Privacy Policy

WebsignX Technologies Pvt. Ltd. ("WebsignX," "we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website at https://websignx.com, our mobile applications, and any related services, sales, marketing, or events (collectively, the "Services").

We operate as an IT consulting and software development company headquartered at 4th Floor, B24/C2, The Search House Building, Sector 62, Noida, UP 201309, India. We serve clients across the United States of America, United Kingdom, Australia, India, and other global markets.

Please read this Privacy Policy carefully. If you disagree with its terms, please discontinue use of our Services. By accessing or using our Services, you agree to this Privacy Policy and our Terms of Service.

2.1 Information You Provide Directly

When you interact with our Services, you may voluntarily provide us with:

• Contact Information: Full name, email address, phone number, company name, job title
• Project Information: Project descriptions, technical requirements, budget ranges, timelines and business goals you share when requesting quotes or consultations
• Account Information: Username, password and profile details if you create an account on our platform
• Communication Data: Messages, emails, chat conversations, support tickets and feedback you send us
• Payment Information: Billing name, address and payment method details (processed securely via our payment processors — we do not store full card numbers)
• Survey and Form Responses: Information you provide when completing our questionnaires or feedback forms

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device Information: Browser type and version, operating system, device type, screen resolution and unique device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website URL, and navigation patterns
• IP Address: Your Internet Protocol (IP) address and approximate geographic location (country, city)
• Cookies and Tracking: See Section 5 for full details on our cookie practices
• Log Data: Server logs including access times, request details, error logs and performance data

2.3 Information from Third Parties

We may receive information about you from:

• Social media platforms (LinkedIn, Twitter, Facebook) when you interact with our social profiles or share our content
• Business partners and referral sources
• Publicly available professional databases and directories
• Analytics and advertising partners (in aggregated, anonymized form)

We use the information we collect for the following purposes, each grounded in a legitimate legal basis:

3.1 Service Delivery and Project Execution

• Processing your service inquiries, proposals and project requests
• Delivering contracted IT development, design and consulting services
• Managing ongoing client projects, milestones and deliverables
• Providing technical support and resolving service-related issues
• Sending project updates, meeting invitations and deliverable notifications

3.2 Business Communication and Marketing

• Responding to your inquiries and contact form submissions
• Sending service announcements, newsletters and company updates (with your consent)
• Informing you about new services, case studies, blog posts and industry insights
• Conducting client satisfaction surveys and collecting testimonials

3.3 Website Improvement and Analytics

• Analyzing website traffic patterns and user behavior to improve user experience
• Identifying technical issues, bugs and performance bottlenecks
• Measuring the effectiveness of our marketing campaigns and content
• Conducting A/B testing to optimize website design and functionality

3.4 Legal Compliance and Security

• Complying with applicable laws, regulations and legal obligations in India, USA, UK and other jurisdictions
• Enforcing our Terms of Service and other legal agreements
• Preventing fraudulent activity, unauthorized access and security threats
• Maintaining records for tax, accounting and auditing purposes
• Responding to lawful requests from government authorities or courts

We do NOT sell, rent or trade your personal information to third parties for their marketing purposes.We may share your information in the following limited circumstances:

4.1 Service Providers and Sub-processors

We engage trusted third-party companies that help us operate our business and provide services to you. These may include:

• Cloud infrastructure providers (Amazon Web Services, Google Cloud Platform, Microsoft Azure)
• Email and communication tools (Gmail Workspace, Mailchimp, Slack)
• Customer Relationship Management (CRM) software providers
• Payment processors (Stripe, PayPal, Razorpay) — who handle payments under their own privacy policies
• Website analytics services (Google Analytics, Hotjar)
• Project management tools (Jira, Trello, Asana)
• Video conferencing tools (Google Meet, Zoom, Microsoft Teams)

All sub-processors are contractually required to use your information only as directed by us, maintain reasonable security standards, and keep your data confidential.

4.2 Business Transfers

If WebsignX undergoes a merger, acquisition, reorganization, bankruptcy or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and subject to a different Privacy Policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request
• Protect and defend the rights or property of WebsignX
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent, such as for case studies, testimonials, or co-marketing initiatives.

We use cookies and similar tracking technologies to enhance your experience on our website. A cookie is a small text file placed on your device when you visit our site.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function correctly. These cannot be disabled. They include session cookies, security cookies and form submission cookies.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website through aggregated, anonymized data (e.g., Google Analytics, Hotjar).
• Functionality Cookies: Enable enhanced features such as live chat, embedded videos and language preferences.
• Marketing and Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns (e.g., Google Ads, LinkedIn Insight Tag, Facebook Pixel).

5.2 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to block, delete or restrict cookies. Refer to your browser's help documentation.
• Cookie Consent: We display a cookie consent banner on your first visit allowing you to accept or decline non-essential cookies.
• Opt-Out Links: You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout and interest-based advertising at optout.aboutads.info.

Please note that disabling certain cookies may affect the functionality of our website.

