Privacy Policy

Welcome to Badri Webtech (online at https://badriwebtech.com/). We operate as a professional technology services firm specializing in custom web engineering, bespoke application architecture, and AI workflow automation.

We are deeply committed to protecting the confidentiality, integrity, and privacy of all personal data shared with us by clients, prospective partners, and website visitors. This policy outlines our data handling practices in strict compliance with the Information Technology Act, 2000, the Digital Personal Data Protection (DPDP) Act, 2023, and global data privacy standards.

We only collect information that is strictly necessary to communicate with you, evaluate project specifications, process authorized service transactions, and fulfill custom development contracts:

Note: We do not knowingly collect personal information from individuals under 18 years of age. Our services are directed exclusively at businesses, founders, and commercial enterprises.

We process your information strictly for legitimate commercial and operational purposes:

• Service Delivery: To design, engineer, and deploy bespoke web applications, custom e-commerce stores, and AI automations in direct fulfillment of our service agreement with you.
• Direct Project Communications: To coordinate development milestones, provide sprint updates, discuss technical architecture, answer support tickets, and schedule video calls.
• Invoicing & Transaction Management: To issue commercial estimates, formal tax invoices, and process milestone payments.
• Infrastructure & Security Monitoring: To safeguard our web applications against cyber threats, DDoS attacks, unauthorized access attempts, and technical vulnerabilities.
• Compliance: To satisfy mandatory statutory, tax, and accounting reporting obligations under Indian corporate and commercial laws.

For web design, bespoke development, and engineering service invoices paid online, we partner with Razorpay as our primary electronic payment gateway.

Razorpay is a certified PCI-DSS Level 1 compliant payment solution provider licensed by the Reserve Bank of India (RBI). Razorpay processes payment credentials in accordance with RBI tokenization directives and its own privacy guidelines. For complete details regarding Razorpay's data security framework, you may inspect the Razorpay Privacy Policy.

Data sharing is restricted strictly to the following essential scenarios:

• Trusted Infrastructure Vendors: We utilize reputable cloud infrastructure providers (e.g., enterprise hosting servers, transactional email relays, calendar scheduling tools) strictly to operate our client service workflows under confidentiality commitments.
• Statutory & Legal Mandates: We may disclose information if required to do so by a valid court order, subpoena, law enforcement inquiry, or applicable Indian statutory authority.
• Protection of Rights: Where necessary to investigate or prevent fraud, enforce our Terms of Service, or defend the legal rights, safety, or intellectual property of Badri Webtech.

Badri Webtech implements rigorous administrative, physical, and technical safeguards engineered to prevent unauthorized access, data loss, alteration, or disclosure:

• Transport Encryption: All communications across our website are encrypted using industry-standard TLS 1.3/HTTPS encryption with strict transport security.
• Restricted Access: Access to client project repositories, staging environments, and database credentials is limited strictly to authorized engineering personnel bound by confidentiality agreements.
• Credential Isolation: Any third-party API credentials, server SSH keys, or database access provided by clients for project execution are stored in encrypted credential vaults and discarded or revoked upon deployment completion.

Disclaimer: While we employ defense-in-depth security best practices, no electronic transmission over the internet or cloud storage architecture can be guaranteed 100% impenetrable. We encourage clients to follow security best practices, including two-factor authentication and role-based credential delegation.

You retain full agency over your personal information. Under applicable data protection statutes (including the Indian DPDP Act, 2023 and GDPR guidelines for international clients), you have the right to:

• Right to Access: Request a clear copy of any personal information we hold concerning you or your organization;
• Right to Rectification: Request correction or updating of any inaccurate, outdated, or incomplete personal data;
• Right to Erasure (Right to be Forgotten): Request the permanent deletion of your personal records from our active systems, subject only to statutory accounting and tax retention requirements;
• Right to Withdraw Consent: Opt out of non-essential communications or withdraw processing consent at any time.

To exercise any of these rights, simply email our team at hello@badriwebtech.com. We respond to and process all data subject verification requests within 5 business days at zero fee.

Our website uses minimal, privacy-respecting cookies and local storage tokens strictly to maintain session stability, remember user interface preferences, and analyze high-level aggregated website traffic.

Cookie Controls: You may freely configure your web browser to reject cookies, alert you when a cookie is placed, or delete existing cookies. Disabling cookies will not degrade your ability to navigate our website, read case studies, or contact us.

Our website and case study demonstrations may contain hyperlinks directing you to external third-party websites, client live stores, or developer documentation. We do not exercise editorial or technical control over external platforms and are not responsible for their respective privacy policies, tracking mechanisms, or content standards. We encourage you to review the privacy documentation of any external portal you visit.

We review and update this Privacy Policy periodically to maintain compliance with evolving statutory legislation, industry best practices, and new engineering capabilities. Any modifications will be posted directly to this page with an updated "Last Updated" timestamp noted prominently at the top of the document. We recommend periodic review of this page.