Privacy Policy

Last updated: 22 October 2026

This Privacy Policy explains how Gramodyami Enterprises ("we", "us") collects, uses and protects personal data when you visit gramodyami.com or contact us about our services. We follow the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 of India.

1. What we collect

• Information you send us: your name, phone number, email address, business name and project details when you contact us by WhatsApp, phone or email.
• Project information: content, images and business data you share so we can build your application.
• Payment information: transaction reference, amount and date. Card, UPI PIN and bank login details are handled by your bank or the payment gateway and are never seen or stored by us.
• Technical data: our hosting provider (Cloudflare) may process your IP address, browser type and pages visited to deliver and secure the website.

This website has no sign-up form, does not use advertising or tracking cookies and does not run third-party analytics.

2. Why we use it

• To reply to your enquiry and prepare a quotation.
• To deliver, support and invoice the services you order.
• To meet legal, tax and accounting requirements.
• To keep the website and our applications secure.

We do not sell, rent or trade your personal data.

3. Who we share it with

Only with service providers needed to run our services, such as hosting (Cloudflare), databases (Supabase), Google Fonts (fonts loaded on this website), WhatsApp/email providers and payment gateways, and with authorities when required by law.

4. Data inside applications we build

When we build an application for a client, the client decides what data it collects from its own customers or members, and the client's own privacy policy applies. We process that data only on the client's instructions and only to build, host and support the application.

5. How long we keep it

Enquiry details are kept for up to 2 years. Project and billing records are kept as long as required by tax and accounting laws. After that the data is deleted or anonymised.

6. Security

We use HTTPS everywhere, strict security headers, access controls, role-based permissions and regular backups. No method of storage or transmission is 100% secure, but we work to protect your data and will inform you and the authorities of a personal-data breach as required by law.

7. Your rights

You may ask us to access, correct or erase your personal data, withdraw consent, or nominate another person to exercise these rights. Contact our grievance officer below; we respond within 30 days.

8. Children

Our services are meant for businesses and adults. We do not knowingly collect data from children under 18 without verifiable parental consent.

9. Grievance officer

10. Changes

We may update this policy; the date at the top shows the latest version.