

Mantra Tech Fusion ("We", "Us", "Our") values your privacy and is dedicated to safeguarding the confidentiality of your personal and corporate project data. This Privacy Policy governs our data practices across our website (https://mantratechfusion.com) and our direct client service contracts, complying with the Digital Personal Data Protection (DPDP) Act, 2023 (India) and international standards including the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect information strictly for legitimate business purposes:

• Client Identity & Contact Information: Name, business email, phone/WhatsApp number, company name, and physical address provided during project inquiries, proposals, or contracts.
• Project Assets & Credentials: Technical specifications, source code requirements, staging/server credentials, and brand assets provided to facilitate development.
• Technical & Analytical Data: Anonymized IP addresses, browser user-agents, device parameters, and interaction metrics gathered via privacy-compliant analytics tools (Google Analytics, Microsoft Clarity).
• Financial & Billing Information: GST numbers, invoicing addresses, and transaction identifiers. We do not store raw credit card or bank account PINs; all payments are processed through certified PCI-DSS compliant gateways or direct bank wire transfers.

3. Purpose of Data Processing

Your data is processed strictly for the following purposes:

• Preparing custom project proposals, statements of work, and formal service contracts.
• Engineering, developing, testing, and deploying client applications and IT infrastructure.
• Sending critical project milestone alerts, invoices, and post-launch maintenance notifications.
• Defending against spam, bot intrusions, and cyber threats on our contact endpoints.

4. Third-Party Service Processors

We do not sell, rent, or lease client data to third parties. We share data only with trusted enterprise infrastructure providers strictly under confidential processing agreements:

• Cloud & Hosting Infrastructure: Hostinger, AWS, DigitalOcean.
• Payment Gateways: Stripe, PayPal, Razorpay, Authorized Banking Channels.
• Email & Communication: SMTP, Google Workspace.

5. Data Security & Encryption

We enforce enterprise-grade security protocols, including 256-bit TLS/SSL encryption for all data in transit, strict database access isolation, multi-factor authentication for development environments, and regular vulnerability audits.

6. Your Data Rights (DPDP Act & GDPR)

As a data principal, you hold the following rights:

• Right of Access & Correction: You may request a copy of your personal data and request corrections of inaccurate information.
• Right to Erasure / Deletion: You may request the deletion of your personal data upon project closure, subject to statutory tax and financial retention laws.
• Right to Withdraw Consent: You may opt out of promotional newsletters or marketing communications at any time.

7. Grievance Redressal & Contact

If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact our Data Protection and Grievance Officer: