Privacy Policy

1. Overview & Data Fiduciary Details

Intallo Technologies ("Intallo", "we", "our", or "us") operates the website located at https://intallo.in and provides software engineering, operational systems development, and digital automation services. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, Intallo Technologies acts as the Data Fiduciary for personal data collected through this website.

We are dedicated to safeguarding your digital privacy and handling personal and commercial information with strict transparency, integrity, and security.

2. Information We Collect

We collect information strictly when necessary to deliver services and respond to communications:

• Project Enquiries & Contact Submissions: When you submit an enquiry via our contact form or email us at contact@intallo.in, we collect your name, business email address, company name, and project scope details.
• Security & Rate-Limiting Telemetry: To prevent abuse, spam, and denial-of-service attempts, incoming requests are checked against an irreversibly hashed IP address (generated using an HMAC-SHA256 cryptographic secret). We do not store raw IP addresses in our application database.
• Usage & Performance Analytics: We collect aggregated, non-personally identifiable browser telemetry (including approximate geographic location, device class, and referral source) to monitor system performance and improve user experience.

3. Third-Party Service Providers (Data Processors)

We partner with vetted cloud infrastructure providers to host and operate our digital services. These processors process data strictly on our instructions:

• Vercel Inc.: Edge cloud hosting, serverless compute runtime, and privacy-preserving web vitals analytics.
• Resend Inc.: Transactional email infrastructure utilized to securely dispatch project notifications to our team.
• Prisma Postgres: Managed cloud database infrastructure utilized to store validated contact enquiries and dispatch audit logs.
• Microsoft Clarity: Behavioral session telemetry and heatmap analytics to understand website usability without selling data.

We do NOT sell, rent, monetize, or trade client or visitor personal data to any advertisers, data brokers, or third parties.

4. Data Retention Policy

In compliance with the DPDP Act, personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:

• Project Enquiries: Inbound enquiry data is retained for a maximum period of twelve (12) months from the date of submission, after which it is systematically deleted, unless a contractual engagement is initiated or retention is required by Indian statutory obligations.
• Diagnostic & Rate-Limiting Logs: Rate-limiting records and transient technical logs are retained for no more than ninety (90) days.
• Immediate Deletion: Any visitor may request immediate deletion of their enquiry data at any time by contacting our Grievance Officer.

5. Intellectual Property & Commercial Confidentiality

All proprietary project requirements, workflows, and operational metrics shared during discovery consultations are held in strict confidence. For contracted client engagements, custom software built specifically for the client belongs to the client, while foundational and reusable engineering components are perpetually licensed to enable flexible hosting anywhere.

6. Rights of Data Principals (DPDP Act, 2023)

Under Indian data protection law, you hold specific rights regarding your personal digital data:

• Right to access an itemized summary of personal data held and processed.
• Right to correction, completion, and updating of inaccurate data.
• Right to erasure of personal data that is no longer required.
• Right of grievance redressal with our designated Grievance Officer.

7. Grievance Officer & Inquiries

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, please direct any data privacy questions, correction requests, or grievances to: