Legal

Privacy Policy

Last updated: September 2026

This Privacy Policy explains how DigiRashtra (“DigiRashtra”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you visit digirashtra.in (the “Site”) or contact us.

We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and, where applicable, as a data controller under the EU and UK General Data Protection Regulation (“GDPR”). This policy is designed to meet those frameworks and other applicable data protection laws. Because we work with clients worldwide, it applies to visitors everywhere.

1. Who We Are

DigiRashtra is a global software solutions studio that operates the website digirashtra.in. For any privacy question, or to exercise your rights, contact us at contact@digirashtra.in.

2. Personal Data We Collect

Information you provide. When you use our contact form or email us, we collect:

  • Full name
  • Company or business name (optional)
  • Email address
  • Phone number (optional)
  • Industry, budget range, and timeline (optional)
  • The contents of your message
  • The page you first arrived on, the site or campaign that referred you, and the page you were on when you opened the form, which are attached to your message
  • A record of the consent you provide when submitting the form

Information collected automatically. When you visit the Site, our hosting and security infrastructure may process limited technical data such as your IP address, browser and device type, and access timestamps, recorded in standard server logs. We also use your IP address on a short-term basis to rate-limit forms and prevent abuse.

Error and performance data. We use error-monitoring tooling to keep the Site reliable. If an error occurs, limited technical diagnostic data, which may include your IP address and browser information, is processed to help us diagnose and fix the issue.

Analytics. We use Google Analytics only if you accept analytics cookies in the banner shown on your first visit. If you reject them, or don't choose, Google Analytics is not loaded at all. If you accept, it helps us understand how visitors find and use the Site: which pages are read, how visitors arrive, their approximate location (country or city), their device type, and which pages lead to an enquiry. Google Analytics sets first-party cookies (_ga and _ga_<id>) that give your browser a random identifier and last up to two years. Google Analytics does not log or store IP addresses. We have turned off Google signals and advertising features, so this data is not used for advertising or linked to your Google account. You can change your choice at any time with the Cookie settings link at the bottom of every page, or . Rejecting stops Google Analytics and deletes its cookies.

Our hosting provider also measures page views and page speed without cookies and reports only aggregated figures.

Cookies and similar technologies. Apart from the analytics cookies above, which need your consent, the public Site uses only strictly necessary and functional storage. We do not use advertising cookies. We store your cookie choice in a cookie for 6 months, so we don't ask on every visit. If you sign in to a restricted area such as our content admin, we use an authentication cookie to keep you logged in. We also set one small preference cookie that remembers whether to show prices in Indian rupees or US dollars, based on the country your connection comes from. It holds only that choice and expires after 30 days.

We do not knowingly collect special-category or sensitive personal data through the Site. Please do not include such data in your message.

3. How We Use Your Data and Our Legal Bases

We use personal data only for the purposes below:

  • To respond to your enquiry and follow up about the project or question you raised. Legal basis: your consent (DPDP Act), and your consent or steps taken at your request prior to entering a contract (GDPR).
  • To send a confirmation email acknowledging your message. Legal basis: consent and legitimate interests.
  • To keep the Site secure and prevent abuse, including rate limiting and spam prevention. Legal basis: legitimate interests and, where applicable, legal obligation.
  • To monitor and improve reliability through error tracking. Legal basis: legitimate interests.
  • To understand how the Site is used and improve its content, through analytics. Legal basis: your consent, given in the cookie banner.
  • To comply with law and respond to lawful requests. Legal basis: legal obligation.

We do not sell your personal data, we do not use it for advertising, and we do not carry out profiling or automated decision-making that produces legal or similarly significant effects.

4. Consent and Withdrawing Consent

Where we rely on your consent, you provide it by ticking the consent box and submitting the contact form, or by accepting analytics cookies in the cookie banner. You may withdraw your consent at any time by emailing contact@digirashtra.in, and you can withdraw analytics consent yourself with the Cookie settings link at the bottom of every page. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, and we may retain limited information where another lawful basis or legal obligation applies.

5. Sharing Your Data and Our Processors

We do not sell or rent personal data. We share it only with trusted service providers (“Data Processors”) who process it on our behalf under appropriate contractual safeguards:

  • Resend for delivering contact-form and confirmation emails.
  • Supabase for database, storage, and authentication infrastructure.
  • Upstash for short-term rate limiting using IP addresses to prevent abuse.
  • Sentry for error and performance monitoring.
  • Google (Google Analytics) for measuring how the Site is used.
  • Vercel, our hosting provider, which serves the Site, maintains operational server logs, and measures page views and page speed without cookies.

We may also disclose personal data if required by law, regulation, legal process, or an enforceable governmental request, or to protect our rights, safety, or property.

6. International Data Transfers

We operate globally, and some of our service providers store or process data on servers located outside your country, including outside India and the European Economic Area. Where we transfer personal data across borders, we rely on appropriate safeguards such as standard contractual clauses or equivalent measures, consistent with the DPDP Act and Chapter V of the GDPR.

7. Data Retention

We keep enquiry data for as long as needed to handle your request and the resulting business relationship, and for a reasonable period afterwards to meet legal, accounting, or dispute-resolution requirements. Security and server logs are kept for a short period. When personal data is no longer needed, we delete or anonymise it.

8. How We Protect Your Data

We use reasonable technical and organisational measures, including encryption in transit (HTTPS), access controls, and secure infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority, including the Data Protection Board of India and any applicable supervisory authority, as required by law.

9. Your Rights

Subject to applicable law, you have the following rights over your personal data.

Under India's DPDP Act, 2023, you may:

  • Access a summary of the personal data we process about you and how we process it
  • Request correction, completion, or updating of inaccurate or incomplete data
  • Request erasure of your personal data
  • Nominate another individual to exercise your rights in the event of your death or incapacity
  • Raise a grievance with us (see Grievance Officer below) and escalate to the Data Protection Board of India
  • Withdraw consent at any time

Under the GDPR, if you are in the EEA or UK, you may also:

  • Object to or request restriction of processing
  • Request a portable copy of the data you provided
  • Lodge a complaint with your local data protection supervisory authority

Under the California CCPA/CPRA, you may request to know, delete, or correct your personal information, and opt out of any “sale” or “sharing” of it. We do not sell or share personal information, and we will not discriminate against you for exercising your rights.

To exercise any right, email contact@digirashtra.in. We will verify your request and respond within the timeframes required by applicable law. Exercising your rights is free, subject to lawful exceptions.

10. Grievance Officer

In accordance with the DPDP Act and applicable rules, you may contact our Grievance Officer about any concern regarding how your personal data is handled:

Grievance Officer, DigiRashtra
Email: contact@digirashtra.in

We will acknowledge and address grievances within the timelines prescribed by law.

11. Children's Privacy

The Site is intended for adults and is not directed at children. We do not knowingly process the personal data of anyone under 18 years of age without verifiable consent from a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, consistent with the DPDP Act. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version, and material changes will be made prominent on this page.

13. Contact

For any question about this Privacy Policy or your personal data, contact:

DigiRashtra
contact@digirashtra.in
digirashtra.in

Back to home