5.3 Do Not Track Signals

Our website currently does not respond to "Do Not Track" (DNT) browser signals. However, you can use the cookie controls described above to limit tracking.

We implement industry-standard technical, administrative and organizational security measures to protect your personal information from unauthorized access, use, alteration, or destruction:

Technical Safeguards:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• AES-256 encryption for sensitive data stored in our databases
• Multi-factor authentication (MFA) required for all team members accessing client data
• Regular automated security vulnerability scanning and penetration testing
• Web Application Firewall (WAF) and DDoS protection
• Secure, access-controlled cloud infrastructure on AWS/GCP with SOC 2 certified data centers

Administrative Safeguards:

• Role-based access controls — team members only access data necessary for their role
• Mandatory Non-Disclosure Agreements (NDAs) signed by all employees and contractors
• Regular security awareness training for all staff
• Documented incident response plan for data breach scenarios
• Annual security audits and compliance reviews

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Client Project Data: Retained for the duration of the engagement plus 7 years for legal and tax compliance purposes
• Contact Inquiries and Leads: Retained for 3 years from the date of last contact or until you request deletion
• Marketing and Newsletter Data: Retained until you unsubscribe or request deletion
• Website Analytics Data: Retained in aggregated, anonymized form for up to 26 months
• Financial and Payment Records: Retained for 7 years in compliance with Indian Companies Act and tax regulations
• Employee and Contractor Data: Retained for the duration of employment plus 7 years
• Security Logs: Retained for 12 months for incident investigation purposes

When data is no longer required, we securely delete or anonymize it. You may request earlier deletion of your personal data (see Section 8 — Your Rights).

Depending on your location, you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request a copy of the personal information we hold about you, including information about how it is used and with whom it is shared.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information we hold about you.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.

8.4 Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances, such as while we verify its accuracy.

8.5 Right to Data Portability

You may request a machine-readable copy of your personal information to transfer to another service provider.

8.6 Right to Object

You may object to our processing of your personal information for direct marketing purposes at any time. You may also object to processing based on our legitimate interests.

8.7 Right to Withdraw Consent

Where our processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We may require you to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

WebsignX is headquartered in India and serves clients globally including the USA, UK, Australia and the European Union. Your personal information may be transferred to, stored, and processed in countries other than your own.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for EU/UK data transfers
• Data Processing Agreements (DPAs) with all sub-processors handling EU/UK personal data
• Compliance with India's Information Technology Act 2000 and the Digital Personal Data Protection Act 2023 (DPDPA)
• Ensuring destination countries provide adequate data protection through recognized mechanisms

Our website may contain links to third-party websites, social media profiles, and services that are not operated by WebsignX. These may include:

• LinkedIn, Twitter, Facebook, Instagram, and YouTube social media platforms
• Google Maps embedded on our contact page
• Third-party blog platforms or review sites (Clutch, Glassdoor, Google Reviews)
• Links to industry resources, news articles, or partner websites

We have no control over the privacy practices of third-party websites and are not responsible for their content or privacy policies. We encourage you to review the Privacy Policy of every website you visit. This Privacy Policy applies solely to information collected by WebsignX.

Our Services are intended for business professionals and are not directed to individuals under the age of 18 ("children"). We do not knowingly collect, solicit, or maintain personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@websignx.com. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information from our records.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with the following additional rights:

12.1 Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, including the sources, business purposes for collection, and categories of third parties with whom we share your information.

12.2 Right to Delete

You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (such as completing transactions, detecting security incidents, and complying with legal obligations).

12.3 Right to Opt-Out of Sale

We do NOT sell personal information as defined under the CCPA/CPRA. You therefore do not need to opt-out.

12.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. You will not receive different pricing, service quality, or levels of service as a result of exercising your privacy rights.

12.5 Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about the categories of personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year. We do not share personal information with third parties for their direct marketing purposes.

To submit a California privacy request, contact us at privacy@websignx.com.

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), the General Data Protection Regulation (GDPR) or UK GDPR grants you the following rights:

13.1 Lawful Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to deliver our contractual IT services to you
• Legitimate Interests: Processing for our business operations, marketing and fraud prevention (where your rights do not override our interests)
• Consent: For marketing communications, cookies and any other processing where we have obtained your explicit consent
• Legal Obligation: Processing required to comply with applicable laws and regulations

13.2 Data Protection Officer

While we are not currently required to appoint a formal DPO, our Privacy Officer can be contacted at privacy@websignx.com for all GDPR-related inquiries.

13.3 Right to Lodge a Complaint

If you believe we have violated your GDPR rights, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, contact your relevant national data protection authority.

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Display a prominent notice on our website homepage and/or contact page
• Send an email notification to registered users or existing clients where required by law
• Where required, seek your consent for any material changes in how we process your data

Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about our privacy practices.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us through any of the following methods:

We will acknowledge your inquiry within 48 hours and respond fully within 30 days. For complex requests or GDPR-related submissions, we may extend this timeline by an additional 30 days, in which case we will notify you of the extension.

Contact Privacy Officer